Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer
File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer (raw, json)
Hash identifier: 6Tz3baKrpjR+g+t6FoioFtqDiqQpJA+RemwdPoBU3cM=
Subject key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0F3FC377D3EBBA0FE0D1B6D68B08711BB9AFA0B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 30 Dec 2024 11:07:55 +0000
Certificate not after: Mon 29 Dec 2025 11:12:55 +0000
Subordinate resources: IP: 202.47.160.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:3f:c3:77:d3:eb:ba:0f:e0:d1:b6:d6:8b:08:71:1b:b9:af:a0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 30 11:07:55 2024 GMT
Not After : Dec 29 11:12:55 2025 GMT
Subject: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:62:c2:db:56:75:0e:73:b8:01:8d:1f:31:
4b:82:38:80:3a:ab:c6:f0:92:b7:ef:75:33:96:5d:
ff:e8:1d:ce:72:43:ab:eb:50:66:6d:a7:32:4a:c0:
84:27:36:c4:cd:fb:81:f0:55:f8:4e:53:be:19:61:
fa:b4:1c:d3:2a:98:c2:1c:32:b1:6b:36:43:76:ad:
0f:33:2a:a7:8e:44:18:5c:75:2f:90:6e:6b:de:e8:
fa:0c:3e:2d:30:57:20:e1:e1:7e:f9:15:7d:79:5b:
26:eb:b8:3b:28:d2:69:28:a9:fd:5e:8a:36:82:b3:
e3:ac:db:aa:c8:0c:1e:bc:4e:8c:3a:02:2b:9c:8c:
b8:d0:46:3e:90:7d:11:fb:c7:93:6d:5b:70:00:de:
a4:23:1a:fb:60:f0:3d:47:7f:79:02:cb:71:8e:66:
f0:78:0a:69:e3:f1:4d:ec:38:54:ae:8e:b5:82:f3:
f3:49:bb:b0:d3:20:cd:e7:d7:72:4f:b9:de:60:40:
cb:2b:cc:90:f1:62:98:1b:4f:a1:2f:16:07:97:89:
83:09:6c:65:1d:92:61:8c:18:c2:77:af:f5:1b:f5:
40:9e:2b:fc:73:71:fc:03:99:ac:c4:d4:92:7d:c9:
04:3e:ef:2d:77:8f:12:8a:38:1e:c3:5d:0a:b8:d9:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.160.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e6:af:c1:3f:9a:99:12:bd:03:4a:bd:7a:65:1b:d9:e8:30:
22:e2:1a:e8:97:26:27:35:c3:ff:39:ef:44:6b:27:9c:6b:7f:
d7:11:58:7d:b6:bc:50:f7:ed:41:f6:36:71:9a:d7:3d:ea:ab:
8b:54:41:df:3d:53:88:d9:71:33:ba:6e:be:c0:a5:ec:f3:f0:
4f:6a:fe:48:62:e7:3e:8d:a0:1d:95:7c:ef:f3:dd:0f:c9:70:
84:3f:66:aa:cb:96:85:20:3c:c2:9d:2a:ec:ef:cc:a9:83:a2:
09:db:9b:a3:ba:02:06:72:c6:44:df:c0:1d:57:63:82:60:6c:
e8:7a:94:3b:4f:a0:37:ff:2e:e9:e1:f5:fc:53:e8:1c:61:45:
fa:fe:94:74:b8:20:da:e0:7f:2d:8f:d7:c8:16:55:b7:5f:35:
d8:8d:83:74:20:bf:75:f3:30:b1:6d:7e:c4:e9:a8:d5:be:b2:
82:6c:12:8d:04:fe:fa:b5:03:1a:32:5a:92:c9:72:1e:c3:20:
43:26:7e:29:80:ab:53:54:be:57:66:6b:3e:70:c9:75:84:c8:
d6:a3:b4:92:63:5e:5a:8a:28:f4:cc:f5:65:88:b3:bc:e0:67:
d9:67:fc:bf:01:24:25:89:a8:1d:20:77:77:89:7c:30:3d:52:
73:86:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:35 2025 by rpki-client