Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
File: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer (raw, json)
Hash identifier: iUj/R1MxjZlet5EhthQDj8kNuC18PHGQ8IiKz17/etI=
Subject key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6826B87AE8DAE6708DE0B03993F49BDEAF5221AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 02 Jul 2024 03:44:15 +0000
Certificate not after: Tue 01 Jul 2025 03:49:15 +0000
Subordinate resources: IP: 103.107.248.0/22
IP: 117.74.120.0/21
IP: 2402:600::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:26:b8:7a:e8:da:e6:70:8d:e0:b0:39:93:f4:9b:de:af:52:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 2 03:44:15 2024 GMT
Not After : Jul 1 03:49:15 2025 GMT
Subject: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:06:55:c9:06:54:1a:38:76:34:49:ae:e4:
58:bc:3f:87:4f:59:37:ce:7f:fe:52:29:df:c2:d8:
b3:70:65:92:14:4c:07:7a:54:0a:df:93:4c:ff:49:
45:6d:af:55:55:e5:f9:09:df:30:4c:a2:c6:1c:bf:
c4:d1:d7:71:21:ed:dc:bd:8b:71:a4:75:ce:6d:87:
e4:66:23:9e:86:70:26:cb:63:13:a8:8f:aa:6f:3f:
56:b6:63:6c:81:85:4c:6e:89:65:87:02:f8:0e:0c:
93:3c:c0:c0:2f:3f:05:7e:57:5b:6e:51:5e:cd:15:
88:61:c0:bb:20:22:e8:6f:2c:7d:20:f9:73:bc:54:
06:71:85:fb:d9:34:aa:f3:72:c7:88:1a:11:51:94:
59:71:95:a8:65:64:d5:54:c1:14:37:00:15:0e:c6:
8d:0c:c2:20:e3:72:95:ce:2e:2f:5a:69:05:90:46:
da:f6:3b:9f:83:f0:6d:6f:24:b2:50:4d:b2:04:67:
7b:d3:50:b5:c3:73:3e:a2:ba:48:03:05:c2:1d:09:
22:77:86:14:a4:fb:e6:4d:b8:ad:60:cf:91:bd:31:
58:0d:37:4f:29:51:57:a8:0b:fb:2a:4d:18:d9:31:
2c:35:e5:36:35:c0:63:53:d5:85:4a:e2:ed:71:b8:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.248.0/22
117.74.120.0/21
IPv6:
2402:600::/32
Signature Algorithm: sha256WithRSAEncryption
0c:b9:71:80:c5:33:1b:4b:9d:7d:cf:c8:6e:3a:47:0e:bf:6b:
42:fb:b7:69:ea:dd:d1:e1:45:a1:97:37:44:98:47:f1:82:a2:
85:79:57:59:4a:53:20:83:e7:2c:7f:6d:84:7d:c2:23:60:37:
c1:16:70:9b:a9:03:84:a2:8b:9e:00:82:49:a2:f9:f8:37:31:
a9:68:6e:f1:48:bb:c1:a1:dc:3e:22:10:a2:3f:22:b3:e1:9a:
83:58:b7:ef:14:1d:82:a6:8a:27:5a:54:2c:b7:27:7f:f7:fe:
b9:2b:9b:14:1b:0a:5a:4b:54:e3:09:96:04:c8:b0:68:6f:ec:
fd:c6:70:01:fa:51:00:07:f4:94:ba:f3:a3:9e:6a:c0:08:0e:
80:5d:7f:cf:98:7e:86:b4:9a:e5:db:35:4c:b5:66:23:18:f1:
f3:94:0b:6e:79:a1:ee:04:7e:3c:29:c0:a5:91:07:f9:3e:95:
1d:2d:64:5d:24:cf:f6:84:9e:a6:9e:b0:be:a1:a4:3c:4c:ef:
2f:e6:9d:ac:0f:b3:26:50:37:73:74:4f:69:b8:3f:7a:90:3f:
87:bd:e4:04:3b:46:00:a1:4b:15:f3:c4:d3:22:6c:84:e6:0b:
ca:c7:fd:3d:96:ef:10:88:9c:13:58:04:bf:97:21:93:bb:fb:
9d:d4:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:11 2025 by rpki-client