Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.cer
File: 867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.cer (raw, json)
Hash identifier: jwGEv8gS6QFHqPGhQ3HX/rN3Im0BV8QUIEupu+bBu2Y=
Subject key identifier: 86:7B:F4:F1:FA:29:E8:4E:1A:C2:A6:6B:EE:A8:65:24:F4:14:02:B0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 191AA27E1CF2F41E6EC17ADAE54EAEFF89A4AF0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.mft
caRepository: rsync://repo-rpki.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 20 Apr 2026 09:12:43 +0000
Certificate not after: Mon 19 Apr 2027 09:17:43 +0000
Subordinate resources: IP: 163.128.238.0/23
IP: 2001:df6:efc0::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1a:a2:7e:1c:f2:f4:1e:6e:c1:7a:da:e5:4e:ae:ff:89:a4:af:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 20 09:12:43 2026 GMT
Not After : Apr 19 09:17:43 2027 GMT
Subject: CN=867BF4F1FA29E84E1AC2A66BEEA86524F41402B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:5f:fa:f4:03:2a:c1:89:d1:09:3a:3b:91:
64:7f:2d:3d:ef:4f:64:b1:ff:43:5f:a1:8b:75:d8:
ca:7d:70:1c:45:29:32:82:d9:d8:d1:10:ea:6b:20:
22:9c:dc:e8:05:17:02:6f:4b:ae:32:ee:c8:41:d6:
13:00:c0:af:98:b1:7f:f5:0d:31:b1:80:ec:2e:a4:
5a:f0:a5:24:14:8f:2a:2c:a1:7b:fe:d8:3c:89:bb:
e4:1a:d6:65:fd:ad:7d:d4:38:e0:29:dc:e9:83:17:
c9:b1:7a:87:51:2d:ad:30:49:f2:3c:bf:a8:ad:8e:
04:9a:34:c4:4e:74:da:4e:01:bc:a9:2e:1a:4a:f1:
32:b7:32:5c:4f:fb:21:47:6f:79:bf:1e:52:af:46:
11:33:fc:2b:38:e9:99:09:25:49:bf:6f:fa:ff:ea:
78:52:cd:8c:73:f5:19:71:6e:a6:5f:aa:c2:d7:fc:
41:d1:49:7c:7d:03:99:1c:a9:e7:25:57:7f:fb:49:
dd:33:f0:46:32:54:a1:81:f7:45:e0:77:2b:a6:ae:
66:ba:a5:b6:a8:97:fe:d7:73:1b:ec:7b:d9:9f:42:
a7:15:c0:7d:f7:39:87:ee:90:2d:11:fb:49:85:e3:
49:b0:16:95:52:3b:ea:0a:bf:78:a7:37:ec:de:27:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
86:7B:F4:F1:FA:29:E8:4E:1A:C2:A6:6B:EE:A8:65:24:F4:14:02:B0
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.128.238.0/23
IPv6:
2001:df6:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
79:f9:f9:81:ac:00:10:02:04:2c:4b:c2:57:de:d0:21:34:b2:
40:36:b8:23:07:ea:9a:12:13:79:ee:84:b4:f2:df:ca:f7:3b:
f5:7c:e4:1a:2c:e3:7a:1a:4f:44:b5:7d:6a:3b:0a:8a:b0:12:
10:d6:9c:b0:9e:c0:08:c0:e1:f1:e5:40:4b:02:39:33:7f:5e:
86:9c:5d:3a:f8:35:8f:63:4a:7a:fa:07:58:0d:2c:cc:08:fe:
ee:03:a4:53:af:d7:2a:73:17:22:31:5e:7f:f9:61:d6:77:b0:
b7:f9:b1:6c:dc:fa:6b:0f:8d:6d:40:b1:bd:be:c6:03:73:6c:
82:6b:86:97:a1:ee:5c:92:d5:35:f0:53:c0:3a:71:f5:c0:db:
00:f7:3e:d7:57:cf:41:29:fe:d4:9c:33:1d:c7:76:45:a3:9f:
33:e1:a9:31:55:84:a8:29:bd:90:10:39:d4:eb:b2:45:06:59:
bf:01:b3:2d:e2:ff:9d:c9:5d:90:f4:76:52:e0:05:05:cc:45:
ae:80:48:46:62:3d:8c:74:2a:c3:66:74:57:54:9f:6f:a6:b8:
7a:87:ba:45:82:53:05:22:ff:93:54:d2:e7:1b:f0:c2:f0:ba:
96:79:b7:cd:dd:65:dc:bb:83:e7:c6:90:31:45:44:b8:15:31:
54:6b:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 02:59:17 2026 by rpki-client