
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer
File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer (raw, json)
Hash identifier: mGdkJEHs3TDLJeHDbk6uurqwHLlqeoVMYpCML0Il+b8=
Subject key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 444FCF31D1614BDD3D053F3520F407F2C8FB2542
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
caRepository: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 29 Aug 2024 17:21:23 +0000
Certificate not after: Thu 28 Aug 2025 17:26:23 +0000
Subordinate resources: IP: 160.22.198.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4f:cf:31:d1:61:4b:dd:3d:05:3f:35:20:f4:07:f2:c8:fb:25:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Aug 29 17:21:23 2024 GMT
Not After : Aug 28 17:26:23 2025 GMT
Subject: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:13:3c:6b:3b:64:9e:33:d5:fb:4d:27:ec:
3b:10:25:01:7e:05:50:b0:89:84:c1:70:85:5a:8a:
5f:93:5d:54:3d:c4:b0:45:80:02:e5:dd:25:d6:5d:
e3:0c:f6:1c:c8:1f:e0:77:92:24:f0:6f:19:95:b0:
38:1d:eb:f6:d8:30:44:ff:b6:b5:11:59:34:8d:3a:
b1:5d:bd:40:da:9d:ea:9f:f8:47:da:f9:3f:d5:d0:
1c:ec:59:a2:50:b9:22:4d:44:9b:ed:85:37:f7:2d:
47:e1:38:b6:fb:bb:90:41:15:d3:e6:03:0d:4e:ea:
68:19:1d:bb:d3:ba:8f:e5:85:32:33:e4:5e:b5:d7:
43:e6:2d:0e:ae:74:2d:c3:12:2b:76:1c:ec:38:05:
87:2f:48:04:06:46:2e:e3:80:a4:e1:e2:eb:96:37:
c6:48:14:4e:75:45:d9:7f:ad:2d:aa:2a:0a:c9:23:
e6:2e:cb:58:54:64:09:33:80:63:7c:79:74:04:3f:
89:f4:ac:cd:3e:30:4e:bf:ae:9d:68:54:d2:24:74:
bd:30:5f:20:82:87:c4:a8:be:0d:a3:1f:d1:ba:e3:
2b:32:49:aa:95:73:1e:71:5d:e6:31:0c:da:96:cb:
c3:b8:61:a4:45:2b:f4:a1:2d:62:11:4c:3a:32:3d:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.198.0/23
Signature Algorithm: sha256WithRSAEncryption
29:c5:8a:c2:76:8f:ab:e0:2f:eb:0d:95:34:d9:93:52:6d:f0:
e4:a9:ad:42:86:8b:10:f0:00:a2:28:f7:de:0c:52:99:d3:46:
b6:e2:55:9d:68:09:f0:d3:f7:f3:13:f8:96:49:0e:86:a0:19:
e6:c6:ee:04:ea:b5:d5:41:09:04:3f:60:39:41:fe:c5:2b:89:
67:02:89:67:1a:94:a8:92:da:1b:a1:16:4f:d1:c4:c6:de:16:
a4:02:5c:42:30:e9:b5:25:da:cc:30:aa:10:59:7a:2d:85:77:
ac:8f:01:1d:ba:58:24:c0:cd:3a:36:6b:bb:b6:7a:34:ab:88:
30:83:c3:09:04:b7:78:b1:0d:ac:81:85:d5:3d:d7:52:9f:7b:
7c:0a:23:54:1f:1b:d6:40:ff:7e:96:a0:74:f2:29:16:ac:24:
f3:df:9d:c2:63:40:ca:b5:cf:1d:1c:07:02:d2:6c:98:06:d9:
12:b5:0d:c3:a4:9b:de:87:7a:ff:f3:b7:e0:f8:54:a4:26:08:
47:a8:48:c4:cc:43:7d:05:ea:0f:1a:df:ef:e7:fe:92:c5:b5:
5c:15:87:8d:26:64:c7:a2:42:62:47:fd:b0:07:a1:2a:97:af:
4d:eb:25:2b:57:56:94:a4:72:9c:c0:0a:2c:11:48:05:30:a0:
b2:58:f8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:42 2025 by rpki-client