Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer
File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.cer (raw, json)
Hash identifier: KaAWUmG8fE1A6kmRz13sxmg7olNGEdRGrQaHJKGpCFg=
Subject key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5BFCFFB46B00BFBB1139B9309E7ED68C7A6C00F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
caRepository: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 08 Mar 2025 07:38:55 +0000
Certificate not after: Sat 07 Mar 2026 07:43:55 +0000
Subordinate resources: IP: 103.122.121.0/24
IP: 2001:df6:af00::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:fc:ff:b4:6b:00:bf:bb:11:39:b9:30:9e:7e:d6:8c:7a:6c:00:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 8 07:38:55 2025 GMT
Not After : Mar 7 07:43:55 2026 GMT
Subject: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:16:10:45:1f:7d:00:f2:d9:17:da:91:30:
69:d6:ce:dd:ed:c1:d5:a8:9d:41:c6:ce:9c:b0:8b:
01:85:dc:29:0b:68:ff:d7:df:17:64:68:b4:a0:26:
15:72:d3:36:50:78:0f:e7:7d:e8:57:58:0e:65:a2:
df:7b:05:5f:5e:e8:c3:4f:06:62:65:a2:97:c6:33:
ce:10:06:9a:2c:fe:df:11:59:ec:69:a5:26:ae:79:
67:a4:b6:4b:f1:05:ea:c6:e9:c3:fb:d5:7e:0b:ca:
21:ae:82:53:a3:d0:91:e5:fb:fd:db:8d:97:6c:c6:
37:74:9b:c2:19:46:2b:a8:18:96:2c:d3:d5:e6:24:
93:30:43:95:db:a4:a3:23:77:c9:10:e9:10:7b:2c:
1e:73:38:67:5a:ea:4c:87:5d:d3:d5:1d:f6:63:46:
be:42:a9:a8:59:32:6b:3a:b7:f9:06:90:8d:b5:11:
99:b5:e2:95:8d:32:ae:8d:6c:81:ba:10:18:2e:cb:
b9:26:2f:1d:7a:a4:1b:be:82:77:ee:0a:41:18:89:
79:ac:90:c0:53:68:ac:37:f4:78:34:d9:bc:75:d9:
6b:6a:ef:bf:ec:26:d7:72:55:80:3d:8d:54:85:da:
2d:91:82:4b:42:bd:42:48:06:42:a4:fd:0d:60:2e:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.121.0/24
IPv6:
2001:df6:af00::/48
Signature Algorithm: sha256WithRSAEncryption
5f:e9:76:2d:7c:7b:5b:1d:82:58:84:da:f7:2d:a4:86:fb:c1:
3c:51:59:25:d6:69:2d:32:53:61:3d:b5:2e:cb:76:97:a7:dd:
9c:a3:1e:21:32:ab:bb:87:f7:7a:af:3b:af:2d:44:5c:92:77:
a9:c5:6f:70:6c:fe:fc:36:99:86:ea:f7:b3:0c:d0:0f:62:ca:
73:1f:ba:5c:55:3c:79:73:f7:69:5c:9e:44:b3:23:bf:14:44:
8c:7e:fb:c1:84:fb:84:43:1a:39:85:e8:c9:3e:e6:9e:b1:14:
b2:cf:8b:a3:b2:a2:47:d7:ef:8a:f8:f6:40:5d:42:30:38:04:
f9:a7:f6:60:a9:19:83:7d:3c:27:63:f8:e8:bd:54:a6:9b:da:
f1:da:3a:ee:18:1f:00:c8:98:41:f9:e9:63:2f:f4:43:a8:24:
08:b4:ea:c0:f8:90:9e:c6:7d:45:e7:d0:4a:56:29:1a:11:02:
ef:2f:c9:bb:fa:68:a5:58:fd:5a:f4:01:d5:fe:58:0a:d3:a2:
68:ed:d5:d1:4e:4d:c3:b6:06:cd:5d:16:1c:f6:41:af:ee:c5:
0e:a1:de:a1:cc:ea:ee:54:b2:25:23:a8:bf:97:0a:45:76:ff:
80:ac:05:19:d8:ed:1d:1b:d4:54:19:a6:e8:25:52:bf:4a:77:
51:cb:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:35 2025 by rpki-client