Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer (raw, json)
Hash identifier: v7IMm/R6BD1qxtlImeQU+LrINroYsyvqEI3WvmJr5jQ=
Subject key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6ECAB883578EE2ED0A9FDAD1814AF69BFB4C80BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
caRepository: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 17 Feb 2025 17:19:56 +0000
Certificate not after: Mon 16 Feb 2026 17:24:56 +0000
Subordinate resources: IP: 103.122.8.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ca:b8:83:57:8e:e2:ed:0a:9f:da:d1:81:4a:f6:9b:fb:4c:80:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Feb 17 17:19:56 2025 GMT
Not After : Feb 16 17:24:56 2026 GMT
Subject: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:0c:05:71:01:66:7b:54:ec:a5:f6:27:ef:
51:a6:2f:2a:ab:1d:60:99:d4:65:1e:cb:61:a1:e6:
b9:39:cb:d8:7b:65:85:c3:01:aa:ee:5d:12:4f:82:
e0:d7:ee:3b:5b:d3:ce:3d:d8:1a:68:d5:29:0b:df:
f7:07:a7:68:b2:e8:b2:d6:c7:c4:88:0e:b2:dc:3e:
07:2c:64:8f:93:94:35:71:06:dc:11:b1:03:49:67:
0c:b9:bd:a9:9f:13:1e:22:75:50:64:e4:54:c4:40:
df:68:47:8c:a1:dc:af:37:83:3c:c5:9c:a2:9d:e6:
a0:21:72:27:1c:b5:23:55:da:b5:0f:c1:7e:74:16:
a7:bc:ee:6b:1e:44:1a:c9:6b:15:30:b9:7e:81:03:
e4:03:fa:2f:df:eb:af:7c:ff:4f:b9:af:bb:64:8a:
23:ec:08:ee:bb:4e:c1:0c:b2:b5:17:2d:b0:97:d9:
7e:2a:e0:8a:b3:b2:97:0f:24:6b:68:bd:b6:56:3b:
4a:52:91:c8:d9:a9:c0:23:98:81:f0:c3:b7:f9:9c:
95:f3:7a:ba:dd:c0:11:5a:63:ca:58:4f:90:22:c4:
04:00:b4:72:3e:f3:5a:4a:22:9f:af:07:f5:06:8f:
3c:1c:da:95:09:24:16:25:6a:0f:4f:89:74:f0:8b:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:d8:12:ee:06:cc:cf:c4:06:f6:aa:92:58:6c:e9:f4:98:f1:
7a:4d:0b:b6:e2:8b:da:2d:38:ef:c3:e4:be:9c:82:d6:9b:84:
09:6f:d3:24:57:06:d6:f6:29:e2:37:f3:0f:79:22:88:0c:50:
ce:41:00:58:3a:a3:b5:aa:ae:f6:3f:38:ce:bf:14:89:79:08:
2f:b8:27:2e:8d:ad:55:fb:7d:8d:89:9b:23:bb:a4:7e:c3:0b:
29:96:71:47:6f:3b:96:fc:b7:0f:97:99:d7:77:e9:9b:eb:cb:
96:3f:34:21:5b:73:e0:39:ad:54:70:d7:05:37:49:7c:cc:ba:
3d:21:49:0a:03:9e:ed:17:6b:62:59:60:6f:96:0e:bc:38:a5:
53:ab:ea:61:03:b8:be:c7:f2:1d:b0:85:de:4e:fc:96:50:0f:
cd:c8:28:66:9c:62:0f:b1:68:9f:b2:d6:86:cc:ee:ab:70:3e:
82:4d:fa:9f:93:df:ce:4f:c3:3c:b9:db:2d:9f:d2:55:f8:31:
75:45:18:60:0c:24:3b:31:d4:8e:bc:80:f2:02:80:59:2f:a9:
94:11:16:07:dd:ae:43:e6:4e:e9:02:0b:73:7e:34:b1:86:44:
fa:58:96:f6:75:e1:00:29:cc:f4:cf:6a:ff:a3:cb:34:44:2a:
11:99:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:52 2025 by rpki-client