
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer (raw, json)
Hash identifier: h7MquOsEviOM8eZeTvKP9GBtEK+2lhepd/LNLdb8Mh4=
Subject key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 31393574A345E9025C2458D8659CEBE7B24690D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
caRepository: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 23 Apr 2026 06:48:36 +0000
Certificate not after: Thu 22 Apr 2027 06:53:36 +0000
Subordinate resources: IP: 103.159.202.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:39:35:74:a3:45:e9:02:5c:24:58:d8:65:9c:eb:e7:b2:46:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 23 06:48:36 2026 GMT
Not After : Apr 22 06:53:36 2027 GMT
Subject: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:7d:e6:11:98:3a:06:8a:99:9a:1b:36:21:
a9:35:a1:50:ad:1b:5b:26:92:10:eb:36:66:04:d7:
27:39:bc:e3:91:35:ad:c8:2c:09:5e:7a:c8:09:a9:
ed:3f:36:2d:2b:01:e0:8d:fb:da:1f:49:62:61:55:
a8:f7:ed:5c:30:f3:80:f4:7e:43:3d:01:08:af:8d:
0c:1c:83:a9:55:a2:3f:ae:d6:69:9b:45:2d:02:39:
5d:4d:eb:a9:d6:87:9d:af:90:dd:45:a0:53:68:82:
17:37:d0:34:79:bf:a5:b7:87:e0:87:7b:c4:0e:75:
54:68:01:f0:fe:8a:fd:b2:7a:f8:9f:a3:d0:ff:47:
9b:04:42:f0:c6:8f:31:63:54:ee:6f:52:c4:e1:91:
db:e0:a1:ae:62:ae:48:44:da:56:71:cc:d0:dc:a4:
fe:e9:0a:c0:06:fe:0b:4a:d1:6d:d0:12:f2:1c:d3:
06:8d:f3:06:6d:65:d9:65:34:45:e1:fd:2b:ce:86:
09:23:d2:16:e9:ed:05:53:77:ea:61:44:a8:24:b7:
1b:97:19:2e:06:4b:b0:32:b4:9a:65:eb:2d:ee:4f:
86:04:dd:ca:f1:2a:3f:e7:0b:7d:15:7d:e6:6a:54:
ef:c7:15:f4:74:74:47:3d:4b:74:f4:dc:98:0c:9a:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.202.0/23
Signature Algorithm: sha256WithRSAEncryption
26:3e:81:6a:43:0a:57:21:0e:e0:9d:07:b8:6b:09:cf:a7:d4:
8d:0a:31:1e:70:03:75:07:d6:a0:cc:ad:1d:86:d6:2c:3f:f3:
ce:33:33:52:4f:f6:9a:38:61:74:6c:73:86:93:eb:a6:25:21:
25:5e:59:ea:11:2f:49:ad:15:1a:cf:fb:34:ca:5d:f8:35:c4:
8b:76:4f:9f:e3:36:08:64:d5:b0:52:5c:7a:b0:83:67:4d:26:
82:58:d1:48:10:79:2a:41:86:9c:ae:d7:00:52:a4:f3:51:90:
12:f1:6e:e0:68:bc:e3:d7:54:be:e2:e8:d4:1a:99:22:74:50:
ab:ca:fe:10:4f:a6:46:09:a1:8e:a5:83:58:29:c5:2a:9d:b3:
0f:d2:d9:b5:8a:10:2e:4e:6c:1a:b3:af:f6:04:8a:ca:17:95:
64:36:8b:4b:72:46:74:34:ba:ea:79:d9:02:c8:fc:1c:c7:0e:
42:24:02:54:a8:1a:4d:4f:47:cc:30:04:d7:ac:fe:4b:53:4b:
e1:4d:6d:75:6a:ab:90:a0:8a:15:02:e2:ce:56:8b:ee:4a:bf:
2b:63:e9:67:3b:61:f7:3a:cf:08:15:f0:f9:51:12:7e:4f:9b:
52:76:db:2c:c9:db:e7:0c:62:ec:c4:81:be:2a:b2:b6:42:9e:
d5:ca:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:01:39 2026 by rpki-client