
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer (raw, json)
Hash identifier: 7vSNPiyNLXU26NUznT8kmUorNt3X5taf73qVr6Cy+B0=
Subject key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 1F17DD3E8D2A0D5E20200FB62F2027D72C8CAFE6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
caRepository: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 04 Dec 2024 07:42:52 +0000
Certificate not after: Wed 03 Dec 2025 07:47:52 +0000
Subordinate resources: IP: 160.191.235.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:17:dd:3e:8d:2a:0d:5e:20:20:0f:b6:2f:20:27:d7:2c:8c:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 4 07:42:52 2024 GMT
Not After : Dec 3 07:47:52 2025 GMT
Subject: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:25:03:7f:14:33:d2:91:e0:bb:9f:7d:f5:
b6:cc:03:ba:32:28:84:7b:92:76:48:76:8d:03:3d:
b1:23:d0:c1:7f:dc:dd:6a:3a:85:5d:3d:d2:02:ea:
4c:a7:e0:50:55:30:bf:6b:e5:22:16:4b:e0:79:65:
2e:7c:aa:e1:35:b9:d1:cc:aa:c7:a2:41:85:c8:17:
0e:41:f1:cf:98:ff:86:9a:e2:cd:97:95:e6:c9:5d:
f5:ef:32:05:e1:5d:0d:a6:89:bf:1d:36:bb:fb:bc:
80:ce:8a:02:80:fb:ca:42:41:b5:09:80:1f:cb:f7:
c3:6c:5f:56:c6:c9:fd:68:2d:3b:54:46:49:1e:86:
2a:e6:a2:7b:0f:dd:82:ce:de:c4:00:b8:b0:71:7e:
47:5c:62:e6:de:59:f4:09:e2:a3:8c:a9:e2:1f:37:
32:20:f6:16:63:ca:c9:af:c0:a0:8e:73:d6:09:5c:
ba:42:fa:62:53:e4:46:af:00:27:9b:69:e6:30:03:
7f:0c:6e:74:f5:45:3d:f8:81:95:f8:a4:2f:81:34:
9f:46:6c:59:b1:cb:6b:51:ed:73:90:3c:5d:c1:a4:
c6:9f:1f:bd:86:ba:1c:d1:c4:00:e1:cb:50:bc:45:
48:62:ea:83:1e:30:0a:f8:9c:e5:9a:8d:20:af:0f:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.235.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8e:53:3a:c8:f9:4b:2d:10:07:2a:ab:be:ef:67:d1:9f:7c:
31:88:e7:39:d5:71:6a:7e:f5:57:81:1f:84:4d:61:f4:13:ec:
92:d2:af:fb:d2:40:6b:33:7f:dd:0c:f9:db:67:38:03:30:7e:
19:55:8a:72:93:58:df:71:af:52:a4:98:87:da:a8:2b:f4:b7:
06:50:05:de:81:74:7c:ab:d2:fc:6f:9c:b0:cb:bd:28:ec:12:
27:4b:96:bc:b2:2c:70:e9:c0:92:3e:21:5d:b4:0d:2f:57:f4:
9f:a2:2c:c6:b3:75:37:a6:c9:c0:25:8f:11:16:1b:2d:58:de:
b7:5e:32:3d:d3:36:68:bf:d0:cd:f5:00:d5:83:fe:11:2c:69:
ab:e2:06:00:19:df:9a:02:ac:13:76:bd:6e:e6:56:f2:e5:15:
b6:13:61:e9:2d:ac:61:7a:24:c2:34:04:1b:e2:23:2a:fa:6e:
10:92:a4:a0:ba:f8:2a:d4:b6:8d:66:e2:2d:c5:59:59:a3:d7:
bb:09:ea:e6:80:a7:38:9c:46:de:cf:35:84:d8:d8:e5:54:2a:
18:89:21:9b:e6:65:ec:29:9d:45:e8:6d:78:d5:15:60:5a:6a:
00:10:91:82:27:9b:ed:fe:e8:01:bc:af:0b:2d:d0:29:1e:07:
cb:eb:92:a2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUHxfdPo0qDV4gIA+2LyAn1yyMr+YwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIwNDA3NDI1MloX
DTI1MTIwMzA3NDc1MlowMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2
NDdBQzg2QjE0QkIyN0U0MzBDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMoEJQN/FDPSkeC7n331tswDujIohHuSdkh2jQM9sSPQwX/c3Wo6hV090gLq
TKfgUFUwv2vlIhZL4HllLnyq4TW50cyqx6JBhcgXDkHxz5j/hprizZeV5sld9e8y
BeFdDaaJvx02u/u8gM6KAoD7ykJBtQmAH8v3w2xfVsbJ/WgtO1RGSR6GKuaiew/d
gs7exAC4sHF+R1xi5t5Z9Anio4yp4h83MiD2FmPKya/AoI5z1glcukL6YlPkRq8A
J5tp5jADfwxudPVFPfiBlfikL4E0n0ZsWbHLa1Htc5A8XcGkxp8fvYa6HNHEAOHL
ULxFSGLqgx4wCvic5ZqNIK8PJgMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFIswFnzaIP5+3PxkeshrFLsn5DDIMB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8zM2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRm
LTM4MjMtNDhhZi05NTNkLWFhYTg3M2IwZmI2YS8wLzhCMzAxNjdDREEyMEZFN0VE
Q0ZDNjQ3QUM4NkIxNEJCMjdFNDMwQzgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACgv+swDQYJKoZIhvcNAQELBQADggEBAGOOUzrI+UstEAcqq77vZ9GffDGI5znV
cWp+9VeBH4RNYfQT7JLSr/vSQGszf90M+dtnOAMwfhlVinKTWN9xr1KkmIfaqCv0
twZQBd6BdHyr0vxvnLDLvSjsEidLlryyLHDpwJI+IV20DS9X9J+iLMazdTemycAl
jxEWGy1Y3rdeMj3TNmi/0M31ANWD/hEsaaviBgAZ35oCrBN2vW7mVvLlFbYTYekt
rGF6JMI0BBviIyr6bhCSpKC6+CrUto1m4i3FWVmj17sJ6uaApzicRt7PNYTY2OVU
KhiJIZvmZewpnUXobXjVFWBaagAQkYInm+3+6AG8rwst0CkeB8vrkqI=
-----END CERTIFICATE-----
Generated at Sun Feb 23 04:34:43 2025 by rpki-client