
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer
File: 21F8D88DCD7D814618247F203F04126E51C2D65E.cer (raw, json)
Hash identifier: EV2j7I3drfC0EdI61GbTlRaaU5pLS8ScqO9sUxy43D0=
Subject key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5D1C659BE91329FC9A8EE1441A189B4CC5DC1BAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 21 Mar 2025 09:38:49 +0000
Certificate not after: Fri 20 Mar 2026 09:43:49 +0000
Subordinate resources: IP: 103.4.240.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1c:65:9b:e9:13:29:fc:9a:8e:e1:44:1a:18:9b:4c:c5:dc:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 21 09:38:49 2025 GMT
Not After : Mar 20 09:43:49 2026 GMT
Subject: CN=21F8D88DCD7D814618247F203F04126E51C2D65E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:59:cc:ae:01:3e:e4:86:79:9c:6c:b6:58:
36:65:40:00:ed:01:21:85:d8:46:10:3e:81:3b:2b:
95:b3:0c:bd:2b:fe:91:a2:69:67:21:30:d3:f7:ca:
f9:8f:08:32:45:92:41:0b:74:85:fd:bb:36:58:ea:
6c:5b:35:92:39:42:f0:be:4e:1a:4c:86:8c:f5:08:
12:34:3b:9c:63:2a:ed:73:46:73:69:94:30:f1:b8:
82:e3:cd:7d:4f:a2:72:66:a1:15:32:91:47:6f:d2:
7f:28:28:2c:97:f9:ef:b4:0a:9b:16:a7:92:11:94:
9b:a1:07:ce:24:bd:4a:ad:77:b4:8a:3e:2e:9a:a6:
b2:60:b7:8b:c2:df:2f:e5:09:1b:25:a8:94:a1:ad:
4d:cb:1d:74:38:29:bd:57:bd:3e:5c:00:61:40:7f:
b2:22:c9:6e:99:01:25:47:dc:24:16:12:d2:f0:9c:
c7:b4:56:e4:e0:0e:cd:34:f1:30:2d:bd:80:b9:e7:
c4:e2:1a:d4:23:16:e2:46:6c:df:f6:b6:b2:bf:a6:
28:65:6f:f4:db:25:ca:2c:6a:29:23:f9:76:de:74:
ea:f7:c1:0d:1b:df:46:f5:81:74:1c:39:0c:fb:0d:
76:f4:3c:73:90:6e:e0:9b:66:5b:e8:3b:cb:4c:24:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.4.240.0/22
Signature Algorithm: sha256WithRSAEncryption
10:1d:f8:5e:19:6a:a8:2f:71:44:8c:fc:ca:2f:e4:8a:65:86:
fc:56:51:ae:4e:91:dd:16:69:7a:b5:19:56:ff:5d:b2:d4:c0:
98:db:3a:0d:22:78:a7:60:c9:8c:b1:f3:f5:b5:93:b0:6b:6d:
42:77:c0:58:be:0e:40:0c:77:90:c7:e8:61:88:3a:e6:05:35:
e0:f0:36:16:a3:16:44:75:de:93:35:d7:60:13:56:37:1d:95:
ed:bb:5e:09:51:72:e1:c5:75:a1:7a:be:28:1e:6e:f0:53:48:
15:64:af:9c:d2:11:b6:85:5e:07:28:f8:d2:09:28:cf:20:a2:
5b:59:fc:c3:f5:3a:9f:cb:f7:02:11:6f:4e:1a:2f:2b:57:1d:
03:b8:20:6f:0a:45:46:b4:6b:e6:08:0b:55:99:07:af:09:ab:
62:52:da:85:2a:7c:a2:74:dd:17:b7:9f:76:0e:5a:54:95:58:
fb:4c:61:cf:5f:e3:49:52:77:4a:7a:19:22:d6:09:e4:13:56:
a2:0c:8d:89:23:34:a5:67:f1:10:1e:2e:4e:91:f0:f3:cb:82:
59:f3:15:02:c5:00:c1:f6:53:e9:86:ae:4b:ac:94:81:c7:a6:
9a:8f:1f:7f:1d:66:1e:c4:fb:b2:e6:d3:72:6d:05:7a:47:a9:
5c:07:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:07 2025 by rpki-client