Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
File: 8C888E996588527BC5EF8ABD293676C3463A1A22.cer (raw, json)
Hash identifier: Wh5gGGDySthuScp/F0qoFFVkeI0orajW4ZmZuK9GRmY=
Subject key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 300A7AE55B5E3BC4222B5F54EF0F511826778A5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
caRepository: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 09 Jan 2025 23:10:09 +0000
Certificate not after: Thu 08 Jan 2026 23:15:09 +0000
Subordinate resources: IP: 103.97.4.0/22
IP: 2401:8040::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:0a:7a:e5:5b:5e:3b:c4:22:2b:5f:54:ef:0f:51:18:26:77:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 9 23:10:09 2025 GMT
Not After : Jan 8 23:15:09 2026 GMT
Subject: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:72:db:c0:2b:4d:5d:cd:33:e8:41:00:24:
57:da:f2:29:63:e8:11:74:9a:65:67:09:6b:5f:25:
70:14:64:6e:64:bc:aa:b8:5f:64:0d:e5:68:c9:ce:
67:44:11:16:33:06:16:49:4a:d5:bb:f9:8f:02:79:
76:d1:fe:46:79:a9:d2:3a:60:97:ee:32:ef:9f:41:
fd:2f:27:2b:d0:88:7f:a5:8b:70:ea:db:68:00:40:
b0:b4:33:d1:0e:e3:08:17:b8:e9:f8:a8:ab:9a:01:
b5:21:b8:3a:06:28:1f:23:0a:95:8c:57:de:ca:42:
4b:c8:cf:3e:1a:39:75:78:25:e6:68:f1:45:0a:f2:
13:b0:c3:20:19:f9:49:4e:51:6a:37:1f:d7:00:b4:
11:62:ea:b0:a9:ca:aa:c2:de:f9:8e:4d:75:7d:ab:
4d:b9:69:16:fc:21:11:01:15:9d:f5:46:9c:1d:76:
f9:73:9c:e9:e2:5e:33:ec:e6:94:a0:b3:39:6f:ff:
15:04:43:ec:5a:01:21:86:5f:8d:36:51:48:41:76:
b6:e6:b1:00:03:4f:53:a8:6b:85:73:fa:89:42:5f:
b8:55:12:95:dc:ba:08:eb:47:b7:35:cc:fc:24:1c:
19:5a:c0:1c:43:60:d5:fb:7e:d3:80:b5:88:a3:25:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.4.0/22
IPv6:
2401:8040::/32
Signature Algorithm: sha256WithRSAEncryption
72:ee:0b:7a:b0:95:53:9c:52:11:67:89:f0:60:42:0d:68:6f:
74:0a:6a:6a:74:a3:95:b5:99:ba:8f:33:42:c2:ab:ae:cc:4c:
37:f2:4b:36:c3:b0:be:41:21:b0:74:08:bf:0d:e4:02:98:5c:
db:27:1f:e9:75:dd:57:03:1f:73:88:c8:28:4b:cd:c0:5a:ad:
ac:60:78:0f:e2:50:19:5c:fa:a1:47:cf:8e:45:34:7f:5d:f2:
ed:52:7c:e6:0c:d5:e2:f0:ad:54:29:ce:4b:09:f8:eb:92:dc:
a0:88:8c:50:93:84:fb:62:f5:0f:b7:4f:df:bf:ac:9d:6a:9a:
04:39:f7:23:62:4e:d6:cb:4b:1f:72:d9:60:67:89:6e:ff:2f:
b5:a0:ed:2b:56:5f:75:13:b7:17:2d:ea:f6:e5:c1:2f:c1:d2:
56:9e:6f:b9:65:3a:3b:62:28:5e:2f:0c:26:3c:2c:72:ed:ec:
41:2c:e4:20:68:8a:6d:04:bb:72:c1:54:d2:be:52:73:07:2e:
ff:14:64:93:a3:66:87:03:f4:2d:e4:ea:a4:43:5f:7c:12:00:
1b:3e:7c:ee:4f:3e:c6:df:92:e1:ad:09:38:4a:23:15:95:e7:
56:97:10:34:f5:d0:e2:8e:5d:cd:e7:be:02:d2:76:fb:b0:1e:
6f:3f:b1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:36 2025 by rpki-client