
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.cer (raw, json)
Hash identifier: 1smvga4SZjOPON09MoUp/SxqAIi/zz+0h0W9AuTSk+o=
Subject key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4E33CF76D11813BCFF3B9816FF7E0DA30500013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
caRepository: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 14 Mar 2025 23:13:10 +0000
Certificate not after: Fri 13 Mar 2026 23:18:10 +0000
Subordinate resources: IP: 103.181.138.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:33:cf:76:d1:18:13:bc:ff:3b:98:16:ff:7e:0d:a3:05:00:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 14 23:13:10 2025 GMT
Not After : Mar 13 23:18:10 2026 GMT
Subject: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:83:f2:73:e9:94:26:3c:34:23:98:8a:a9:
e6:01:f8:3b:9c:b0:e1:30:db:ce:f8:9d:a7:d8:e9:
51:73:c5:43:a1:c8:b0:2f:d9:77:b6:17:12:01:3a:
74:37:1d:53:38:b1:cd:05:a6:fd:af:ed:3b:01:52:
ac:06:a5:25:ce:35:22:6f:f0:3d:87:a2:b2:7f:12:
d0:92:b4:e1:b8:22:7c:20:72:66:0a:c5:54:a7:50:
42:c9:d9:7c:c8:77:30:66:a7:3a:00:bd:b0:52:32:
97:59:e4:8a:43:50:02:95:eb:0d:db:34:cb:66:4b:
78:bc:50:09:27:fe:75:38:38:2c:de:d0:20:a6:d0:
4d:1d:08:f4:56:d8:dc:84:12:c0:fa:6a:19:63:fa:
79:af:75:21:77:c5:31:8d:3a:d3:fd:74:ba:b0:6d:
f4:2e:0d:f7:5f:b6:79:3a:6e:5e:c5:8c:0c:37:a4:
2c:19:b2:3c:d5:2d:11:a8:a0:98:f5:fc:79:79:87:
fb:c8:ba:50:90:38:3a:80:9d:e0:5c:20:36:bb:b3:
a2:71:0b:07:74:bd:e2:21:c0:52:65:35:1b:90:fe:
84:68:3f:04:b7:9b:cb:62:12:3c:e3:59:59:82:cd:
5c:32:d2:04:68:35:0a:3b:1c:a6:e6:c7:7b:1b:45:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.181.138.0/23
Signature Algorithm: sha256WithRSAEncryption
45:39:71:12:a9:f1:d5:42:19:31:cd:dd:12:d1:58:7c:52:4c:
4f:05:d1:bf:2d:fd:cc:11:ab:70:8d:c3:46:ef:a1:cd:19:f1:
09:b0:ba:f9:fa:7d:48:b3:16:b7:d5:30:79:b9:b2:e2:04:ec:
41:f3:fe:52:55:8c:6c:34:d3:a7:0d:02:b0:6b:34:ba:d6:c7:
94:5d:12:0d:5e:c1:18:df:90:19:b9:e9:06:46:45:0c:ce:60:
78:38:a9:a8:c6:2e:8a:7d:a2:6d:49:8c:0b:43:d2:da:06:74:
4a:4f:51:87:1b:df:7d:1d:b4:a2:c3:07:61:c7:31:e5:8b:6e:
bc:6e:ab:ea:ac:7b:c0:90:31:5b:53:7f:1c:59:4d:aa:ce:87:
c3:08:e5:4d:de:44:ea:a2:5c:d1:56:3c:6b:23:39:77:77:0a:
b2:8f:b2:d6:1f:94:9d:8f:ec:c6:cc:46:ed:3f:7a:19:e2:2c:
4a:5b:e5:66:4e:c8:e1:d1:7e:3d:21:a7:d7:00:4f:9d:7b:fc:
da:35:f6:2f:58:d7:9d:76:b5:b2:c0:4b:b7:4a:20:84:53:83:
f2:3b:58:47:2c:67:ff:5c:74:d2:17:82:c6:73:48:b8:03:28:
dc:82:c2:dc:53:ce:e1:e8:84:93:90:b1:15:ff:c1:88:9b:91:
27:d7:bc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:47 2025 by rpki-client