Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer
File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer (raw, json)
Hash identifier: SsNs2bgSJQmhdXE1jv/f0jMqFLeXYizo2rxI9x/0qPA=
Subject key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4CFE0923AA4600D0E0F8C3F9FDE26D03805B7C7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft
caRepository: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sun 30 Jun 2024 07:18:34 +0000
Certificate not after: Sun 29 Jun 2025 07:23:34 +0000
Subordinate resources: IP: 210.87.123.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fe:09:23:aa:46:00:d0:e0:f8:c3:f9:fd:e2:6d:03:80:5b:7c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jun 30 07:18:34 2024 GMT
Not After : Jun 29 07:23:34 2025 GMT
Subject: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:68:4f:46:42:97:49:73:f5:06:8a:d5:54:
11:21:9e:d7:b5:66:54:e3:f4:15:25:01:f4:ab:7c:
a0:73:5b:d3:be:3c:98:81:b8:31:80:1a:e4:ec:49:
b2:03:19:09:77:6c:e4:5e:ca:af:11:8a:57:8e:e7:
08:e1:f9:3d:9e:27:1e:28:c5:1f:0f:48:61:14:d0:
f2:ae:a8:8b:48:a1:a2:7e:82:d3:7c:bf:83:26:64:
32:49:0a:41:d2:8b:ec:f5:f5:f8:a9:f4:86:ac:fd:
c3:84:f5:3d:9c:c0:1d:8a:71:89:81:e6:ee:a5:d0:
ac:a3:58:c7:b5:39:20:f0:d0:79:50:91:54:ce:70:
33:f1:ee:5f:8c:2d:76:06:d5:e2:4e:25:76:e4:be:
67:59:d1:b2:d6:d5:de:92:54:1d:20:9e:99:f3:16:
bd:18:0c:66:5a:77:b6:a0:ab:33:b4:c7:2d:62:90:
21:d6:bd:b2:5a:e5:0f:b5:90:27:f2:2e:ef:b3:8e:
08:a7:8a:2b:b3:64:fd:db:2e:49:31:c3:3a:29:d4:
0a:77:70:b1:b8:cb:81:b8:6f:53:07:9f:92:ac:2c:
72:f8:ea:42:f2:b7:15:2f:73:12:f2:3c:59:96:4b:
41:9e:c2:60:b0:f9:57:a9:11:d3:cc:d7:87:27:45:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0c:63:05:a7:38:33:a0:76:79:14:51:84:41:7e:4d:85:6f:
1a:64:24:f7:25:47:a2:d8:bf:18:f2:09:14:ac:f2:7d:53:a7:
27:0a:ce:de:0e:c4:e2:73:fb:9e:c9:63:cb:b7:1e:8b:a9:08:
bd:c2:31:8e:68:41:0e:eb:34:1b:2c:fd:81:02:97:aa:49:63:
2c:b5:bd:9a:d9:72:4a:f1:4b:c1:3c:0e:97:79:39:46:be:1d:
a8:fb:42:33:08:db:34:d5:de:83:1a:68:49:e8:b9:25:54:35:
77:1b:bc:58:ec:a1:a1:af:e0:5b:3a:cf:75:16:e1:d5:b0:fb:
77:cd:89:01:0a:4c:3f:8e:9a:7b:8f:ec:f4:c8:65:b7:83:8d:
bf:cc:78:c4:ea:a2:03:5c:83:3f:a4:f5:fa:98:3f:ef:48:ef:
a5:19:be:83:62:ec:1e:9c:1a:46:d7:15:03:59:75:db:61:36:
c3:a0:57:8a:f6:fc:75:73:37:6a:60:7c:3d:06:23:de:49:36:
36:3b:5a:8c:db:d0:14:96:48:0b:06:9a:f3:6f:a3:f5:d2:93:
ff:e6:8e:9f:ea:b3:8a:41:44:c2:e9:8e:d4:34:bd:fd:15:fe:
41:14:5f:cf:d8:f6:03:d0:73:41:de:3c:4a:87:de:52:93:09:
49:43:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:53 2025 by rpki-client