Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer
File: 871B4235DFC56C482416E7BBA192562092FFE055.cer (raw, json)
Hash identifier: HooGniedoMV3ESLQWS6MD6wr4WQtE5FSKWrmpPhVz8I=
Subject key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 6486B7C3E33C89C6C24E2D02C103A0FCC844C8AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 18 Feb 2025 11:23:53 +0000
Certificate not after: Tue 17 Feb 2026 11:28:53 +0000
Subordinate resources: IP: 157.20.92.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:86:b7:c3:e3:3c:89:c6:c2:4e:2d:02:c1:03:a0:fc:c8:44:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 18 11:23:53 2025 GMT
Not After : Feb 17 11:28:53 2026 GMT
Subject: CN=871B4235DFC56C482416E7BBA192562092FFE055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:60:e8:27:ac:2a:94:fc:6b:2f:84:a4:43:50:
49:df:35:d9:36:42:31:5a:93:c1:f2:1b:36:cf:20:
54:89:b3:ce:43:dc:26:d0:67:40:1e:c1:c5:ec:e1:
8e:d1:26:e2:85:7b:5c:7b:f1:24:60:fb:bb:87:0f:
f5:82:7e:af:1e:8b:e0:19:6c:56:c6:f7:b7:81:97:
22:20:2a:38:eb:52:79:e2:38:6b:da:53:69:9f:ef:
2c:4b:0b:8f:68:6b:3a:40:36:00:ff:a3:9a:4a:06:
57:de:ae:6f:eb:10:3a:44:1a:33:88:a5:cb:ab:a1:
0c:77:b6:a7:a6:36:e5:31:62:d0:dc:00:52:b6:09:
03:dc:9a:2d:8b:80:cc:30:e3:f6:97:3c:84:a1:69:
45:4c:f1:41:16:00:7a:21:58:be:93:f3:1e:65:63:
d6:57:68:5c:44:80:70:a7:2f:ae:64:cf:51:62:75:
b2:1c:07:4a:63:3b:f6:fa:7a:61:f4:15:a3:82:6b:
1c:2b:59:0b:d4:9f:98:2f:0c:82:1b:fd:30:5d:25:
69:69:b2:ae:74:43:b9:13:38:b7:11:92:61:7a:09:
e8:84:2c:29:2c:bb:ac:df:2b:10:92:52:eb:0c:36:
df:0a:dd:46:f1:04:2f:0a:3a:01:e0:32:35:2b:e1:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.92.0/23
Signature Algorithm: sha256WithRSAEncryption
33:88:3e:1a:37:33:74:66:de:f4:3d:9e:13:f7:d5:fe:d0:e1:
26:ab:20:60:a6:da:00:e7:c2:e0:a2:23:46:b1:44:58:39:aa:
15:52:7d:46:ef:b0:fa:ad:23:4d:f9:2d:49:07:bb:80:7e:8c:
12:e0:6f:49:91:26:e1:2c:d8:bc:57:de:db:60:81:e6:f8:f7:
d9:47:4f:50:a1:e9:41:6f:31:94:76:01:e0:b2:55:f3:e5:ed:
db:8b:56:2d:09:9f:26:9e:c2:f6:5b:86:86:22:f0:34:93:83:
92:53:84:a3:78:cd:49:ef:44:7d:18:dd:9c:42:e6:b6:ee:c1:
d3:d1:97:39:c4:82:4d:ed:75:07:3e:92:30:00:46:a6:f4:6d:
42:eb:85:30:b0:d4:2b:4b:87:82:b0:6a:dc:d4:b5:35:1f:a7:
92:20:e8:7c:27:37:a6:d0:d9:99:95:5a:ca:61:9e:3c:f1:77:
ec:6b:61:6f:81:ad:82:8b:14:df:da:56:d3:22:c9:8e:0f:0d:
67:94:84:f7:87:5a:c0:19:74:4a:1a:c5:84:94:2a:0e:9d:1d:
83:f3:b6:0e:7a:21:a3:3e:9f:81:a0:01:42:aa:68:64:8d:4e:
19:a5:4c:f6:5f:eb:d8:75:e2:5d:44:2b:18:10:74:db:1d:49:
97:b9:ed:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:28 2025 by rpki-client