Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer
File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer (raw, json)
Hash identifier: yuQEyh5SYUGMwc41P00I2byV3knn2GVcKHrFiAD0qGY=
Subject key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7A4BC7F3FA346A8A0492EEFDC32E4A020DACCC7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft
caRepository: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 21 Apr 2026 10:43:04 +0000
Certificate not after: Tue 20 Apr 2027 10:48:04 +0000
Subordinate resources: IP: 103.147.118.0/23
IP: 2001:df2:9480::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4b:c7:f3:fa:34:6a:8a:04:92:ee:fd:c3:2e:4a:02:0d:ac:cc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 21 10:43:04 2026 GMT
Not After : Apr 20 10:48:04 2027 GMT
Subject: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:6b:fe:c4:08:5a:79:34:9a:51:71:9f:e2:
95:b7:35:0c:39:26:8a:ff:0d:48:ea:10:0c:cc:fd:
5e:e3:9a:6f:bb:64:7e:a5:23:db:92:60:29:4f:38:
0d:42:08:05:b9:36:5f:89:44:32:34:06:aa:65:7c:
76:d0:15:9b:6b:61:79:c2:df:16:36:31:9a:d7:7f:
cc:4c:e3:43:79:5d:33:53:91:68:7b:98:be:1c:25:
ea:3c:78:56:cd:33:cf:f6:71:22:bd:5e:db:5e:f6:
00:24:3f:c1:99:90:65:80:60:f0:d6:8b:d5:5a:9b:
2c:b4:2d:6d:3b:cb:a7:49:c7:6b:49:f8:9d:b6:5f:
31:46:c1:82:bb:24:8d:28:02:26:68:3a:8e:56:91:
df:be:fd:2a:f8:17:c8:d4:24:a5:2b:ec:a5:42:54:
2e:fd:4b:0e:0a:2d:0c:fe:c6:f5:c5:8a:6a:a1:c7:
92:27:04:27:d8:ee:f1:6e:fd:d3:32:bb:37:18:ea:
11:6b:ff:21:3a:91:8f:d1:78:ac:31:27:e5:3b:89:
89:fa:a4:56:e8:70:11:04:66:bb:78:a0:74:c2:a9:
cf:b3:92:8f:de:0b:15:91:38:8c:bc:4a:1b:08:fa:
8e:ce:03:96:e9:b4:74:a9:ed:7a:cb:09:05:99:0d:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.118.0/23
IPv6:
2001:df2:9480::/48
Signature Algorithm: sha256WithRSAEncryption
5c:7c:cd:f7:cd:5f:a4:ba:dd:b1:ce:53:28:17:64:33:0f:13:
c5:8a:e9:c4:b4:a9:55:94:a2:18:11:5f:4d:04:35:af:2b:f0:
2c:2a:26:5e:57:79:f3:2b:0d:5c:5e:79:6d:9b:79:c5:8f:0b:
06:d2:1e:66:24:fc:b6:9d:9f:d3:98:60:9f:93:88:68:16:43:
8a:ab:40:cc:4e:bf:b5:80:af:bc:d6:3f:dd:75:e2:5c:3c:bd:
92:68:dc:72:c1:8c:f3:1b:f5:8b:30:7d:ed:0f:ff:ef:a1:8c:
a2:26:ab:85:dd:24:a8:6d:61:c8:f7:c1:fc:63:1b:80:fe:69:
6e:9c:fe:3d:b4:64:27:29:84:ad:12:e7:24:9a:fa:7a:54:9e:
cd:0e:1b:42:b8:fc:a2:86:51:62:3a:c7:72:27:8d:3e:39:99:
25:ac:51:48:88:24:2e:36:c7:29:74:78:5a:b4:d5:d4:eb:76:
09:50:e4:de:de:e6:ea:24:fd:ba:36:73:ea:e0:2a:98:06:7c:
85:ee:31:0a:80:b6:e7:3a:87:1b:a6:58:ee:b1:c2:6a:df:ea:
80:30:00:ff:9f:d1:2c:c3:a7:29:09:b3:5a:c0:8f:c4:c1:39:
51:45:d1:2a:ba:3f:16:87:e8:28:3e:bb:e2:8e:49:09:4b:f4:
7a:f2:6a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:01:09 2026 by rpki-client