Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
File: 782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer (raw, json)
Hash identifier: rnVbu7lNW9xtUo2HdrE/oZIVKca5nCCDzlaEOC4/Ylg=
Subject key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5857BDA1CE72B28B95A9B96934BD8163D55678F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
caRepository: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 21 Mar 2025 18:37:45 +0000
Certificate not after: Fri 20 Mar 2026 18:42:45 +0000
Subordinate resources: IP: 103.21.216.0/22
IP: 202.77.96.0/19
IP: 202.137.0.0 -- 202.137.23.255
IP: 2405:100::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:57:bd:a1:ce:72:b2:8b:95:a9:b9:69:34:bd:81:63:d5:56:78:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 21 18:37:45 2025 GMT
Not After : Mar 20 18:42:45 2026 GMT
Subject: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:28:3f:64:39:f9:48:46:97:ea:20:93:0e:
f5:bf:37:88:04:33:f1:89:62:e2:51:cb:c8:05:53:
64:0d:bb:85:77:b9:e8:eb:fd:7b:29:72:8a:70:f5:
e7:b3:49:b2:73:c7:2d:2a:78:d4:37:14:b8:26:17:
3e:eb:93:95:f1:4f:d9:6c:a7:6d:0c:0a:12:74:d1:
b3:c1:a7:da:7e:2c:ff:86:36:17:1b:9d:58:e3:08:
9c:c8:e9:31:2e:26:9e:b0:d0:d2:7c:3e:3d:ab:ff:
39:d7:f0:23:22:3d:e8:ec:34:4b:92:d8:93:66:47:
01:a3:db:d2:dc:72:63:32:91:a6:9b:f2:45:19:d3:
79:20:5e:5d:d5:9c:ff:27:5d:40:04:48:6f:89:19:
77:8f:40:c2:35:37:70:1e:cd:b0:02:3f:9b:8e:29:
48:f1:58:36:74:9c:ec:98:1c:6b:0b:6b:63:c6:38:
26:cd:d2:79:97:58:4c:64:7b:b6:5a:15:91:ab:dc:
af:5a:ca:e2:20:26:17:d2:7f:58:d9:2e:a6:18:04:
7a:dc:0d:d7:d7:4c:df:30:66:ef:ee:02:2b:05:7e:
b5:d7:d9:41:a2:af:f6:b9:c8:45:3e:b0:99:ed:ec:
e4:4b:14:b3:5a:68:f2:69:a9:86:86:9a:bf:e6:88:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.216.0/22
202.77.96.0/19
202.137.0.0-202.137.23.255
IPv6:
2405:100::/32
Signature Algorithm: sha256WithRSAEncryption
2d:a5:39:9b:fb:5a:f2:74:13:8a:de:14:41:01:22:59:09:e8:
3e:29:f8:77:0e:fc:41:45:1d:19:d8:8a:e6:58:14:f7:c2:c6:
64:1f:26:95:23:9a:a0:28:72:a5:cc:75:c2:0a:23:66:ac:38:
9f:97:9a:f9:ed:ee:ad:de:62:09:52:73:6a:4c:e3:a1:8d:e8:
04:a5:0c:e4:98:60:69:6c:de:40:61:e7:e3:2f:fe:d4:d2:9d:
b8:f5:63:ca:52:68:29:ee:9e:b2:3f:2e:59:d3:17:da:68:b3:
16:38:b8:7b:56:f3:e4:bd:61:b5:5a:00:7d:87:ab:7a:84:20:
81:bb:1b:c5:92:a3:14:4b:36:4e:7b:17:f2:2d:65:cf:ec:be:
49:e6:63:74:75:ce:7d:0f:73:59:4e:54:42:86:81:79:ba:eb:
f2:3b:a6:30:8b:5d:ab:fd:a4:4c:f4:90:27:62:f3:41:5b:92:
4d:d3:9d:ed:19:a4:2e:59:01:4c:4a:28:9c:6b:1e:c1:b7:fb:
6d:bf:58:05:09:c2:3b:74:62:49:46:4c:d4:fc:52:2e:f9:dc:
53:f2:67:c2:e0:07:95:b7:6c:c6:7c:67:45:2c:02:1a:17:58:
6b:66:25:ba:60:96:4c:4f:92:2d:87:ad:62:2c:4e:ac:34:48:
ff:ed:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:01 2025 by rpki-client