Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer (raw, json)
Hash identifier: C8mQyApxwV6prG1F6QBZ60uBZ3IZkp4AWGcuoO5hkIA=
Subject key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7133D43126CB82DEC4165FA1C15936A96F6F2F74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
caRepository: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sun 02 Feb 2025 01:09:30 +0000
Certificate not after: Sun 01 Feb 2026 01:14:30 +0000
Subordinate resources: IP: 103.16.79.0/24
IP: 103.116.108.0/23
IP: 103.226.55.0/24
IP: 2001:df0:46c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:33:d4:31:26:cb:82:de:c4:16:5f:a1:c1:59:36:a9:6f:6f:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 2 01:09:30 2025 GMT
Not After : Feb 1 01:14:30 2026 GMT
Subject: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:12:65:32:cd:29:f0:c8:e6:5a:b8:a0:bd:
c6:dd:08:23:72:86:d5:66:57:68:4e:bd:cf:f8:20:
5c:3b:5c:94:13:1c:92:61:ef:ab:4e:6c:b1:2b:37:
33:d8:7f:98:81:47:e2:28:e5:1d:82:5f:73:0c:0f:
f3:37:b9:36:d2:e8:c9:f7:ab:3c:33:9e:f9:54:51:
8f:4e:7b:a3:54:a0:fa:c3:02:3d:c9:bf:18:a5:2f:
0f:96:09:d5:98:da:db:98:cd:c4:bc:ac:51:be:6a:
e9:11:fa:f9:b2:42:2f:71:65:34:81:39:4e:47:31:
c7:ef:60:83:b9:68:54:cb:df:88:e4:67:53:db:23:
eb:52:a0:02:67:f3:84:7b:9f:d2:cd:5d:f5:7e:ff:
2e:10:bc:86:50:e5:62:49:b7:2f:8e:ee:ad:8a:4d:
06:78:11:59:2a:5f:fd:cf:47:4a:83:77:99:b4:e1:
95:56:1e:2d:89:60:ce:98:39:40:51:d0:14:88:1b:
7d:e9:15:f2:63:93:c0:6f:4d:6b:8c:80:c3:3b:31:
e5:e7:e8:ab:68:53:53:ca:41:6b:85:39:c8:a3:d7:
ba:d6:6f:30:d0:80:a0:f5:6f:fb:57:9e:0e:03:c8:
13:c1:dd:b1:f5:79:e4:dd:ec:77:da:a4:0b:59:61:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.16.79.0/24
103.116.108.0/23
103.226.55.0/24
IPv6:
2001:df0:46c::/48
Signature Algorithm: sha256WithRSAEncryption
65:bf:78:2c:4f:1f:a2:bd:ad:38:72:52:e1:68:a3:97:88:9b:
f3:77:78:03:8f:06:46:1c:a5:79:97:d9:f5:26:34:11:48:f2:
f3:a3:3d:6a:95:36:26:f7:ec:1e:63:0d:d6:6b:eb:fd:20:18:
0b:a9:6b:3a:8e:25:f1:05:f3:d1:a2:7f:62:e4:93:1f:ad:fe:
2f:0a:19:48:13:31:cc:38:c5:a6:54:c0:9d:6f:3f:01:35:66:
1a:43:b0:f1:1d:5c:8f:e1:f9:d5:53:ee:84:1e:70:b1:b4:00:
fd:8c:86:dd:b4:81:00:a7:d3:64:af:1a:7f:26:43:ea:43:df:
8e:37:0f:20:97:a7:99:78:9b:6a:b4:5a:c6:88:1f:a1:e6:80:
86:1a:79:35:99:53:11:b0:13:9b:02:72:98:17:07:42:f5:a8:
3c:e5:15:be:12:bd:f9:b4:ff:04:73:fa:d1:b9:44:8c:75:98:
a7:68:22:e6:72:55:22:43:25:48:ee:ed:1a:0c:de:34:07:95:
8c:a0:f7:cd:c9:2e:41:da:61:44:7b:c7:4a:ee:e5:32:b2:f2:
19:69:48:68:5e:cc:b3:cf:8e:87:82:b1:57:99:e9:6d:77:e3:
1e:0b:35:a9:a4:74:b3:17:74:e2:92:ed:d9:aa:f4:c7:ad:fc:
bc:85:f5:43
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUcTPUMSbLgt7EFl+hwVk2qW9vL3QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwMjAxMDkzMFoX
DTI2MDIwMTAxMTQzMFowMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2
ODc3MkUxMjhGN0M1OEFDQThBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALtyEmUyzSnwyOZauKC9xt0II3KG1WZXaE69z/ggXDtclBMckmHvq05ssSs3
M9h/mIFH4ijlHYJfcwwP8ze5NtLoyferPDOe+VRRj057o1Sg+sMCPcm/GKUvD5YJ
1Zja25jNxLysUb5q6RH6+bJCL3FlNIE5Tkcxx+9gg7loVMvfiORnU9sj61KgAmfz
hHuf0s1d9X7/LhC8hlDlYkm3L47urYpNBngRWSpf/c9HSoN3mbThlVYeLYlgzpg5
QFHQFIgbfekV8mOTwG9Na4yAwzsx5efoq2hTU8pBa4U5yKPXutZvMNCAoPVv+1ee
DgPIE8HdsfV55N3sd9qkC1lh2QUCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFG1LF0jeUtzjl7hody4Sj3xYrKirMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8yNDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0MjA3NTIz
LWQ1ZjUtNGFjYy1iMGFjLWJmYjA5NTRmYTRlMC8wLzZENEIxNzQ4REU1MkRDRTM5
N0I4Njg3NzJFMTI4RjdDNThBQ0E4QUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID
BABnEE8DBAFndGwDBABn4jcwDwQCAAIwCQMHACABDfAEbDANBgkqhkiG9w0BAQsF
AAOCAQEAZb94LE8for2tOHJS4Wijl4ib83d4A48GRhyleZfZ9SY0EUjy86M9apU2
JvfsHmMN1mvr/SAYC6lrOo4l8QXz0aJ/YuSTH63+LwoZSBMxzDjFplTAnW8/ATVm
GkOw8R1cj+H51VPuhB5wsbQA/YyG3bSBAKfTZK8afyZD6kPfjjcPIJenmXibarRa
xogfoeaAhhp5NZlTEbATmwJymBcHQvWoPOUVvhK9+bT/BHP60blEjHWYp2gi5nJV
IkMlSO7tGgzeNAeVjKD3zckuQdphRHvHSu7lMrLyGWlIaF7Ms8+Oh4KxV5npbXfj
Hgs1qaR0sxd04pLt2ar0x638vIX1Qw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:21:45 2025 by rpki-client