
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer
File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer (raw, json)
Hash identifier: RZKJq+0MT1pF2ztRV3cDywxCPQoYBVrn15eDS8FcqWM=
Subject key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5D7F08E88113E1C1444EE74E2C669B52A1DE034E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft
caRepository: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 02 Jul 2024 03:42:16 +0000
Certificate not after: Tue 01 Jul 2025 03:47:16 +0000
Subordinate resources: IP: 103.211.49.0/24
IP: 2001:df1:1200::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7f:08:e8:81:13:e1:c1:44:4e:e7:4e:2c:66:9b:52:a1:de:03:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 2 03:42:16 2024 GMT
Not After : Jul 1 03:47:16 2025 GMT
Subject: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:7f:96:66:5c:81:12:c0:e0:b7:3a:34:03:
28:76:47:f9:8c:9e:e6:5c:33:1d:29:f3:c6:8c:90:
07:79:ee:13:ca:f0:06:1e:a8:59:26:66:24:a0:72:
b0:8e:e0:e4:16:47:de:c1:a7:40:1a:0f:5f:6e:a2:
a7:6c:51:8b:19:0f:6b:be:c3:85:e0:6c:ac:b6:6a:
71:b7:21:93:fd:f3:47:b4:8b:26:5d:42:46:f8:03:
47:46:c7:31:cf:99:43:d5:b0:f2:a0:7c:30:6a:b7:
2d:aa:1c:ff:2e:14:9d:26:11:f6:ee:56:bc:ab:73:
da:a4:ba:c3:c0:38:89:1e:87:2d:24:32:dc:30:85:
d2:aa:84:eb:24:8b:f3:ad:aa:56:a1:63:d1:ee:42:
61:ea:c2:ea:f0:f6:96:d0:60:be:af:1a:4c:1c:54:
e2:1f:48:f7:56:a2:b5:a9:3f:be:99:f7:1f:00:21:
62:27:33:bd:6c:de:5b:fd:9e:82:a9:4b:16:92:37:
98:0a:7e:b2:f5:e7:51:13:51:cd:f7:d0:30:8c:18:
27:5e:40:a8:fa:0f:5a:5b:d3:57:74:e3:b6:73:9a:
29:18:f0:6c:bd:e9:6b:1b:2e:09:42:16:75:0e:8e:
08:be:46:96:8f:2b:67:54:10:60:56:4a:78:29:2f:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.49.0/24
IPv6:
2001:df1:1200::/48
Signature Algorithm: sha256WithRSAEncryption
85:2f:89:4b:87:bb:68:04:50:69:d8:b4:58:26:0d:90:4e:e0:
9a:01:e8:90:d6:0e:ce:2f:c9:32:2d:be:ba:d2:81:00:11:18:
5d:ea:fa:46:ab:fc:96:a6:db:01:31:20:f1:4a:37:1a:b7:ff:
8b:44:73:96:94:54:04:64:7b:3e:34:50:42:b8:ad:04:7d:88:
99:1e:d8:77:fc:c7:8d:4e:b9:3d:aa:48:3f:26:1d:83:7e:dd:
7e:83:da:be:e8:b8:ac:52:52:f7:73:14:ac:cf:7a:a8:9a:c1:
81:c9:4e:39:34:48:56:f5:20:a0:3a:62:75:7b:1b:04:46:a7:
17:f7:59:08:c7:a6:d7:b6:c8:8e:7a:dc:80:15:f6:7d:1f:13:
62:41:35:d3:cb:ef:c0:08:ee:61:2c:d1:65:09:e0:a7:0b:31:
9f:55:e8:0e:72:e6:f1:d0:60:08:23:3d:d8:0f:81:64:42:ee:
b5:ed:70:69:17:ac:24:b6:c1:a8:e7:95:04:ff:fa:a5:31:5a:
42:30:00:fb:ac:d3:37:e0:7b:f3:06:3b:0b:94:47:a1:94:62:
f3:c0:32:c9:15:2d:df:c5:99:c4:83:31:9f:ea:17:44:72:0e:
1e:53:4f:b2:97:f9:dc:69:2a:c9:97:d0:cb:6e:4c:0d:1a:49:
3f:5e:c2:33
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUXX8I6IET4cFETudOLGabUqHeA04wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAzNDIxNloX
DTI1MDcwMTAzNDcxNlowMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRF
NDQzM0Y3QkQ1M0RDRTQyNkU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMp8f5ZmXIESwOC3OjQDKHZH+Yye5lwzHSnzxoyQB3nuE8rwBh6oWSZmJKBy
sI7g5BZH3sGnQBoPX26ip2xRixkPa77DheBsrLZqcbchk/3zR7SLJl1CRvgDR0bH
Mc+ZQ9Ww8qB8MGq3Laoc/y4UnSYR9u5WvKtz2qS6w8A4iR6HLSQy3DCF0qqE6ySL
862qVqFj0e5CYerC6vD2ltBgvq8aTBxU4h9I91aitak/vpn3HwAhYiczvWzeW/2e
gqlLFpI3mAp+svXnURNRzffQMIwYJ15AqPoPWlvTV3TjtnOaKRjwbL3paxsuCUIW
dQ6OCL5Glo8rZ1QQYFZKeCkvRvMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFEpv1+B59UOl1f3kQz971T3OQm5aMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9jYzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMDllMTNj
LWNlYTAtNDdmZi05Yzk2LWY0OWIzOWQ0MzkyMC8wLzRBNkZEN0UwNzlGNTQzQTVE
NUZERTQ0MzNGN0JENTNEQ0U0MjZFNUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BABn0zEwDwQCAAIwCQMHACABDfESADANBgkqhkiG9w0BAQsFAAOCAQEAhS+JS4e7
aARQadi0WCYNkE7gmgHokNYOzi/JMi2+utKBABEYXer6Rqv8lqbbATEg8Uo3Grf/
i0RzlpRUBGR7PjRQQritBH2ImR7Yd/zHjU65PapIPyYdg37dfoPavui4rFJS93MU
rM96qJrBgclOOTRIVvUgoDpidXsbBEanF/dZCMem17bIjnrcgBX2fR8TYkE108vv
wAjuYSzRZQngpwsxn1XoDnLm8dBgCCM92A+BZELute1waResJLbBqOeVBP/6pTFa
QjAA+6zTN+B78wY7C5RHoZRi88AyyRUt38WZxIMxn+oXRHIOHlNPspf53GkqyZfQ
y25MDRpJP17CMw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:40:07 2025 by rpki-client