Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
File: 61566F205F7037962069571320603B274357CC6D.cer (raw, json)
Hash identifier: lQ+mPz0HEQfh17JRlGmkS605yvDYoecmjogsZ3scpaU=
Subject key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 019783488040D58A9C9A0F2C505E3DF7F4B04F5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
caRepository: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 26 Feb 2024 11:40:47 +0000
Certificate not after: Mon 24 Feb 2025 11:45:47 +0000
Subordinate resources: IP: 27.124.80.0 -- 27.124.82.255
IP: 27.124.84.0 -- 27.124.95.255
IP: 43.240.224.0/23
IP: 103.3.76.0/22
IP: 103.18.34.0/23
IP: 103.25.109.0 -- 103.25.111.255
IP: 103.26.4.0/22
IP: 103.42.40.0/22
IP: 103.47.228.0/23
IP: 103.55.220.0/22
IP: 103.121.238.0/23
IP: 103.206.240.0/22
IP: 103.215.178.0/23
IP: 103.248.219.0/24
IP: 103.253.86.0/23
IP: 119.47.91.0/24
IP: 119.252.160.0/20
IP: 121.100.16.0/21
IP: 124.158.160.0/20
IP: 157.119.56.0/22
IP: 163.53.184.0/22
IP: 182.48.160.0/19
IP: 202.57.17.0 -- 202.57.18.255
IP: 202.57.22.0/23
IP: 202.62.8.0/22
IP: 202.146.48.0/20
IP: 202.162.208.0/20
IP: 203.89.146.0/23
IP: 220.247.168.0/21
IP: 2400:4a00::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 May 2024 18:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:48:80:40:d5:8a:9c:9a:0f:2c:50:5e:3d:f7:f4:b0:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 26 11:40:47 2024 GMT
Not After : Feb 24 11:45:47 2025 GMT
Subject: CN=61566F205F7037962069571320603B274357CC6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:af:89:10:c9:c9:c2:1d:60:f1:41:dc:61:
86:21:3f:7b:03:c9:b9:01:e4:6d:8f:de:18:4b:37:
9d:c1:66:18:5c:2f:aa:41:23:ed:83:f1:33:2f:15:
ff:ec:51:31:6e:63:56:71:bb:c3:04:20:d3:dc:bc:
07:df:00:91:2a:f8:38:e0:ab:81:98:80:45:36:de:
7a:8b:46:57:88:4e:a7:ce:26:ce:c6:a2:27:5b:66:
b3:f6:25:04:98:b1:12:18:37:77:cd:c9:fa:76:60:
71:4e:bd:6a:15:71:dc:d3:5e:13:31:1d:0c:60:87:
fe:f5:f9:3b:ff:43:58:8b:25:be:c1:68:2b:89:86:
13:98:72:72:19:7f:e8:90:f1:8d:85:06:4c:2c:80:
df:cc:51:fe:5f:00:91:f3:a7:c2:57:88:a4:c0:43:
15:40:d6:72:4e:db:ec:99:f1:e3:32:66:8a:db:9c:
9a:d2:15:38:71:ad:e1:59:95:27:d6:d6:e0:96:2a:
21:51:a3:16:cd:77:86:71:01:60:73:e6:18:4b:fe:
35:16:8b:1f:ff:06:b8:76:87:cd:f6:5a:15:f4:e6:
09:d2:bb:40:46:df:18:1b:24:87:46:4f:f6:b8:76:
c9:2c:8f:c6:b7:c4:dd:fc:2a:a2:8b:59:eb:bb:14:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.80.0-27.124.82.255
27.124.84.0-27.124.95.255
43.240.224.0/23
103.3.76.0/22
103.18.34.0/23
103.25.109.0-103.25.111.255
103.26.4.0/22
103.42.40.0/22
103.47.228.0/23
103.55.220.0/22
103.121.238.0/23
103.206.240.0/22
103.215.178.0/23
103.248.219.0/24
103.253.86.0/23
119.47.91.0/24
119.252.160.0/20
121.100.16.0/21
124.158.160.0/20
157.119.56.0/22
163.53.184.0/22
182.48.160.0/19
202.57.17.0-202.57.18.255
202.57.22.0/23
202.62.8.0/22
202.146.48.0/20
202.162.208.0/20
203.89.146.0/23
220.247.168.0/21
IPv6:
2400:4a00::/32
Signature Algorithm: sha256WithRSAEncryption
29:1e:a4:5a:67:3e:2e:0c:f9:26:b3:e3:38:d2:2b:42:11:c5:
1a:55:71:a4:93:d0:03:4a:3b:32:d7:15:e5:a4:67:11:61:66:
32:1e:e1:82:3b:88:b5:3c:06:fb:a8:cc:ef:2e:a7:16:1c:55:
96:29:71:5b:62:d5:8e:2f:96:21:00:9f:29:1e:a7:88:b6:0a:
45:a7:81:9b:d6:9f:9a:cc:05:cd:9e:f2:03:dc:5a:0e:94:43:
be:68:b1:06:3f:cd:da:c2:35:9f:d8:6f:95:11:c5:31:c7:ea:
14:f7:48:3d:8e:a1:47:f8:30:ba:f8:c9:36:6a:bb:21:ed:17:
85:c1:fc:e9:b7:90:b4:02:b3:3c:00:ca:6a:50:75:aa:3a:4f:
b7:30:cf:db:8b:78:57:24:65:91:15:4c:1a:fa:20:89:73:a1:
85:24:ea:3f:6a:24:af:8a:1b:0b:55:17:ad:26:70:7a:9d:32:
9c:a6:4f:22:68:4b:2b:b1:7e:25:dd:b4:af:81:04:9e:ea:56:
90:76:79:76:e1:68:92:d4:6b:60:14:f0:12:cc:80:49:b6:de:
6e:0d:da:c5:54:e2:99:50:29:36:26:4e:a7:7a:66:de:12:fa:
6e:9d:10:be:70:f8:4f:72:09:4e:62:ea:b0:b2:32:4a:90:f1:
48:58:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:45:18 2024 by rpki-client on console-ams.rpki-client.org