
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer (raw, json)
Hash identifier: 99uiDls3XIemtRgL6KLA+m5vtTdFVTXusB/0W7r0/ts=
Subject key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 724FDA3A3DEE8322379A56532418AA79842C34D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
caRepository: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 22 Apr 2026 17:46:31 +0000
Certificate not after: Wed 21 Apr 2027 17:51:31 +0000
Subordinate resources: IP: 103.171.30.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4f:da:3a:3d:ee:83:22:37:9a:56:53:24:18:aa:79:84:2c:34:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 22 17:46:31 2026 GMT
Not After : Apr 21 17:51:31 2027 GMT
Subject: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:3d:4d:8d:31:4d:42:33:0f:8a:b0:36:ad:
17:d1:19:9d:aa:d2:02:f0:6b:2a:d0:21:5f:da:2c:
eb:e0:ab:60:3d:e8:e0:9b:6a:76:4a:64:b2:75:fc:
db:aa:c0:2b:31:f3:34:db:be:8a:30:d8:66:0c:80:
57:79:11:5b:23:06:b9:ef:97:9b:0f:b3:16:7d:84:
7f:b7:78:92:3b:4f:fb:57:c5:6a:27:d2:d7:e5:1b:
f6:63:3d:4b:be:fa:c8:30:31:b5:35:42:be:a7:60:
67:9e:61:e6:ba:37:21:a0:c7:5c:e9:8d:d1:87:a5:
a9:26:8c:0b:86:00:c9:1d:a4:74:5c:9e:e3:32:bd:
a8:24:ef:da:6e:9a:c9:db:b5:d3:99:cc:8c:04:71:
24:aa:0c:03:61:f5:82:72:eb:98:bc:bf:08:34:e9:
68:95:a9:ce:e0:df:9a:6b:a5:dd:85:eb:36:cf:8e:
c8:c9:a5:ef:6c:0c:a1:f9:8e:17:a8:cf:bc:c8:b7:
e5:11:0d:02:5b:e6:ff:f9:3f:24:fb:08:38:71:40:
31:41:b4:44:bc:68:3b:eb:0f:45:21:22:21:62:a9:
e6:fa:d5:5d:3e:cb:ea:f6:fe:a8:70:b8:05:05:01:
2a:8c:12:df:bb:5d:3d:43:2b:6a:c0:41:f5:a6:c5:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.30.0/23
Signature Algorithm: sha256WithRSAEncryption
04:98:35:31:22:b3:a0:78:be:d4:e8:2b:ab:81:bb:8f:e4:02:
91:79:c2:49:b1:b7:f3:c2:3c:dd:52:af:15:43:0a:98:4c:5b:
48:61:87:da:6d:93:5c:f3:13:d0:cb:74:ac:18:40:ea:35:6f:
5e:25:6a:e9:1a:1a:96:f7:05:1e:a9:a0:6f:17:05:37:51:8f:
6d:16:aa:72:6b:28:5a:5b:ac:bf:ce:2b:e6:2d:d4:02:20:44:
99:b6:fb:4d:d0:64:56:7b:d4:bf:84:ae:48:5a:33:55:ff:c4:
ee:e5:ed:87:69:b7:e3:83:07:65:99:81:b9:94:3c:d8:47:49:
85:4d:9d:6f:b9:41:e7:7d:99:11:cb:2f:d6:26:03:3c:d2:88:
e1:47:c2:b8:a2:41:5b:4d:83:aa:8c:42:b2:54:5b:b5:a9:3a:
53:fc:b6:f5:7b:70:a0:23:4e:09:79:ea:78:53:2e:d2:8f:a1:
af:61:0c:81:b9:6c:09:3b:fb:a0:47:1b:27:4f:ea:f4:83:0c:
57:0f:63:25:49:28:d1:98:a8:20:d1:8d:76:ac:21:39:b7:57:
4f:f5:c1:55:98:f1:0a:22:dd:27:1c:f5:03:19:55:b9:76:27:
34:f3:13:cf:a3:b7:26:57:b3:a8:7a:3f:3a:25:ad:df:f4:6c:
35:b2:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:01:35 2026 by rpki-client