
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer (raw, json)
Hash identifier: 7D0xE9yBdyeVJ5WzxUI8u4TCqQtntSB7EnLakuKfiig=
Subject key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 63BAD98D54809D770F4CB5C297C7FD8698744AD1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
caRepository: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 16 Jul 2024 09:00:17 +0000
Certificate not after: Tue 15 Jul 2025 09:05:17 +0000
Subordinate resources: IP: 160.25.45.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ba:d9:8d:54:80:9d:77:0f:4c:b5:c2:97:c7:fd:86:98:74:4a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 16 09:00:17 2024 GMT
Not After : Jul 15 09:05:17 2025 GMT
Subject: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1d:5a:fa:a4:3e:d9:29:db:a9:28:fa:e1:8e:
94:a4:7d:c9:57:d8:5d:68:d8:a8:ab:55:1e:a5:a1:
0f:f7:68:7d:20:61:62:9b:db:a7:d6:42:a7:3b:28:
fb:03:73:3d:b3:b0:89:c3:0a:e4:ec:39:92:10:48:
b7:44:19:70:6e:60:6f:8c:35:cb:79:07:5f:ce:30:
c6:85:b5:0b:d8:9a:69:45:31:bb:2b:f3:00:e1:0d:
b2:31:5c:c5:22:53:c4:09:17:60:fd:79:21:50:b8:
60:b6:9f:8a:c4:3b:94:db:a6:19:a4:60:bf:b6:ae:
ef:3b:cb:d4:bb:9c:a7:4f:7d:cb:f6:8d:24:f4:48:
85:38:f4:fd:77:65:bd:de:ea:68:68:51:74:db:bd:
ac:2e:30:9e:c7:01:d5:b3:bb:aa:ba:86:ca:1d:f6:
07:96:cc:5f:5f:6b:38:c2:b6:ad:74:43:d8:dd:e6:
29:07:d5:20:69:31:38:84:1f:7c:38:a4:e3:46:74:
f7:12:c0:26:35:10:12:4f:23:6f:d8:73:e8:88:d7:
13:3a:f6:68:61:f1:fb:07:6b:65:d3:48:7d:6d:64:
e8:ef:93:75:3b:36:7e:66:ad:09:89:74:75:31:43:
c4:ac:60:5c:b2:6e:fa:55:0a:64:09:5c:7f:8c:8f:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.45.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fa:37:59:95:86:2f:fe:bd:5f:e0:e0:01:08:9d:2c:9d:b7:
ce:e7:1f:0a:c1:82:ee:c4:b0:75:b9:92:54:c5:89:82:47:13:
3e:b0:03:b2:0a:e5:12:fa:b3:a4:4c:cb:69:a8:57:c6:ba:e5:
f8:13:f9:fd:93:8c:fb:2a:27:cc:2e:74:fa:d4:56:b4:12:04:
77:7c:87:de:d9:8f:3d:d7:c6:81:25:40:12:fd:c3:32:0a:38:
63:a1:48:10:73:89:b1:14:91:ca:e7:13:45:1c:e8:9d:cf:15:
dd:39:50:1c:e5:e6:29:76:25:85:4a:c9:b2:1b:7c:55:42:37:
68:93:a6:9a:fd:e2:f0:6f:ce:a7:f5:4e:86:43:4d:c6:19:1a:
de:61:89:20:d4:f4:44:d2:a4:c9:bd:cd:e8:00:3d:67:62:c6:
a0:7d:c1:74:f9:25:75:33:e3:1a:7b:cf:5f:80:60:ef:3e:58:
7e:d2:e4:f0:16:38:19:6b:99:61:ec:10:8a:aa:30:15:36:46:
c4:13:44:69:d2:a7:99:ee:b8:39:f3:63:98:99:2a:bf:9b:64:
d2:2e:df:85:a1:7f:2d:aa:be:32:39:b5:93:db:ea:15:ca:06:
d4:cf:ea:b4:7b:e8:b5:a9:83:81:05:54:a7:15:10:42:cc:cb:
15:73:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:10 2025 by rpki-client