Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer
File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer (raw, json)
Hash identifier: rVtZ3z/V/j5IEiV792SpGnWaU7hSkeaR02E5m2wVC9Y=
Subject key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 184AAADEDEB5B9325A18D8264FEA65092EE40E43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 18 Dec 2024 09:11:34 +0000
Certificate not after: Wed 17 Dec 2025 09:16:34 +0000
Subordinate resources: IP: 160.25.176.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:4a:aa:de:de:b5:b9:32:5a:18:d8:26:4f:ea:65:09:2e:e4:0e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 18 09:11:34 2024 GMT
Not After : Dec 17 09:16:34 2025 GMT
Subject: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:ab:ec:97:ce:eb:1b:74:f3:40:4d:09:eb:
3d:df:3e:60:ea:4f:e4:e6:8e:b3:19:17:ed:a1:fb:
9b:ca:16:f5:49:ca:94:d6:00:dc:0e:cb:8c:a3:c5:
9b:bd:da:87:6a:69:74:62:d8:ff:53:11:49:52:50:
e4:f4:71:35:1a:41:b3:bd:11:82:07:67:40:dc:c9:
9c:1d:f1:ef:50:cb:cf:f9:02:a4:25:4b:92:8f:20:
e9:62:de:38:95:1d:11:ab:a3:a0:59:b6:cf:c7:e8:
c3:08:38:76:38:15:dd:b8:05:bf:69:29:78:4b:20:
b9:cf:70:cf:ef:6a:cb:0b:d9:13:28:de:b5:a3:84:
9a:08:ea:db:e1:c7:ab:29:f4:39:24:f0:b4:42:9c:
ee:bc:b2:63:dc:f9:58:38:97:0c:59:82:3d:8c:ad:
6d:4c:5b:16:86:e8:8e:e5:62:8b:be:f2:ce:bd:4f:
23:72:d0:dd:d5:09:08:10:5e:79:3b:31:9b:59:88:
63:3d:fd:ff:9c:15:10:d9:8d:b7:2c:f4:93:8d:15:
38:be:4c:99:d9:43:c8:ee:aa:1c:18:f2:23:51:95:
6b:55:56:39:e9:83:50:56:39:12:11:f7:e4:c9:33:
54:fd:80:27:19:54:a1:60:27:fc:ed:64:c1:5b:53:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.176.0/23
Signature Algorithm: sha256WithRSAEncryption
79:f5:74:5d:a3:2c:62:ee:b0:d2:e3:77:77:51:af:80:54:0b:
14:09:71:24:db:bb:9f:5f:a9:64:6f:c6:7e:61:49:9d:07:d5:
eb:28:77:ea:d8:10:98:8f:23:02:15:e0:42:d0:2c:5b:31:03:
a8:88:fd:a4:b8:b0:27:96:5d:91:ed:fd:24:95:44:34:79:e7:
56:12:f0:4b:b5:f0:4e:9a:82:63:39:d1:ab:c5:98:4e:e5:0d:
a8:e2:42:6a:d4:fd:40:3d:2e:82:31:5a:30:0d:f4:2b:bb:c2:
45:6e:23:28:92:58:af:8f:23:ab:73:57:6a:84:a1:8d:dd:ab:
71:b0:90:27:46:38:01:77:28:5a:05:14:4c:c3:d1:e6:9c:ed:
5f:11:cd:ba:70:9f:bd:6f:00:61:f0:52:a4:f7:45:2c:08:28:
01:c4:24:5c:fc:a8:39:d7:47:02:c2:42:7d:ee:4e:f7:81:54:
ac:c7:ef:1a:65:88:7e:e3:6e:20:9a:8c:57:07:aa:f8:7f:ef:
0f:96:e5:b2:a0:0e:36:2d:f9:86:a7:1d:65:ef:aa:10:7a:45:
87:e2:9f:4b:2f:54:6c:9d:9b:dc:ee:ef:c9:20:a0:4b:92:e3:
4a:58:de:c2:1e:fc:c6:97:91:41:ab:8e:13:cb:ce:5e:63:a1:
ec:78:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:56:10 2025 by rpki-client