Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer
File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer (raw, json)
Hash identifier: Hg5N4w9X/TOIUnczFvJJ2UrADBkk9MZDupK8lp2WZfs=
Subject key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2CACDEA961B30D8BDB2627404BF5F5BE648AE30A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 31 Oct 2024 03:08:17 +0000
Certificate not after: Thu 30 Oct 2025 03:13:17 +0000
Subordinate resources: IP: 2001:df7:f100::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ac:de:a9:61:b3:0d:8b:db:26:27:40:4b:f5:f5:be:64:8a:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Oct 31 03:08:17 2024 GMT
Not After : Oct 30 03:13:17 2025 GMT
Subject: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:60:0a:a7:f2:50:b6:1a:78:b8:e0:35:9e:
fd:ae:c5:41:e0:f7:12:b0:05:1e:4a:6a:2f:17:2e:
b7:86:b1:fd:8f:c2:df:7c:80:47:85:d9:f7:e8:3b:
01:a9:c1:83:62:7d:f2:a6:9d:6b:f4:da:13:75:a4:
f9:70:31:57:1e:39:ee:7c:b5:db:1a:93:e3:cb:77:
d2:de:83:cc:ec:a6:64:b1:e9:ec:44:cd:c0:66:f9:
b9:ea:b5:6e:c3:3a:f2:c3:92:b7:e5:3e:a6:5a:fe:
62:ec:4a:27:70:94:d6:e4:4f:67:f1:8c:fe:30:45:
c2:c4:c8:0e:64:d8:82:58:41:ff:ae:a2:7c:99:85:
7f:c8:e0:b5:ee:28:b7:95:46:1b:50:ad:34:98:de:
b5:ed:ad:10:0a:2e:32:e1:4d:6a:5f:8a:d8:84:ee:
4b:c7:dd:bc:79:36:95:53:44:94:e2:1c:f3:3f:f7:
37:b0:55:40:aa:d2:51:f2:52:57:3c:a8:45:59:9e:
51:aa:13:a6:e1:bd:43:c0:2f:25:7b:91:42:cf:b4:
45:6d:67:ef:f9:e5:bd:74:80:88:44:23:ca:ab:fa:
bf:21:84:49:b5:3a:03:97:ff:b2:a9:91:17:7e:a4:
7c:33:95:8a:e7:3d:19:b2:52:57:28:a4:f9:58:5f:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:f100::/48
Signature Algorithm: sha256WithRSAEncryption
47:26:f6:4b:06:a0:62:de:59:d3:bc:fd:ac:eb:98:fd:35:c1:
76:8b:94:67:f0:5a:d8:29:2a:fb:d6:d0:19:01:21:e0:de:f2:
2f:63:3a:bc:fb:2f:e0:48:2b:bf:41:1e:37:59:79:69:2c:34:
06:62:38:31:4f:ff:1d:4d:d2:e9:96:e0:ce:11:39:1b:3e:a6:
af:fe:ca:26:40:89:30:bf:40:d8:1f:28:b5:d2:6f:e4:43:e5:
77:ba:a2:60:0d:bb:7f:b3:1a:01:ce:4d:5f:6f:f6:a7:39:cf:
2e:08:22:c9:d1:6f:e3:17:46:49:95:df:d8:b4:f3:23:55:c1:
8a:9b:ac:5d:c9:91:ba:15:ea:48:01:31:65:2d:a4:d3:0b:fc:
d3:8a:9b:ad:60:ad:74:97:24:d5:e4:ab:ec:1e:dc:90:14:7e:
30:41:5f:38:e3:17:52:7f:14:dc:15:2e:a1:f0:2d:85:08:3f:
c8:ed:5d:9c:5e:95:51:8e:f4:d0:eb:94:80:81:bd:60:cc:d7:
96:af:d1:e4:fc:87:9e:fd:0e:87:24:27:b8:66:8f:35:6b:a6:
66:a5:9d:f1:65:b9:3a:34:fa:6a:ed:ce:d6:a3:c7:f7:62:54:
f8:d3:e4:35:82:95:39:7b:59:a0:0b:d7:88:5f:ea:49:1c:f6:
0d:b9:2c:3e
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIULKzeqWGzDYvbJidAS/X1vmSK4wowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAzMTAzMDgxN1oX
DTI1MTAzMDAzMTMxN1owMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdC
N0RFRTIwRjVEM0Y2REZGNUQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKBgYAqn8lC2Gni44DWe/a7FQeD3ErAFHkpqLxcut4ax/Y/C33yAR4XZ9+g7
AanBg2J98qada/TaE3Wk+XAxVx457ny12xqT48t30t6DzOymZLHp7ETNwGb5ueq1
bsM68sOSt+U+plr+YuxKJ3CU1uRPZ/GM/jBFwsTIDmTYglhB/66ifJmFf8jgte4o
t5VGG1CtNJjete2tEAouMuFNal+K2ITuS8fdvHk2lVNElOIc8z/3N7BVQKrSUfJS
VzyoRVmeUaoTpuG9Q8AvJXuRQs+0RW1n7/nlvXSAiEQjyqv6vyGESbU6A5f/sqmR
F36kfDOViuc9GbJSVyik+Vhfm30CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJrYrvg2LdA+rMe33uIPXT9t/11JMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9jMmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyYmU0ZjE4
LWNlZWQtNGYyMy1hMGE0LWUyNGUwNGQzMjBkMy8wLzlBRDhBRUY4MzYyREQwM0VB
Q0M3QjdERUUyMEY1RDNGNkRGRjVENDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQ338QAwDQYJKoZIhvcNAQELBQADggEBAEcm9ksGoGLeWdO8/azrmP01wXaL
lGfwWtgpKvvW0BkBIeDe8i9jOrz7L+BIK79BHjdZeWksNAZiODFP/x1N0umW4M4R
ORs+pq/+yiZAiTC/QNgfKLXSb+RD5Xe6omANu3+zGgHOTV9v9qc5zy4IIsnRb+MX
RkmV39i08yNVwYqbrF3JkboV6kgBMWUtpNML/NOKm61grXSXJNXkq+we3JAUfjBB
XzjjF1J/FNwVLqHwLYUIP8jtXZxelVGO9NDrlICBvWDM15av0eT8h579DockJ7hm
jzVrpmalnfFluTo0+mrtztajx/diVPjT5DWClTl7WaAL14hf6kkc9g25LD4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:51:08 2025 by rpki-client