Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer (raw, json)
Hash identifier: HmIKfpgTYyOPsjxe2wR2r7+qpYN6RuT4dx5Tl9qvHuU=
Subject key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 38B9099BD016254A2B6F2D437410534849490A7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 22 Apr 2026 03:53:11 +0000
Certificate not after: Wed 21 Apr 2027 03:58:11 +0000
Subordinate resources: IP: 101.0.4.0/22
IP: 103.12.28.0/22
IP: 2400:fb00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b9:09:9b:d0:16:25:4a:2b:6f:2d:43:74:10:53:48:49:49:0a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 22 03:53:11 2026 GMT
Not After : Apr 21 03:58:11 2027 GMT
Subject: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:1e:69:6a:2c:4d:cc:5f:40:47:0c:ad:ec:
56:b2:9b:d2:d6:e8:7d:62:bc:41:f0:8d:79:44:16:
a6:10:d1:4a:5f:53:fa:31:e3:4c:0d:92:e9:d6:4c:
0e:c1:d8:e8:78:b3:f4:9f:1e:e8:81:96:ba:88:94:
f0:40:ef:f1:31:f8:9a:77:f1:41:30:dc:12:8a:8c:
39:61:88:93:09:2d:97:50:14:31:60:86:43:59:19:
3b:05:ea:3f:e8:56:7c:42:8b:b3:c7:3d:72:14:f8:
a9:f1:ad:64:3c:aa:59:55:3c:5b:df:6e:66:d5:b9:
f1:1b:4b:bf:00:a1:1d:43:68:84:8c:df:b2:8a:28:
9d:2c:96:54:7a:ed:cc:a3:a2:c3:6a:14:77:15:d7:
ac:e6:4d:43:a0:41:7a:90:fb:7c:b6:0a:76:9f:e1:
80:d9:2f:1e:7c:5b:cf:b1:03:12:2e:de:f2:c1:46:
12:53:d7:0e:9b:a5:c1:c2:4f:32:b5:2a:ce:f1:9a:
3a:b4:05:73:9e:a4:1e:c4:a9:46:37:c3:e2:69:93:
7f:64:28:a4:fc:8a:2b:de:e6:10:19:29:7b:07:47:
52:79:45:b8:ec:1a:56:b9:7a:fa:95:31:3b:a3:b7:
dd:1c:08:bc:02:20:a0:4b:e7:09:7c:9e:b1:0b:29:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.0.4.0/22
103.12.28.0/22
IPv6:
2400:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
0e:38:cc:74:aa:b5:f5:85:4b:8c:7e:5f:bf:52:bf:fa:b3:f1:
87:99:2a:a3:d1:fd:b5:d6:b3:55:d4:81:4c:a4:dd:d8:d7:33:
10:44:b4:f6:0b:b3:3d:23:85:ff:42:54:ae:35:de:53:43:ee:
76:72:a3:f0:00:e5:a5:0e:0a:95:c6:0d:56:e1:ec:95:99:ac:
41:14:35:29:51:40:4d:7e:dc:a1:4e:c5:fe:cf:ce:08:74:79:
f6:36:f6:e6:a1:a8:2a:8a:c8:bf:43:d3:ca:10:23:1e:e1:2a:
49:d6:29:3b:9a:57:65:56:44:1a:9d:63:8c:c8:5f:30:2a:d6:
c4:8e:94:0e:6f:d2:c0:70:57:56:93:b6:34:95:f8:cb:d6:40:
0d:37:12:d4:86:e5:34:7d:cd:fc:c6:b6:2a:8f:26:22:5d:be:
af:d1:a9:7b:64:9a:95:2f:e9:c3:7a:b9:58:fa:10:4c:25:eb:
62:1b:a9:b2:c2:c1:66:20:b5:96:bb:c3:4e:d8:b4:ba:84:e6:
fc:47:a2:9a:ae:ab:a3:36:08:08:9d:80:4f:70:f9:5e:48:a6:
48:7e:76:3d:b9:d7:2f:f5:e8:b4:1c:57:57:95:44:8a:8c:c9:
38:0d:7c:7b:d1:80:c2:77:eb:ca:a6:f6:22:05:ea:b6:6d:cf:
cd:f6:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:26 2026 by rpki-client