Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.cer (raw, json)
Hash identifier: cg1sr99Y4lSaSlq19baVXe7yqQQDEffgRkqXSkA97iw=
Subject key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 614C4CCA3350A5236570B9C9CB2D37A90FE665FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 27 Mar 2025 16:33:28 +0000
Certificate not after: Thu 26 Mar 2026 16:38:28 +0000
Subordinate resources: IP: 103.17.76.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4c:4c:ca:33:50:a5:23:65:70:b9:c9:cb:2d:37:a9:0f:e6:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 27 16:33:28 2025 GMT
Not After : Mar 26 16:38:28 2026 GMT
Subject: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:32:f1:23:64:d4:84:7b:f6:c3:3b:fa:84:95:
a9:6a:ab:dc:4f:77:04:50:26:bc:20:3a:4d:2b:bd:
9a:97:3c:1d:cf:38:87:85:2b:d7:6f:3a:1c:07:ec:
0c:6d:5e:01:8f:3f:da:80:e3:04:e9:3c:2d:55:08:
83:86:51:76:8c:2c:bb:09:20:7d:05:27:89:76:48:
51:de:aa:a4:c5:79:ee:10:16:ee:2b:d4:32:b3:21:
7b:b1:c5:4f:bf:ac:e0:8a:82:a1:50:25:ee:dd:dc:
6a:3e:69:29:68:62:2d:f9:65:ef:14:eb:1c:94:7e:
fd:7d:6a:93:b9:62:71:79:53:7f:da:2f:2e:c5:0c:
a0:d5:86:f7:9c:96:65:b9:b3:02:7a:d1:aa:90:d8:
c7:6d:bd:d6:58:6b:7d:c1:12:82:ea:d9:d5:6c:d0:
8b:ba:ca:14:af:c4:3d:08:c2:ba:7b:a1:ef:15:e3:
4c:ef:fe:bd:d8:0e:9e:fa:8f:47:4c:b4:d0:bf:d0:
e0:e5:33:08:a8:b6:f4:2c:42:3c:09:6c:c2:7f:2e:
4a:ff:5c:c1:1b:9e:78:39:ca:2c:31:f2:06:ec:c4:
72:8b:dc:fe:17:f7:5f:42:8d:f3:17:81:99:d5:f6:
26:e6:10:a2:63:4a:a7:7a:31:6d:c1:c2:a7:20:03:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.76.0/23
Signature Algorithm: sha256WithRSAEncryption
95:93:92:76:bd:0b:d3:cc:99:cf:62:27:f8:54:18:6c:d4:a7:
33:4c:16:05:36:5f:64:7c:3e:7c:0f:2f:5b:ce:70:0c:81:8f:
d1:a0:15:71:87:c9:61:cf:9c:a9:08:a6:47:31:86:70:3b:38:
5f:0f:ff:bb:98:af:30:a7:e9:22:58:02:c8:ce:63:9d:04:6d:
1a:bd:28:7a:f3:e6:4e:d8:84:a2:93:fc:dc:75:23:5a:fa:65:
0e:16:ff:07:8a:45:dc:80:ca:ff:8b:6b:61:a2:0a:d2:17:3f:
bd:d4:9a:dc:39:85:b0:2f:87:a5:e7:1d:d7:68:1c:64:18:14:
a2:0b:4f:f5:0d:4e:cc:bb:da:44:d3:c6:29:3a:82:d5:93:24:
7e:c8:0b:be:91:3a:0a:3f:30:b7:60:b2:4d:14:a9:61:30:77:
ce:ea:1c:3e:0b:4f:0a:cd:70:76:3e:22:40:d1:01:70:a4:65:
df:55:10:cd:4f:5e:4d:f8:36:60:90:2a:76:9d:ae:54:47:0f:
08:c1:8c:37:92:7b:e2:0d:30:68:9e:c8:6c:f7:67:61:32:f4:
67:bd:a0:6d:b7:ce:e1:76:b9:ac:47:b7:a1:4b:09:93:87:4f:
8d:ac:ea:37:31:54:08:d5:d3:4b:b4:a0:0f:85:ed:48:0a:59:
d7:1d:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:15 2025 by rpki-client