Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer
File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer (raw, json)
Hash identifier: t8wMPCldm+JX6viCUjePMeuPGIfoBruOI9RSoQiIEFA=
Subject key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 174FE5DADC2D87635A5EFBA39B3EB554D8AA6829
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 06 Dec 2024 04:22:09 +0000
Certificate not after: Fri 05 Dec 2025 04:27:09 +0000
Subordinate resources: IP: 157.20.132.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:4f:e5:da:dc:2d:87:63:5a:5e:fb:a3:9b:3e:b5:54:d8:aa:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 6 04:22:09 2024 GMT
Not After : Dec 5 04:27:09 2025 GMT
Subject: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:54:9d:a6:7f:ac:2c:4b:6c:53:fe:0b:5d:
bb:4e:d8:1d:0f:17:12:3a:77:51:59:9e:0e:88:82:
ef:c7:06:90:f9:c7:3c:19:7d:9f:f3:07:f7:74:92:
fa:11:45:77:79:68:38:62:9d:6e:c7:e4:4e:aa:c7:
db:76:0d:e9:56:3b:bf:5a:3a:f8:33:29:ce:d4:30:
89:80:79:d6:4c:80:83:49:0b:45:82:70:31:37:9f:
40:5d:60:10:a3:08:db:95:ca:2d:e1:7e:08:4e:92:
8c:71:6c:12:3f:77:cd:87:f3:b3:8f:f1:96:d1:8d:
4c:43:1b:c2:0c:4f:f8:94:ef:f9:b4:a3:ab:9a:68:
9c:a6:55:55:05:e7:9c:92:42:8d:aa:d3:04:63:cc:
79:31:61:0e:c8:cc:c0:8f:0b:b4:56:b6:72:81:c0:
67:33:ee:12:a4:67:2e:33:2f:9e:62:f0:60:75:f1:
fd:68:7e:8f:f7:08:b9:cc:e1:f8:0d:5f:90:76:ac:
59:96:7d:d3:86:b7:91:9b:07:c8:5d:65:4d:95:dc:
1b:35:9e:a9:09:25:ab:be:a2:b0:d4:c0:c7:c4:50:
4b:71:42:ef:1d:8b:67:11:1a:c0:c3:6e:b0:4e:4d:
97:95:46:4f:d8:05:f8:ee:d9:44:4d:31:2c:b7:09:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.132.0/23
Signature Algorithm: sha256WithRSAEncryption
89:73:42:4f:ce:2b:36:86:f2:42:8d:dd:8b:8c:41:af:fa:d1:
02:79:a1:b1:d9:12:71:79:d6:e8:e4:85:06:78:42:b0:5a:1a:
d3:b3:ce:c2:53:29:26:fc:d7:9d:4b:61:74:3b:2a:9a:f7:93:
0d:f9:fc:1e:e0:7e:86:de:49:84:7c:6c:dc:db:7d:8a:a3:b4:
65:cb:bf:f6:92:6f:74:5c:3d:31:d9:ab:38:38:75:98:32:35:
10:0c:d9:91:fb:28:ec:02:cf:1f:da:25:0d:d9:ec:85:53:0a:
29:4d:b7:be:79:90:3d:86:46:0e:55:c7:c4:c9:a7:89:11:9a:
f7:76:4f:47:3e:80:6c:c5:a2:e9:47:7c:8c:38:3a:b9:74:4c:
15:20:be:64:6f:d1:f1:1a:34:ec:b6:7f:2a:83:fe:65:b0:f0:
89:c3:0e:2f:54:f5:36:e4:9f:7c:67:25:29:40:55:cf:eb:f1:
ac:4c:7d:89:33:e8:82:af:23:63:9c:10:88:71:d5:bb:5d:b7:
c1:d2:35:5a:ad:27:a2:19:9c:70:b2:bb:68:7d:d0:36:5f:56:
c4:ee:35:f8:7f:eb:7a:4a:85:9d:26:32:c6:02:8d:02:48:70:
87:22:8d:36:e8:eb:be:b5:48:59:f7:26:b1:8a:d1:6d:64:4f:
40:48:db:4f
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUF0/l2twth2NaXvujmz61VNiqaCkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIwNjA0MjIwOVoX
DTI1MTIwNTA0MjcwOVowMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4
NEU1QkNCODFFMjI3QzUxMkRFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOS+VJ2mf6wsS2xT/gtdu07YHQ8XEjp3UVmeDoiC78cGkPnHPBl9n/MH93SS
+hFFd3loOGKdbsfkTqrH23YN6VY7v1o6+DMpztQwiYB51kyAg0kLRYJwMTefQF1g
EKMI25XKLeF+CE6SjHFsEj93zYfzs4/xltGNTEMbwgxP+JTv+bSjq5ponKZVVQXn
nJJCjarTBGPMeTFhDsjMwI8LtFa2coHAZzPuEqRnLjMvnmLwYHXx/Wh+j/cIuczh
+A1fkHasWZZ904a3kZsHyF1lTZXcGzWeqQklq76isNTAx8RQS3FC7x2LZxEawMNu
sE5Nl5VGT9gF+O7ZRE0xLLcJR7UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFNRoi1X7jAD2rsKE5by4HiJ8US3tMB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9lOWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5YzE1Yjc4
LTIwNzEtNDRkMS05YTFkLWFkNmViMDlmYWUwOC8wL0Q0Njg4QjU1RkI4QzAwRjZB
RUMyODRFNUJDQjgxRTIyN0M1MTJERUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGdFIQwDQYJKoZIhvcNAQELBQADggEBAIlzQk/OKzaG8kKN3YuMQa/60QJ5obHZ
EnF51ujkhQZ4QrBaGtOzzsJTKSb8151LYXQ7Kpr3kw35/B7gfobeSYR8bNzbfYqj
tGXLv/aSb3RcPTHZqzg4dZgyNRAM2ZH7KOwCzx/aJQ3Z7IVTCilNt755kD2GRg5V
x8TJp4kRmvd2T0c+gGzFoulHfIw4Orl0TBUgvmRv0fEaNOy2fyqD/mWw8InDDi9U
9Tbkn3xnJSlAVc/r8axMfYkz6IKvI2OcEIhx1btdt8HSNVqtJ6IZnHCyu2h90DZf
VsTuNfh/63pKhZ0mMsYCjQJIcIcijTbo6761SFn3JrGK0W1kT0BI208=
-----END CERTIFICATE-----
Generated at Sat Feb 22 14:31:30 2025 by rpki-client