Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer
File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer (raw, json)
Hash identifier: GOXdrd8feP0kxvowEAm/SdSldAUJv0ROz+eyQNzvysA=
Subject key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2D39360087846FE02872AB8FB08DC4DDA2F7B4FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft
caRepository: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 28 Mar 2025 10:48:36 +0000
Certificate not after: Fri 27 Mar 2026 10:53:36 +0000
Subordinate resources: IP: 103.173.128.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:39:36:00:87:84:6f:e0:28:72:ab:8f:b0:8d:c4:dd:a2:f7:b4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 28 10:48:36 2025 GMT
Not After : Mar 27 10:53:36 2026 GMT
Subject: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:5d:44:a1:53:10:32:24:bc:c1:ff:59:70:
e2:af:01:fd:8e:b7:62:7c:3e:4a:44:bb:b5:81:1c:
4c:b7:c0:98:9f:f3:4d:e4:a7:08:44:0a:2b:75:df:
5e:b0:be:b2:ec:67:82:16:c7:cc:c3:1a:8c:a5:74:
34:74:f6:6a:e3:dd:54:77:2e:07:ea:3f:e3:68:77:
57:d9:3f:6a:e0:1f:be:50:f4:74:6a:be:14:55:4a:
bd:32:4f:a8:6e:12:98:49:43:d9:02:eb:cb:fb:45:
06:f3:d4:c3:90:33:bf:11:b3:bc:d1:40:87:95:16:
b8:cb:33:92:ea:a6:91:c7:f8:a2:22:8b:f2:cc:b7:
40:23:37:64:07:44:07:53:dd:19:5d:10:5a:53:91:
f1:b5:05:8c:dd:08:a5:b5:c1:42:f2:20:9a:09:b9:
0c:3b:c0:49:ce:b3:63:61:30:a0:65:17:90:c0:c4:
f3:bb:24:17:34:11:c0:f2:dc:6e:07:b2:24:33:45:
30:96:f7:99:3b:a2:26:42:ba:5d:66:4d:db:b8:db:
1c:6f:5e:3b:2b:dd:a4:14:df:b9:7f:53:54:a5:7c:
cb:a5:bc:b9:72:43:88:b2:9e:21:9b:48:99:7e:80:
98:da:08:00:f4:bb:af:0c:e7:e0:d4:25:64:e7:eb:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.128.0/23
Signature Algorithm: sha256WithRSAEncryption
50:17:2e:95:70:b5:86:04:33:de:6d:6f:46:bd:4a:9a:d1:50:
f2:5a:f0:3a:b5:3f:73:49:ec:be:ea:20:2a:cf:31:56:2f:15:
d9:24:c9:ac:23:fb:58:5b:df:bd:7e:ab:90:6f:ad:ce:3c:e1:
22:3a:8f:9c:9d:bd:be:a5:85:5d:29:f3:62:b3:bc:f5:f0:9d:
e6:03:fc:99:7b:8d:4d:d4:55:ff:ac:6f:c4:91:7f:16:a1:40:
91:5e:dd:75:e8:0c:5d:ea:e2:14:84:1d:e6:5c:73:9a:96:07:
92:71:03:8c:a5:c9:ef:bd:ae:55:85:9a:c2:1a:2a:d2:32:b5:
f5:d3:49:df:6c:3f:e6:f3:9d:63:8f:af:ef:f3:c8:74:77:dc:
0e:44:34:85:93:2f:7e:64:21:a1:65:4a:1d:b4:26:d8:34:39:
2b:5f:37:3b:cb:9c:8a:7d:35:1c:a6:16:3d:da:d8:55:88:ad:
b7:6b:01:03:d5:6c:65:db:86:9d:17:0a:eb:da:66:dd:90:bb:
1a:f3:ee:ce:03:87:55:41:11:29:ec:13:d5:f6:82:04:18:c3:
b5:bc:3b:03:7d:69:f9:a9:71:ae:d4:ce:82:bf:c1:96:84:b5:
10:19:3c:ff:cd:41:c3:82:88:1b:a9:e1:c7:94:bf:77:80:bb:
a4:76:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:34 2025 by rpki-client