Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.cer (raw, json)
Hash identifier: Y3xR3o+d/mEf4bM8D0NP0RYzDCzSpfvNwY+D5apT7AQ=
Subject key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1B8FBC4F06FC39B4B354ACD65307B906AFA1E085
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
caRepository: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 09 Oct 2024 21:37:14 +0000
Certificate not after: Wed 08 Oct 2025 21:42:14 +0000
Subordinate resources: IP: 103.140.76.0/23
IP: 2404:fa40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8f:bc:4f:06:fc:39:b4:b3:54:ac:d6:53:07:b9:06:af:a1:e0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Oct 9 21:37:14 2024 GMT
Not After : Oct 8 21:42:14 2025 GMT
Subject: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:77:bc:42:82:be:30:a1:e1:2d:e6:8f:99:
74:f6:25:fd:19:23:11:4f:9b:24:12:e3:32:b5:8b:
18:1d:6e:26:63:21:53:12:e6:22:30:42:2e:d1:b9:
64:37:1f:fd:c2:2e:70:7c:e7:54:f5:e3:b3:f0:a4:
a2:9d:9e:b8:5a:61:a2:d7:01:31:03:d2:4f:a4:3b:
b8:ce:04:c7:05:58:e0:7f:dc:c9:03:60:07:fb:50:
58:9f:aa:49:c9:20:62:8c:a0:64:eb:10:57:47:7e:
b3:bf:51:91:04:9a:c4:2c:80:b9:51:e9:a0:00:cb:
d4:a1:f3:0f:7b:72:22:90:0c:12:34:9a:d6:9a:c2:
a7:0a:5d:f6:bd:ad:7a:de:93:64:4c:64:f6:96:9d:
3f:b6:b9:42:9d:b8:ab:d8:2f:82:fd:70:3f:97:6c:
f9:78:76:bf:95:be:ce:cb:67:08:43:c4:53:24:1c:
1d:39:ab:6b:3b:79:b8:7c:09:56:8f:8f:ed:ab:c9:
80:76:0a:e0:f0:58:ac:78:c3:56:9f:e3:96:56:63:
11:91:6c:31:42:54:3e:c9:bc:6b:c3:8d:6d:8a:1f:
fc:4f:7b:b4:67:d3:15:93:a4:c3:6d:e8:aa:e8:ce:
b8:a4:53:30:9f:c3:e7:86:22:e7:58:64:f8:16:d7:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.140.76.0/23
IPv6:
2404:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
71:09:bb:a1:84:6f:d9:e8:e6:e5:7c:42:16:87:6d:8b:ec:3a:
8b:f3:bd:56:d1:a7:fb:55:b4:60:5f:9e:dd:19:96:72:5b:6d:
92:a4:69:a8:5d:53:1d:8f:d2:d1:c1:47:e1:30:b0:b2:6c:05:
26:54:4a:32:20:f9:2c:33:46:e5:32:ae:d9:51:09:a3:ec:9e:
18:9c:c9:4b:48:f7:69:60:59:64:9c:3c:82:4c:f3:1d:8a:5a:
c7:72:99:f1:76:0d:a0:51:12:af:5d:4d:fa:6a:21:8d:ec:41:
48:49:37:a6:74:9e:be:a7:0d:eb:b7:9f:11:2a:2b:0f:3c:1f:
fb:98:fb:fe:be:99:74:bb:4e:69:75:80:fd:85:5f:78:d2:1f:
d5:c5:ab:d3:3e:6d:e1:1e:d1:f0:e0:fa:21:04:9f:5b:ed:22:
1b:77:40:71:99:c4:c6:ae:e0:5b:17:d3:10:dd:90:6e:42:ec:
d1:c1:1d:8b:39:3e:6b:93:86:36:f6:2d:c1:81:5f:63:d4:74:
ae:80:e5:d0:03:dd:95:5b:8a:e4:70:d3:4c:0b:39:7b:21:4f:
17:b7:23:c9:fd:9c:e8:0a:40:bb:82:d9:75:b2:6e:c2:bd:2d:
0b:fa:b2:18:81:82:6b:82:7c:2b:9d:4a:64:4a:4b:8f:09:1f:
d9:00:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:49 2025 by rpki-client