
Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer
File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer (raw, json)
Hash identifier: JflwgDw78H/FrWHRkMxiP2XcHgBbH4P3EljlQCvbxFY=
Subject key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5E775BD41F172FF2266E52F2DA95F0239A860F14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 21 Jan 2025 03:26:14 +0000
Certificate not after: Tue 20 Jan 2026 03:31:14 +0000
Subordinate resources: IP: 103.179.252.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:77:5b:d4:1f:17:2f:f2:26:6e:52:f2:da:95:f0:23:9a:86:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 21 03:26:14 2025 GMT
Not After : Jan 20 03:31:14 2026 GMT
Subject: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:91:0c:c6:1c:df:f1:3e:28:99:76:bf:b1:
ab:01:97:12:3f:63:e0:42:d6:96:d0:12:a6:4f:66:
ba:22:b1:18:a3:d1:38:28:83:1c:3d:d9:e7:ae:11:
b0:44:ee:5d:15:35:9c:71:b5:44:b7:e8:ab:f8:0e:
5a:43:ef:03:99:f9:4b:ee:37:05:2d:3e:95:ba:08:
25:85:0a:fc:35:d9:47:c5:4d:d1:16:e5:0c:95:19:
d7:50:5a:ae:27:33:3c:4e:1c:b1:1f:e5:a4:ce:0d:
8d:9c:4f:bd:6a:22:87:c8:ba:60:d9:eb:56:9c:04:
a6:ff:8a:41:e2:68:52:8c:51:ab:44:2d:98:6d:93:
3d:11:c5:6c:8c:e2:2c:95:fd:28:e5:01:59:8d:a2:
ce:64:2f:f8:2a:5d:12:c9:e0:6d:10:9c:19:22:2a:
d1:d5:e9:27:fe:45:ac:e5:84:0d:fd:e9:c2:20:55:
58:48:f9:db:f5:2b:55:d6:be:60:da:2a:68:57:8c:
83:43:69:18:63:b2:2a:4c:cf:2d:b2:c6:c3:d9:27:
44:11:fd:1a:7a:ec:37:73:0d:f0:f6:a7:93:59:43:
d0:d7:51:14:fd:2d:c9:62:87:fb:ca:a0:dd:5a:a7:
18:0a:38:0a:9d:a1:f0:c9:ef:14:1e:2a:58:e4:f8:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.252.0/23
Signature Algorithm: sha256WithRSAEncryption
03:dc:6d:ac:4e:f1:f1:9e:4c:2c:1c:10:b9:72:d7:73:39:65:
47:f2:7a:5e:d5:1b:73:f4:06:af:a3:57:4a:47:9f:6c:3f:d4:
b1:54:7c:87:15:d5:95:c8:14:d7:33:7d:4c:fd:67:b3:63:1b:
67:57:b2:b0:08:4d:90:79:e3:71:6c:5a:c4:0e:ed:b4:36:b8:
2a:18:53:c2:2d:3c:6e:1e:9f:f3:c0:5e:80:47:d6:84:97:de:
e5:95:3e:16:2c:2c:6e:c0:1c:ae:0d:db:2c:3f:d0:67:6e:4e:
60:83:73:89:19:52:f8:8f:a6:df:8c:f2:1d:31:35:0d:77:9b:
17:c0:c1:4a:58:2d:da:c0:cf:fe:56:32:22:e2:48:ea:8b:23:
93:13:e8:8f:32:46:8e:41:bd:e7:1d:26:3e:f9:37:76:cb:0b:
f2:3d:13:34:b7:2f:f0:5c:35:84:f3:a7:76:b7:a3:12:e1:34:
15:c4:8d:cc:57:e5:d6:cb:44:0b:2c:8c:e2:36:5a:06:79:ba:
47:b8:ac:b8:99:90:99:35:e6:d2:0b:d9:ec:c7:0a:de:4f:47:
cf:fc:a4:ae:1c:20:f7:6d:cc:70:25:25:9d:af:b1:c5:3a:22:
42:1d:90:4c:c8:fe:12:43:3e:aa:97:a9:e6:fb:f6:7a:90:2d:
56:b7:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:22 2025 by rpki-client