Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer
File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer (raw, json)
Hash identifier: xZ/85bN2w2l/2duKbDDDla9dL07gQqgOChYqrRkGDxk=
Subject key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 1E565E7B00A328B5120CB25D48A026CA2E3A7E64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft
caRepository: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 06 Mar 2025 12:27:44 +0000
Certificate not after: Thu 05 Mar 2026 12:32:44 +0000
Subordinate resources: IP: 157.20.212.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:56:5e:7b:00:a3:28:b5:12:0c:b2:5d:48:a0:26:ca:2e:3a:7e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 6 12:27:44 2025 GMT
Not After : Mar 5 12:32:44 2026 GMT
Subject: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:dc:00:cd:cb:f9:15:95:5a:84:02:aa:99:
6b:67:f7:45:84:26:7f:3a:b8:ec:d3:bc:8d:bb:7d:
4f:32:ec:39:ec:75:08:3b:70:98:e5:a3:5f:b8:d5:
6e:50:8e:8a:ce:be:6c:cd:97:e3:02:eb:f0:d5:97:
f0:30:c9:da:96:b3:13:e0:ac:72:6c:06:59:c1:30:
ca:86:a4:d7:ae:62:fb:49:28:81:db:43:c6:7d:4a:
37:2b:ea:8d:eb:11:52:75:33:5e:15:a1:0a:5c:60:
df:f8:41:80:7d:9d:65:c3:ee:54:62:57:ea:1a:3b:
e1:a4:65:62:70:05:39:29:6c:e8:57:eb:dd:d3:58:
e9:b8:56:7c:37:3e:98:d4:67:c8:f2:c8:66:e8:5c:
95:af:72:ec:8d:4f:a4:73:a0:0d:02:9b:af:12:4f:
1c:7f:1e:0b:6a:56:cc:0c:88:ad:d9:76:30:f4:be:
85:80:02:94:54:7a:be:80:80:44:25:72:f5:ee:d8:
f1:75:8f:33:fa:2e:26:e1:48:35:df:19:c0:3c:cb:
1f:ef:ea:09:70:03:8f:43:c8:c5:19:36:98:9f:46:
4f:ea:86:fe:36:9b:b0:0d:c9:ad:73:5e:a9:ce:a4:
d4:df:24:b5:a7:b1:5c:10:c6:5b:52:f0:af:dc:44:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.212.0/23
Signature Algorithm: sha256WithRSAEncryption
00:51:aa:08:be:03:ed:b0:e0:fb:4b:4f:66:03:18:d8:4e:94:
40:31:e8:78:d6:5e:21:7f:26:fb:71:6a:d9:55:a6:db:04:83:
be:ed:25:a6:43:60:03:26:3d:cf:8d:33:f3:d6:2f:8f:e2:03:
e4:3a:12:31:c4:30:62:65:29:66:8b:35:b2:6f:64:b7:4c:13:
d0:79:63:1f:e9:89:d5:d4:18:fb:13:73:d2:ae:ce:b0:13:c3:
71:9c:c6:c1:56:6e:e8:31:7a:a1:1d:06:83:fc:02:a9:0d:bc:
56:d4:ce:ca:8f:56:1a:89:2b:50:99:a0:82:f4:aa:9f:d4:94:
11:fe:00:97:b8:5e:ef:4a:45:1a:b2:2e:74:c0:1f:43:7c:bc:
eb:0e:bb:5c:22:0b:08:6b:d4:18:a6:d9:64:7d:d6:c4:68:a8:
45:a2:f5:65:e3:d0:e7:f5:ab:be:92:0a:44:46:bb:ed:38:4a:
99:92:09:54:0b:e5:9e:94:d4:dc:8a:e3:09:ea:7d:ee:c7:b1:
0c:51:33:36:c9:fe:21:71:74:5c:cc:38:db:f3:b8:0e:4a:af:
84:55:1b:dc:87:54:ed:17:c2:98:5e:86:67:a1:ff:92:c7:ba:
3a:22:cb:b1:f1:40:01:91:cd:eb:6f:b3:52:db:3f:83:1d:98:
ef:18:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:30:05 2025 by rpki-client