Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer
File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.cer (raw, json)
Hash identifier: y1Z6TEdYX8q/R4GU24E0ZHt3KxCcYws8H3TgjPXYkDs=
Subject key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 60A9C69217AE1D6D4EA86362F2785E4228B3EA11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
caRepository: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 22 Aug 2024 00:26:08 +0000
Certificate not after: Thu 21 Aug 2025 00:31:08 +0000
Subordinate resources: IP: 43.248.24.0/22
IP: 103.10.96.0/22
IP: 103.23.240.0/22
IP: 203.128.64.0/19
IP: 203.201.50.0/23
IP: 2401:1b00::/32
IP: 2403:c600::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a9:c6:92:17:ae:1d:6d:4e:a8:63:62:f2:78:5e:42:28:b3:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Aug 22 00:26:08 2024 GMT
Not After : Aug 21 00:31:08 2025 GMT
Subject: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:96:42:f6:d0:5f:a4:fc:04:73:4e:1f:ab:
90:bb:ef:e9:3d:76:34:b0:ef:6f:42:0d:16:23:00:
95:07:58:aa:a3:db:a2:90:92:87:52:2d:da:93:19:
06:f4:91:18:df:db:69:a8:44:e0:49:32:64:7c:55:
d7:41:5b:2f:0d:32:88:5f:66:ea:32:3a:0b:bd:8e:
46:09:0c:fc:8b:f9:3d:41:0c:25:98:fc:9f:51:0d:
03:8b:df:c9:45:78:8c:21:de:e1:e0:2c:90:f3:69:
c3:c8:f7:36:27:e6:1c:17:51:8f:26:58:16:f0:94:
95:71:c5:98:fd:cd:55:0b:00:8b:48:c5:43:a9:0d:
d1:e6:33:d7:a0:2b:dc:b5:05:0c:38:85:0f:82:44:
a9:3f:ab:86:63:29:44:88:ef:e1:be:c3:b1:86:38:
55:e1:6c:53:f4:d3:70:00:d7:ae:a3:46:10:07:bd:
98:a0:cb:b9:1d:a0:20:c9:a4:e5:94:e6:2a:5b:d9:
89:80:4e:9f:bf:50:ff:64:55:22:4b:f4:11:b1:78:
c7:91:9f:dc:27:0a:22:91:1d:7d:9f:d5:a9:23:de:
dd:e6:87:bd:c0:ab:59:29:0f:7a:8c:62:70:47:44:
23:d8:96:45:a7:6f:94:00:36:1d:8a:45:11:7f:96:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.24.0/22
103.10.96.0/22
103.23.240.0/22
203.128.64.0/19
203.201.50.0/23
IPv6:
2401:1b00::/32
2403:c600::/32
Signature Algorithm: sha256WithRSAEncryption
42:80:f8:dc:e2:38:0c:88:80:c7:13:28:4a:5a:88:13:fa:7a:
eb:77:cb:e8:00:e3:63:97:f0:e1:69:84:21:2a:dc:81:df:09:
96:db:5c:63:58:68:4a:e6:56:3d:a7:a0:24:e2:a3:36:21:4a:
4b:3d:6f:23:18:98:50:47:11:fa:bf:63:6d:ce:b2:11:08:7c:
34:06:cd:b0:9c:07:e2:96:30:4a:03:d7:8f:72:c0:d3:2f:cd:
fc:d1:3e:d9:80:2a:c0:cc:2e:86:68:38:70:a4:36:f2:5f:62:
f3:0b:1d:f4:7d:cc:7e:35:ce:38:dc:92:d5:07:0d:0b:27:e7:
0d:3a:d4:57:1c:8e:dc:9f:33:7e:7e:9f:d5:81:a2:cc:99:02:
df:58:3a:39:bd:4c:0b:27:ce:61:1e:ce:e4:37:95:f3:27:22:
8c:8a:35:c2:4a:d6:a2:b5:3c:02:4a:20:d9:64:d2:77:76:aa:
59:b3:f2:35:2e:fe:b7:af:c3:ac:f3:f2:34:ad:9f:16:3d:4e:
a3:0f:9a:77:6e:0a:04:84:11:c1:fa:2c:d1:49:7b:c5:0f:a6:
6d:51:b2:1c:29:0e:a5:39:f4:0c:77:8e:34:24:e7:d9:a6:7c:
89:85:61:3d:23:cf:bf:5a:52:b7:36:1d:ae:17:ee:f9:3b:ab:
ae:23:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:14 2025 by rpki-client