Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer
File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.cer (raw, json)
Hash identifier: J1xmH/cHbhTSoJ0cTCGb3cIav0yFu/4yI6xF5frSoYs=
Subject key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 17223567E9A26ADD254739B16A52A80617C2F611
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 10 Dec 2024 19:22:56 +0000
Certificate not after: Tue 09 Dec 2025 19:27:56 +0000
Subordinate resources: IP: 160.25.157.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:22:35:67:e9:a2:6a:dd:25:47:39:b1:6a:52:a8:06:17:c2:f6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 19:22:56 2024 GMT
Not After : Dec 9 19:27:56 2025 GMT
Subject: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:2c:7d:94:04:70:3a:0d:7a:10:79:b0:c7:
ac:f2:d5:0d:14:9a:5d:bf:34:34:ca:54:aa:25:38:
aa:49:0b:df:80:a8:64:9e:5c:1b:21:3a:65:c4:ed:
3e:8c:c7:09:fb:f9:e9:27:b7:11:2b:d4:14:04:ff:
a4:91:ce:c8:73:07:ad:c6:ef:c2:06:34:14:99:c1:
89:ef:c3:d7:23:90:85:29:49:b3:f8:7e:06:4c:c6:
3e:bc:da:e8:7d:60:ce:28:e4:0b:ff:0b:9f:23:7b:
49:77:cd:0b:28:57:f4:82:80:6b:49:f8:e8:83:d8:
77:d7:6e:c4:d1:4c:ce:ca:cf:3a:59:eb:e8:02:20:
96:a1:c9:8e:fc:66:d8:70:2b:00:a9:e9:b1:0e:b6:
ba:f2:60:0a:14:f1:19:d0:5b:8e:7f:fd:35:d6:8a:
86:19:b0:dd:79:20:a2:fe:00:23:01:45:30:57:3f:
0e:23:47:2f:fa:b3:55:36:29:8c:a6:07:21:b7:82:
87:86:1f:37:ff:6a:bd:a6:72:15:91:04:94:c0:e5:
ac:43:e0:06:2f:f6:f8:e5:56:65:1d:cc:43:5a:dd:
fb:8a:a6:e6:cc:be:c7:00:c6:2f:2b:18:07:7e:14:
90:8d:52:a6:39:ce:a4:d0:a6:98:0c:59:3a:8c:f9:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.157.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:35:22:9a:81:48:12:0f:8f:61:c7:e8:e0:72:ba:34:50:68:
4b:e7:a3:97:d6:33:f4:38:fc:e6:85:cd:f4:40:29:65:97:ce:
3c:dd:35:6a:73:80:54:ac:49:7c:42:68:69:f0:10:5f:25:ae:
7d:f1:06:a8:98:73:e9:bb:0d:cb:76:c1:b9:56:ee:1e:ec:6e:
0c:33:f3:4a:fe:b2:81:bb:96:3a:59:74:1e:96:0a:ff:d0:c1:
a1:ea:cf:19:fc:0b:26:94:2c:cd:b9:ea:57:d8:44:ff:93:6c:
5e:59:b8:1f:3b:64:24:43:26:44:b7:f4:99:a5:25:ff:6f:e4:
de:8e:b4:e9:02:29:3b:d6:8c:05:6c:fc:6a:10:6f:e7:4f:eb:
e7:be:8d:2f:ae:87:c8:a8:31:94:1d:63:94:e8:cc:c0:ec:1f:
78:d8:09:69:ee:9f:90:90:27:42:48:49:c8:40:2f:5a:89:e3:
91:2f:56:f2:8f:af:94:1f:47:1a:58:9a:77:bb:00:21:15:22:
5b:72:b7:a7:54:7f:ff:c3:50:06:41:46:76:e5:a0:75:e9:03:
18:38:5f:6d:7e:84:cd:a2:ab:f4:35:f8:02:a7:ed:c1:69:48:
f0:94:ec:cd:d6:3d:a7:a4:d1:46:4a:d3:26:bd:07:8a:d6:63:
33:c7:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:06:15 2025 by rpki-client