Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer
File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer (raw, json)
Hash identifier: FgydhSWrxoWoZY9jzfljSCx6hhZjdyKlwwOgQOMo1rs=
Subject key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 189AF5602F61AB301188F05566AF47432C7B3131
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 26 Nov 2024 02:39:49 +0000
Certificate not after: Tue 25 Nov 2025 02:44:49 +0000
Subordinate resources: IP: 160.191.180.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9a:f5:60:2f:61:ab:30:11:88:f0:55:66:af:47:43:2c:7b:31:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Nov 26 02:39:49 2024 GMT
Not After : Nov 25 02:44:49 2025 GMT
Subject: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5c:fe:05:cb:8b:2b:07:42:55:e0:88:69:7a:
5f:0d:9d:9f:91:cc:56:7a:60:e9:e4:6c:5b:9c:c3:
10:e6:a2:68:75:1e:28:61:68:22:66:5c:70:a5:a8:
6f:ec:b7:57:20:ca:34:ac:49:b2:b4:05:42:a9:1c:
48:d7:60:bf:98:e8:9a:2e:f5:f5:f6:a1:d3:72:2b:
a8:18:78:5d:dc:11:dd:93:36:f6:e1:80:8f:dc:6e:
c3:50:00:95:04:9d:6f:88:3e:3f:78:83:24:c5:a7:
2d:ae:d2:86:c5:88:ab:67:3e:9b:06:75:b5:9d:62:
65:de:80:88:e6:aa:44:bb:19:33:37:be:27:35:13:
87:65:0e:d0:92:7e:a4:54:01:39:fe:f6:77:e8:15:
ac:64:0a:15:c5:df:ab:03:2d:90:00:71:16:93:83:
a9:b3:68:8f:0d:54:11:79:d6:1b:81:e8:7f:c0:61:
40:00:19:54:02:a7:22:5b:ff:5d:2f:75:94:65:3c:
4b:83:b4:16:20:d6:30:e6:4c:47:84:b6:81:55:66:
4e:d0:9a:0b:3b:5d:a7:1e:75:44:40:6e:ce:ac:c9:
24:c7:5a:f2:36:e7:d0:a2:82:ae:53:09:7b:1d:54:
c9:aa:de:af:cc:f2:d8:45:43:67:bf:bc:72:17:b5:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.180.0/23
Signature Algorithm: sha256WithRSAEncryption
40:88:9f:b3:87:b9:b9:3a:41:1e:9d:0c:8b:fb:77:09:26:f8:
21:52:5c:e1:a9:22:98:c4:47:7a:04:fd:00:fc:dd:c4:e3:7c:
d0:2f:7f:19:4f:1b:be:b3:b9:0d:93:1e:dd:65:19:24:98:8d:
f8:ab:d5:3f:3e:74:5b:62:aa:46:8d:6f:c2:6f:0d:1d:41:40:
79:b0:85:4b:50:5c:3c:4d:09:df:5b:5c:22:13:f0:24:c4:2e:
9d:f2:25:fb:45:fe:54:f4:71:9b:24:6f:35:d2:c7:bb:4c:6b:
d8:00:ee:98:9a:a7:84:a4:c1:8f:3b:f5:0c:d0:17:0c:dc:9c:
e7:c1:a5:ef:cb:2e:e8:51:c5:fa:65:ac:09:c1:ee:dc:99:16:
a7:cc:ee:52:31:7a:63:41:0a:ba:69:71:3c:44:56:22:13:9f:
95:a4:5c:ae:ae:44:f4:3e:fb:0b:f0:bf:af:03:f2:28:65:d7:
e4:1b:68:79:93:30:19:0e:3a:db:f9:a6:e5:92:d7:9f:fd:fe:
c8:ec:06:c4:bd:41:95:28:5d:17:98:f3:f9:9b:2d:31:4c:ea:
8b:29:d7:75:e3:f1:9e:6e:d1:b6:f0:d7:5a:23:59:22:65:fa:
a2:22:11:68:9e:0f:26:10:ba:66:7e:4a:e2:c5:d1:24:ab:c7:
6d:17:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 23 04:59:49 2025 by rpki-client