Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer
File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer (raw, json)
Hash identifier: Yu1h1JnQRAbaVTj7dOU2K8irEuvWjEaIE9TCNB27vm8=
Subject key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 5266936DA88D2B07BAED179F53CFFC8E088DA409
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 05 Nov 2024 07:28:37 +0000
Certificate not after: Tue 04 Nov 2025 07:33:37 +0000
Subordinate resources: IP: 160.187.174.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:66:93:6d:a8:8d:2b:07:ba:ed:17:9f:53:cf:fc:8e:08:8d:a4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Nov 5 07:28:37 2024 GMT
Not After : Nov 4 07:33:37 2025 GMT
Subject: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:0d:23:be:bf:83:4b:c9:71:e4:6f:e0:b7:
51:da:fb:ea:f5:25:4a:a0:0a:e4:ab:ad:83:c1:3a:
ff:48:7a:df:e4:c6:83:5a:5c:51:2d:d3:18:d8:fb:
42:b1:78:5f:90:b3:d4:43:2c:5a:22:49:fa:87:03:
d9:e2:02:86:c2:ae:9a:f2:26:9e:8e:9d:2c:f2:b4:
ce:12:f1:6b:f0:1b:69:8b:4d:11:bd:62:ab:4b:7f:
82:55:74:8b:7a:86:6a:6f:0b:5d:56:aa:f9:7f:c5:
80:bc:47:2c:d9:b2:8b:ec:52:03:24:0d:44:26:f8:
0d:59:cf:c0:b5:ae:8c:38:54:3e:31:c2:f4:97:49:
6e:09:a1:f4:15:af:49:1b:af:22:78:5a:66:a2:27:
8d:9d:55:34:f2:db:06:c9:fb:7a:1a:c6:b9:45:b2:
f3:d0:02:64:cc:73:40:76:26:f8:9e:43:0e:1a:bc:
a1:5a:9d:af:53:97:65:ba:69:c5:2d:ce:5b:b6:88:
c8:9b:af:8e:8d:0c:29:73:09:6f:c6:8c:a4:59:cd:
85:c0:c0:5d:34:1d:47:42:6e:fe:c7:3f:13:b0:d4:
eb:4d:96:24:27:2e:33:90:e2:53:6e:ff:70:27:aa:
d4:4a:fe:9e:5d:12:cd:c7:e6:a9:3e:bd:a7:1f:ba:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.174.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b3:b8:7a:9c:d4:e1:a3:4d:9f:a5:5f:47:74:b3:af:06:cd:
3a:fd:27:b8:d6:13:0a:e3:2d:a7:ae:89:55:af:90:5d:cc:05:
24:e7:06:d6:0f:57:1e:5d:41:2c:83:bd:ea:b5:78:b2:ae:1d:
57:55:6d:10:09:a0:43:e8:35:00:0b:0b:22:06:61:fe:ed:3f:
d7:f1:f3:9f:38:92:33:c9:c9:8e:8a:5b:f7:c4:8e:25:3f:5d:
22:4a:28:2e:b4:9c:28:50:19:7e:09:5d:f4:df:4e:95:27:2a:
8a:45:9e:67:1b:a9:36:4d:b5:35:08:e5:0f:e0:df:f9:0a:90:
20:2f:e4:25:66:98:33:86:15:fe:2f:a7:0e:19:9f:94:25:8c:
d9:48:7c:f5:c6:1f:ed:56:ed:6f:ad:e9:ed:85:bf:9f:4c:c4:
d1:d3:bc:49:fa:c4:09:89:a1:de:4b:af:c4:3d:c2:f3:7c:d1:
3d:50:34:f6:5f:33:dd:49:d4:f7:d7:dc:8c:39:4d:ca:2b:92:
a3:88:a7:95:2c:b4:24:a9:23:2c:9c:05:2f:ac:ec:61:8a:66:
a5:f6:0f:e9:0b:fb:b2:ae:03:c7:fa:8e:58:eb:17:dc:d6:df:
a7:c6:e0:4a:45:a0:f6:a4:db:55:c9:ff:75:c3:e3:da:08:9d:
20:b9:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:47 2025 by rpki-client