Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer (raw, json)
Hash identifier: 9wpAvltstlGZPpbKaWNOrEPJCjvJAnK9JEqpzs1YI/w=
Subject key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3613FF574550FAA69A8BC33BC2DC6EF832341186
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
caRepository: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 24 Apr 2026 18:01:11 +0000
Certificate not after: Fri 23 Apr 2027 18:06:11 +0000
Subordinate resources: IP: 103.159.112.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:13:ff:57:45:50:fa:a6:9a:8b:c3:3b:c2:dc:6e:f8:32:34:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 24 18:01:11 2026 GMT
Not After : Apr 23 18:06:11 2027 GMT
Subject: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:17:2a:f0:c0:e4:9a:4d:23:d7:78:c7:7f:51:
43:47:c5:7b:01:ee:da:0b:2f:0d:43:bd:24:da:0b:
9b:50:61:1f:2b:3c:be:5b:24:d4:7c:5c:2e:c0:21:
de:41:6d:48:e5:7f:f2:29:51:59:71:aa:1c:3c:90:
5d:c0:84:bd:08:4c:62:c0:a6:e4:c9:66:ac:ab:3d:
9a:4a:f8:89:26:1e:70:06:43:47:a5:69:60:02:11:
6b:a0:9d:38:f6:0e:4f:53:bd:6a:51:55:21:e5:fb:
f3:7c:ec:e3:21:d6:07:a0:76:f2:fb:59:ca:31:35:
28:34:af:61:d0:c3:d4:92:4f:91:e1:59:c8:71:b4:
9e:19:17:8f:3a:e3:95:80:70:18:64:72:31:4e:bd:
8d:70:57:e7:b9:ac:25:c7:f2:46:e2:9a:c3:6c:22:
a0:58:5b:44:5f:d0:a2:0d:b6:f6:44:a9:e2:7f:16:
a9:79:b1:a3:56:6f:b5:97:90:1a:9f:0c:f9:1a:43:
13:0b:5e:99:0c:87:f1:93:b9:3e:da:c4:96:38:91:
17:a7:03:dc:d0:4c:cb:1b:dd:0d:bd:eb:20:8b:0f:
24:fe:9e:e7:8f:dc:ed:70:86:de:71:10:9b:48:fc:
f2:da:29:be:dc:5e:f4:51:16:79:24:74:0a:a3:7f:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.159.112.0/23
Signature Algorithm: sha256WithRSAEncryption
15:8e:d6:95:66:48:84:7a:bb:9e:63:da:2d:03:a1:a4:b8:f4:
da:8f:e6:d7:89:5c:09:c6:c1:44:0f:7b:1a:fe:91:84:b1:2d:
d5:8b:67:fb:d8:ad:16:fd:b7:91:d8:c0:47:dc:3f:c9:b3:02:
e7:f1:79:33:0f:39:60:4b:6b:0b:1f:18:d9:bf:d9:cb:d1:45:
fc:0d:f6:64:f7:fd:b7:0a:4f:13:74:45:b3:79:e1:8b:bd:61:
23:c6:07:3f:5b:4c:0c:81:fd:1a:c9:92:e5:be:0f:67:af:d8:
4f:9f:02:28:29:8b:a4:2f:8e:6f:ea:85:81:99:cc:6b:40:62:
29:ea:53:1f:83:9e:f4:b8:b3:37:9a:c6:ff:33:58:ed:14:c4:
be:00:7f:6e:95:30:0e:67:b6:af:80:e8:9a:9b:25:e8:3f:e5:
6c:7e:8d:c0:41:da:40:b7:19:46:cc:87:60:62:e2:de:9f:96:
26:3c:03:77:00:08:6d:53:4a:47:12:d7:01:75:2b:24:90:20:
34:e5:88:7e:8e:11:8d:8c:a9:4b:94:da:7a:f0:f9:ed:48:86:
fd:01:32:1d:3e:16:8f:a0:1b:2c:d4:71:2e:e8:a2:23:18:7b:
3e:b0:52:a9:77:d8:3c:c9:20:26:1a:a9:27:54:27:fc:30:51:
70:3d:26:cd
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUNhP/V0VQ+qaai8M7wtxu+DI0EYYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQyNDE4MDExMVoX
DTI3MDQyMzE4MDYxMVowMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBB
RjlERDU4NDdBOThCQ0UyNkM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPoXKvDA5JpNI9d4x39RQ0fFewHu2gsvDUO9JNoLm1BhHys8vlsk1HxcLsAh
3kFtSOV/8ilRWXGqHDyQXcCEvQhMYsCm5MlmrKs9mkr4iSYecAZDR6VpYAIRa6Cd
OPYOT1O9alFVIeX783zs4yHWB6B28vtZyjE1KDSvYdDD1JJPkeFZyHG0nhkXjzrj
lYBwGGRyMU69jXBX57msJcfyRuKaw2wioFhbRF/Qog229kSp4n8WqXmxo1ZvtZeQ
Gp8M+RpDEwtemQyH8ZO5PtrEljiRF6cD3NBMyxvdDb3rIIsPJP6e54/c7XCG3nEQ
m0j88topvtxe9FEWeSR0CqN/LNUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKAOniHukyfwWTCvndWEepi84mxmMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hMTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExOThmN2Y4
LWU3MTUtNGI3OS1hZjMyLTJlNTE1NDFhMzRmZi8wL0EwMEU5RTIxRUU5MzI3RjA1
OTMwQUY5REQ1ODQ3QTk4QkNFMjZDNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnn3AwDQYJKoZIhvcNAQELBQADggEBABWO1pVmSIR6u55j2i0DoaS49NqP5teJ
XAnGwUQPexr+kYSxLdWLZ/vYrRb9t5HYwEfcP8mzAufxeTMPOWBLawsfGNm/2cvR
RfwN9mT3/bcKTxN0RbN54Yu9YSPGBz9bTAyB/RrJkuW+D2ev2E+fAigpi6Qvjm/q
hYGZzGtAYinqUx+DnvS4szeaxv8zWO0UxL4Af26VMA5ntq+A6JqbJeg/5Wx+jcBB
2kC3GUbMh2Bi4t6fliY8A3cACG1TSkcS1wF1KySQIDTliH6OEY2MqUuU2nrw+e1I
hv0BMh0+Fo+gGyzUcS7ooiMYez6wUql32DzJICYaqSdUJ/wwUXA9Js0=
-----END CERTIFICATE-----
Generated at Sun Jul 19 00:13:02 2026 by rpki-client