Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer
File: 843FDF32A52D11795BBFB0918ABF926E0A210870.cer (raw, json)
Hash identifier: bqju+uIy4hM/2e9M+kbvJEWfpVYTaD2s08jmL2EeWO4=
Subject key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5E14B03C18220DB1B2B1B4D9498E8E6578D335B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft
caRepository: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Jan 2025 05:56:38 +0000
Certificate not after: Fri 16 Jan 2026 06:01:38 +0000
Subordinate resources: IP: 210.87.124.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:14:b0:3c:18:22:0d:b1:b2:b1:b4:d9:49:8e:8e:65:78:d3:35:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 17 05:56:38 2025 GMT
Not After : Jan 16 06:01:38 2026 GMT
Subject: CN=843FDF32A52D11795BBFB0918ABF926E0A210870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:0d:03:d7:d5:b4:e5:21:4a:22:0d:b2:08:
be:70:ec:33:4d:19:6d:03:ae:5f:d5:ce:1a:f5:c8:
c3:1c:89:56:64:32:45:f3:79:e2:d4:62:4e:4a:c7:
a2:e4:9d:e2:db:3f:0b:49:20:69:ff:15:b8:7c:1c:
b3:05:af:a2:4a:f5:27:33:26:b7:5b:a0:d5:ae:3a:
4c:35:59:9e:9d:5f:b4:59:db:4a:9c:fc:c8:36:48:
66:30:00:bc:60:3d:ff:40:dc:d4:e6:7d:b1:13:dd:
f0:a2:76:c1:12:1c:2e:d6:e9:ac:fc:ae:56:b8:e4:
57:e9:29:fe:29:ba:9b:1a:d0:47:53:ee:ec:67:b2:
49:07:c8:d2:fa:71:5b:f7:13:b9:da:97:00:66:87:
a7:58:dc:b7:05:03:36:33:98:d2:69:95:ca:fb:32:
d8:71:1e:2f:11:82:00:57:1f:3a:4e:41:ae:cd:67:
45:c3:15:a5:e2:0d:3e:be:c0:10:e9:65:03:cd:e1:
25:fd:80:d0:21:50:6c:c7:de:db:af:68:26:92:f7:
21:39:f0:67:a1:ff:15:4c:d4:db:a2:ff:6d:7d:50:
76:3b:59:da:e9:06:02:cf:8d:c9:e8:5c:29:e0:c6:
c4:bb:8b:2e:a6:8c:fd:66:c9:96:3f:e4:e6:26:e5:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.87.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:fd:67:db:ac:dc:48:00:f3:a2:5b:f4:bc:8e:69:aa:5d:8b:
e8:9d:ae:8b:3a:6a:97:1f:dd:3f:e0:fc:37:52:58:9c:57:09:
b5:92:9d:4e:ae:38:82:45:9c:d2:60:90:42:53:2a:23:4d:dd:
4f:4b:4f:39:50:19:bb:00:72:70:da:d7:a2:89:8c:d9:21:5a:
d2:d0:a5:7e:06:1e:d4:9a:22:5d:b5:03:2d:15:9b:26:f9:c4:
61:27:0c:92:e1:8f:87:42:95:b9:07:bf:f6:08:09:56:30:61:
42:ac:70:9b:9a:e6:5d:c8:2e:aa:49:a2:04:bd:80:e7:37:2d:
bf:d1:04:cf:d2:e2:bf:76:b2:ef:0f:3a:e8:cc:29:b2:43:fb:
0c:4b:12:bd:82:33:96:59:99:56:68:8c:07:2d:92:b4:b1:20:
cd:83:6c:3f:24:ec:2c:6a:0c:c7:24:1a:09:0c:21:af:61:e1:
df:2d:b7:06:33:a3:4a:30:bf:87:9b:cf:f6:cd:61:3d:d7:05:
69:e7:f2:3d:0f:31:ab:6e:93:f7:3f:9b:29:b5:85:00:c9:13:
58:28:c7:97:24:89:62:bd:2a:cd:07:e9:5e:e2:e9:77:33:c9:
63:cb:2b:3f:01:72:8f:67:6d:af:e8:ee:69:37:b1:5b:3c:dc:
62:42:e7:7e
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUXhSwPBgiDbGysbTZSY6OZXjTNbAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExNzA1NTYzOFoX
DTI2MDExNjA2MDEzOFowMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZC
MDkxOEFCRjkyNkUwQTIxMDg3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK8CDQPX1bTlIUoiDbIIvnDsM00ZbQOuX9XOGvXIwxyJVmQyRfN54tRiTkrH
ouSd4ts/C0kgaf8VuHwcswWvokr1JzMmt1ug1a46TDVZnp1ftFnbSpz8yDZIZjAA
vGA9/0Dc1OZ9sRPd8KJ2wRIcLtbprPyuVrjkV+kp/im6mxrQR1Pu7GeySQfI0vpx
W/cTudqXAGaHp1jctwUDNjOY0mmVyvsy2HEeLxGCAFcfOk5Brs1nRcMVpeINPr7A
EOllA83hJf2A0CFQbMfe269oJpL3ITnwZ6H/FUzU26L/bX1QdjtZ2ukGAs+Nyehc
KeDGxLuLLqaM/WbJlj/k5iblZ3MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFIQ/3zKlLRF5W7+wkYq/km4KIQhwMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by81N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3YmU4Yjdj
LTIzMmYtNDdlOC05Y2RkLTg4MTdkMzliNzBlYS8wLzg0M0ZERjMyQTUyRDExNzk1
QkJGQjA5MThBQkY5MjZFMEEyMTA4NzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHSV3wwDQYJKoZIhvcNAQELBQADggEBAC39Z9us3EgA86Jb9LyOaapdi+idros6
apcf3T/g/DdSWJxXCbWSnU6uOIJFnNJgkEJTKiNN3U9LTzlQGbsAcnDa16KJjNkh
WtLQpX4GHtSaIl21Ay0Vmyb5xGEnDJLhj4dClbkHv/YICVYwYUKscJua5l3ILqpJ
ogS9gOc3Lb/RBM/S4r92su8POujMKbJD+wxLEr2CM5ZZmVZojActkrSxIM2DbD8k
7CxqDMckGgkMIa9h4d8ttwYzo0owv4ebz/bNYT3XBWnn8j0PMatuk/c/mym1hQDJ
E1gox5ckiWK9Ks0H6V7i6XczyWPLKz8Bco9nba/o7mk3sVs83GJC534=
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:16:49 2025 by rpki-client