
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
File: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer (raw, json)
Hash identifier: LPzC3H73+iMnQCf+yrPAqsCYRSz2xs0w8oKniEibdeA=
Subject key identifier: 26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 34B0CA5D2A88564D925B9B0811855EBC66F67EFB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
caRepository: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 27 Feb 2025 19:51:51 +0000
Certificate not after: Thu 26 Feb 2026 19:56:51 +0000
Subordinate resources: IP: 157.20.188.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b0:ca:5d:2a:88:56:4d:92:5b:9b:08:11:85:5e:bc:66:f6:7e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 27 19:51:51 2025 GMT
Not After : Feb 26 19:56:51 2026 GMT
Subject: CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:73:e8:1f:41:b5:5d:a2:03:37:7b:01:69:
51:c6:37:b2:ac:7b:23:bd:3b:6a:b8:bf:27:1b:04:
e6:88:ab:be:ad:a2:d6:f4:62:0e:0c:71:67:9c:b6:
ef:45:01:f9:27:ef:94:42:a6:72:c9:09:4b:45:52:
00:f7:fe:af:f5:cf:78:e6:6d:b8:26:fb:e9:dc:f4:
1a:ef:83:9b:99:59:a8:28:20:ba:d4:7a:48:1c:12:
ee:41:76:19:a5:73:75:02:ac:c0:56:35:91:65:8d:
1b:01:2a:af:3d:eb:a0:c8:5d:6a:cc:80:ee:55:f7:
2d:b3:cc:e8:26:ac:e7:e8:03:70:88:44:dd:df:20:
19:2a:2b:46:2f:c2:21:4f:ea:cc:e5:f0:6f:62:88:
63:f5:df:0d:1e:ba:83:61:8c:ec:09:15:e3:42:77:
06:bf:e4:88:cb:fa:2d:bb:f1:76:7a:f8:97:90:f6:
0d:58:34:e8:62:f8:77:ea:83:bf:9f:d1:54:60:65:
fb:b4:e1:a1:a7:c6:f5:f0:98:3a:55:ed:af:59:e6:
59:89:c3:e2:b6:08:29:54:8d:f4:e8:45:52:51:1b:
64:25:26:1b:6f:45:d9:31:68:b4:be:e6:47:51:52:
83:ec:82:2a:0b:35:ff:04:9d:c0:97:31:2a:57:8b:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.188.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:85:aa:b3:26:54:24:64:4d:3f:23:d6:1d:5c:41:ef:57:9b:
4c:58:39:a7:e2:c8:cf:50:cf:ab:29:e4:db:0a:cb:cc:fd:08:
8c:6d:62:a6:12:10:01:d6:c8:83:1b:8a:c0:3c:eb:fd:d4:9c:
15:d3:d7:8f:5e:24:2d:4b:ce:50:1f:b1:e9:12:e1:ae:87:2f:
3c:5a:a0:00:98:49:f4:b1:23:4f:b2:55:3d:da:8e:cf:0c:3e:
bd:72:d2:60:98:a8:82:70:c4:35:a4:ab:c0:94:33:ca:cb:df:
f1:eb:e2:e7:5c:11:46:1c:bc:39:22:d5:65:92:3f:d5:53:cc:
f4:01:04:10:5c:49:44:7b:0f:a2:19:25:30:4e:5c:99:34:d2:
43:7d:33:45:d6:22:d3:29:d5:b6:68:6b:45:c8:64:68:5b:30:
90:f8:a2:96:dc:de:d0:47:4a:28:6f:0d:b5:d3:db:f9:9c:24:
89:24:eb:48:cd:ea:1a:81:93:72:64:9b:dc:24:96:66:a7:10:
79:15:8a:d4:26:4e:4b:3d:c5:6c:a6:8c:07:8d:0c:9b:71:ad:
de:ac:70:73:f5:3e:dd:a2:2f:27:94:61:7f:4b:57:a5:fb:85:
be:23:80:f5:f0:27:ef:ea:da:32:e0:64:d7:1b:53:32:0b:6c:
5b:7a:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:28:16 2025 by rpki-client