Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer
File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer (raw, json)
Hash identifier: 0uWcPeXQGIMHYj5ptS3WpcI80rxJtAAVagczy/EHf/E=
Subject key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6BD15303757320F2EF567147909218F2935B7BB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 18 Dec 2024 11:34:53 +0000
Certificate not after: Wed 17 Dec 2025 11:39:53 +0000
Subordinate resources: IP: 103.231.120.0 -- 103.231.122.255
IP: 150.129.160.0/22
IP: 202.93.232.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d1:53:03:75:73:20:f2:ef:56:71:47:90:92:18:f2:93:5b:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 18 11:34:53 2024 GMT
Not After : Dec 17 11:39:53 2025 GMT
Subject: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:20:ff:bf:e9:20:ec:9a:92:a1:e4:e2:0e:
0e:09:7e:ef:85:de:f5:27:2a:37:eb:01:e3:77:3e:
ed:e4:97:9e:68:1a:80:f1:c4:22:68:cf:d2:53:99:
58:f7:f4:98:e0:80:f6:4b:a8:1b:62:fe:8c:c0:12:
e9:70:66:0d:90:21:c7:d9:e2:50:f2:7a:ae:6f:08:
4f:3f:52:ff:66:44:78:69:60:3a:13:3f:ef:02:87:
05:64:8f:da:91:df:b9:0e:ed:25:fa:8e:0d:b0:11:
3f:82:b3:34:ad:f5:56:56:b4:fc:c3:f8:aa:35:36:
ae:c7:76:05:b8:24:9e:08:ab:db:95:e2:11:2a:66:
16:0e:d5:a5:08:66:64:e9:7b:97:55:8d:d5:00:49:
1e:8e:bc:58:17:c2:b9:d8:68:60:4b:8a:e2:31:55:
9f:18:47:a7:fe:53:0c:22:d7:5d:31:86:08:99:af:
08:0f:0a:75:1a:6d:83:7c:7f:ae:60:91:15:52:e0:
f5:42:99:3b:06:94:9b:b2:7d:fe:e1:47:8f:84:dc:
7e:46:2e:99:0b:b2:13:3a:c4:60:b9:64:f7:32:03:
a1:0a:81:b0:7e:55:26:3b:f9:a1:23:d1:83:fd:f3:
21:23:11:1a:39:08:9e:0b:19:9e:e0:43:25:3c:93:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.120.0-103.231.122.255
150.129.160.0/22
202.93.232.0/21
Signature Algorithm: sha256WithRSAEncryption
90:c4:3d:b9:77:d9:39:38:5b:07:39:30:e5:a9:5d:16:cf:44:
c4:5d:e7:3e:72:0a:e3:89:ad:28:ca:8b:c3:78:88:c9:92:a2:
73:61:a7:84:80:9c:c4:e7:b7:73:b0:3f:9a:20:10:eb:43:c2:
0a:12:7c:d0:c4:6c:50:27:31:a6:24:37:7b:62:ed:c7:d2:e2:
f5:d5:21:be:9c:3b:98:8b:52:c8:12:69:4d:f4:7d:d8:3e:6f:
9b:c6:06:dd:5f:21:3b:86:33:ad:9a:69:61:81:6d:67:4d:31:
d0:59:e4:25:9e:16:41:5e:d5:ac:a0:8e:93:fe:c1:18:e2:9a:
1c:3f:d9:2f:46:9e:06:b9:dd:9b:20:32:d4:5b:1b:8a:a3:54:
72:32:0a:2a:45:f8:1f:bf:29:42:37:4c:8a:b2:71:3b:83:8f:
b7:8c:d6:ba:a0:f1:0b:1f:47:4f:eb:c0:50:9f:ab:15:1d:43:
4c:61:da:81:2f:3c:8a:99:69:4e:8f:83:13:56:01:bb:ca:71:
12:66:17:1d:c0:1b:16:9c:57:e9:43:c9:44:36:bd:cc:7b:27:
26:fc:d9:40:e2:ec:df:50:67:53:06:d6:ad:b5:6a:26:bd:61:
4b:96:50:03:dd:b9:2c:b5:c4:d7:46:b9:3b:bb:16:6f:08:ab:
7f:1c:60:2d
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUa9FTA3VzIPLvVnFHkJIY8pNbe7EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxODExMzQ1M1oX
DTI1MTIxNzExMzk1M1owMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkx
QUUyQjgzRTQ2NjA0MTcxODAzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKCfIP+/6SDsmpKh5OIODgl+74Xe9ScqN+sB43c+7eSXnmgagPHEImjP0lOZ
WPf0mOCA9kuoG2L+jMAS6XBmDZAhx9niUPJ6rm8ITz9S/2ZEeGlgOhM/7wKHBWSP
2pHfuQ7tJfqODbARP4KzNK31Vla0/MP4qjU2rsd2Bbgkngir25XiESpmFg7VpQhm
ZOl7l1WN1QBJHo68WBfCudhoYEuK4jFVnxhHp/5TDCLXXTGGCJmvCA8KdRptg3x/
rmCRFVLg9UKZOwaUm7J9/uFHj4TcfkYumQuyEzrEYLlk9zIDoQqBsH5VJjv5oSPR
g/3zISMRGjkIngsZnuBDJTyTZSMCAwEAAaOCAswwggLIMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFC3cU/q/L9E80ska4rg+RmBBcYAwMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9jNGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0ZDQxMDAz
LTEyYjAtNGU2YS1iMDg1LTU2YmMyZDE5ZGFhOC8wLzJEREM1M0ZBQkYyRkQxM0NE
MkM5MUFFMkI4M0U0NjYwNDE3MTgwMzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBow
DAMEA2fneAMEAGfnegMEApaBoAMEA8pd6DANBgkqhkiG9w0BAQsFAAOCAQEAkMQ9
uXfZOThbBzkw5aldFs9ExF3nPnIK44mtKMqLw3iIyZKic2GnhICcxOe3c7A/miAQ
60PCChJ80MRsUCcxpiQ3e2Ltx9Li9dUhvpw7mItSyBJpTfR92D5vm8YG3V8hO4Yz
rZppYYFtZ00x0FnkJZ4WQV7VrKCOk/7BGOKaHD/ZL0aeBrndmyAy1FsbiqNUcjIK
KkX4H78pQjdMirJxO4OPt4zWuqDxCx9HT+vAUJ+rFR1DTGHagS88iplpTo+DE1YB
u8pxEmYXHcAbFpxX6UPJRDa9zHsnJvzZQOLs31BnUwbWrbVqJr1hS5ZQA925LLXE
10a5O7sWbwirfxxgLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:44 2025 by rpki-client