Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
File: D0C90407CCD53717DFEA21D51A8921F20564AB25.cer (raw, json)
Hash identifier: fVq1kY99PfIWM3xSE0PZ+UENyrIm40REYkRJe8pvuKM=
Subject key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 66E99F35CD90EF445E6E764526F829E5ABFBA7C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
caRepository: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sun 19 Apr 2026 19:18:55 +0000
Certificate not after: Sun 18 Apr 2027 19:23:55 +0000
Subordinate resources: IP: 103.10.136.0/22
IP: 114.199.80.0/20
IP: 202.47.64.0/20
IP: 202.52.8.0/22
IP: 202.58.216.0/21
IP: 2402:fc00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e9:9f:35:cd:90:ef:44:5e:6e:76:45:26:f8:29:e5:ab:fb:a7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 19 19:18:55 2026 GMT
Not After : Apr 18 19:23:55 2027 GMT
Subject: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:75:25:53:b0:00:78:46:6a:0d:cb:7f:b6:
f7:4d:72:71:fa:e5:a9:2f:e4:d2:8b:95:e2:02:ed:
fc:57:c5:e1:bb:be:8a:ed:3e:46:b9:14:9e:81:d4:
33:b2:ff:ea:a8:ad:f2:d6:bf:40:8c:74:97:33:7c:
b1:d3:9e:bb:c3:92:62:7c:5e:20:31:d3:3f:12:b3:
8c:b6:9e:e0:b5:cb:f4:e8:2c:d5:d4:30:70:f2:f6:
eb:d9:64:16:47:fb:87:12:af:db:d0:a0:a7:31:cc:
10:b5:c2:ac:96:ff:d4:a7:ee:3f:74:24:3d:cb:0e:
62:00:dd:6a:99:0e:05:99:5a:d6:15:2d:0a:65:f7:
d2:b1:bc:03:85:74:c3:14:0f:a5:78:aa:04:bf:64:
bf:63:63:77:0b:32:47:bf:0d:1f:1e:4a:da:b3:cc:
3b:37:6e:0a:38:f0:7b:03:4c:bf:c7:88:1b:bc:fc:
fc:22:15:f0:6d:39:6f:76:2e:27:e6:69:a9:bc:7f:
73:45:63:f3:eb:71:8b:f3:70:d2:fa:4e:e0:f0:00:
a7:5d:40:ab:22:a0:79:75:df:25:c8:9b:0a:5d:b8:
2f:19:dc:77:e2:46:a8:94:1d:f8:98:a5:a0:35:f9:
31:00:19:29:56:4a:56:be:0a:1e:5e:a5:51:5e:fe:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.136.0/22
114.199.80.0/20
202.47.64.0/20
202.52.8.0/22
202.58.216.0/21
IPv6:
2402:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
7e:ed:df:73:a5:b5:a2:5f:d4:6a:15:a7:57:c3:63:c8:ae:f1:
d9:20:33:8e:40:ea:d7:c4:98:37:b4:9d:11:89:be:3a:14:e0:
55:a0:c1:d8:2e:de:4d:7a:64:be:59:8b:57:3b:3e:2d:de:6d:
de:e5:38:50:ef:4c:a9:5c:87:bf:de:26:d1:6c:4f:4f:9f:8b:
a7:12:a6:3f:87:04:17:fc:e2:a1:43:7b:b3:0d:97:fd:9f:52:
db:f9:c5:6e:05:ee:ec:d8:16:1e:a1:5d:73:f0:16:30:fa:f0:
ff:31:06:b4:3e:92:f3:fb:2f:a9:6e:83:50:1b:21:16:6f:5b:
dc:76:c5:02:de:6d:60:98:2b:1d:f3:79:e3:23:ed:93:1a:0c:
a9:36:bf:a4:a3:30:b2:97:2a:d7:f4:9f:30:6b:7d:37:70:70:
16:99:af:9c:8c:9f:7a:76:c6:b7:db:a4:45:88:27:d1:cc:8f:
a4:75:9d:bc:5e:11:6c:7e:57:ef:14:ca:6d:b6:d9:9e:76:ab:
c0:7c:0b:54:32:64:24:2f:26:79:69:7e:55:40:62:1d:28:e1:
7a:2b:b4:d3:8e:3c:49:27:74:1f:6e:2f:ac:58:1e:2e:bd:b7:
ea:f7:4f:d6:50:b3:e7:04:a6:c1:f8:3c:24:99:14:9e:32:86:
9d:5c:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:29 2026 by rpki-client