Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
File: 560CF5B1622CB492E1C603F69D4FB9C11322520D.cer (raw, json)
Hash identifier: Mf7ha7qVHsmcw1dsHBifZoEKSCW/D/YZ8YjFVNhnuyc=
Subject key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 683766ECABEF7265948B1D17F33330B5C9243FA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 22 Jan 2025 06:02:23 +0000
Certificate not after: Wed 21 Jan 2026 06:07:23 +0000
Subordinate resources: IP: 103.112.190.0/24
IP: 103.112.192.0/23
IP: 103.210.193.0/24
IP: 2405:3740::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:37:66:ec:ab:ef:72:65:94:8b:1d:17:f3:33:30:b5:c9:24:3f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 22 06:02:23 2025 GMT
Not After : Jan 21 06:07:23 2026 GMT
Subject: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:35:b9:e3:3c:c0:5c:cf:a2:8c:39:e7:1c:
73:7e:da:40:67:b1:b6:5a:bf:23:c7:02:9e:66:ad:
9f:77:a2:89:a8:bc:4b:92:7b:02:db:65:b7:1b:34:
49:7c:7e:4c:a5:75:fb:1a:27:d5:65:46:14:44:88:
46:16:e4:7c:98:80:43:53:07:f3:7a:3a:9c:6b:7d:
84:39:6f:19:e8:72:e2:0f:a1:b4:a9:91:48:47:f3:
84:08:13:69:af:be:24:1f:7d:30:a9:1b:51:b6:b0:
50:1d:b5:9f:7e:24:02:3f:9e:38:82:ae:53:41:fb:
b4:58:e8:52:15:02:29:cf:be:a4:bd:41:40:8d:4c:
8e:73:a1:e1:1e:c9:1f:38:a4:00:56:b3:7e:a6:45:
37:77:ac:1f:ee:1e:28:bd:da:86:4c:3c:55:75:d8:
3c:7f:76:60:d6:d7:04:66:d6:d7:9a:3b:49:10:57:
91:4f:5e:6d:aa:87:d6:b7:82:56:3a:92:3f:b8:20:
a7:e2:c6:5e:8d:3a:d0:33:3a:ba:52:db:fc:e0:d1:
e1:27:d4:66:32:f8:f6:36:1e:8d:34:95:70:46:83:
be:b6:6d:14:68:2f:6f:ca:0e:59:ce:17:00:60:ba:
12:be:aa:7b:4a:5c:76:82:52:a5:bd:7e:a3:c6:6f:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.190.0/24
103.112.192.0/23
103.210.193.0/24
IPv6:
2405:3740::/32
Signature Algorithm: sha256WithRSAEncryption
72:9d:73:54:4b:0d:85:ea:a3:4f:a8:3f:1d:f6:b7:87:f9:cc:
bb:27:a8:fc:33:3e:7d:2e:1a:f3:88:5c:0a:ee:31:ea:a7:05:
28:79:77:b0:bc:b4:1b:7b:cb:4a:a9:1c:89:b6:d5:68:4c:20:
39:b9:23:41:12:bc:b5:72:e9:1a:47:cb:7d:65:13:7c:40:66:
5f:c1:c5:06:34:61:5e:c0:e8:76:99:ab:82:3c:ac:66:31:21:
6d:3a:06:bf:e3:f3:5c:ff:c3:57:d1:4f:e6:df:60:af:7c:a2:
b0:4e:19:48:b3:a7:9a:c3:89:4d:34:4a:0f:24:b2:7d:7a:b2:
e5:f4:75:08:93:a7:63:96:25:d8:48:86:7a:64:56:1a:c8:cd:
79:e9:b0:a6:39:3b:3a:f7:b7:00:6e:e0:6d:14:6a:51:6c:70:
55:6a:67:dd:51:be:68:98:51:32:39:7d:63:c9:ec:5c:d4:33:
4c:63:82:d1:c4:6c:3c:75:2b:d5:62:f5:6f:7c:70:7c:c0:5d:
6b:83:7e:41:6e:e6:80:ef:ca:df:34:b9:55:e7:45:99:cf:3c:
e3:73:3d:00:6e:8f:aa:e1:d3:49:b4:b1:95:c7:6b:2f:fc:d1:
b3:33:d8:86:5a:18:bc:cd:60:b6:7f:aa:b4:cf:4e:fd:e9:bb:
97:df:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:07 2025 by rpki-client