Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer (raw, json)
Hash identifier: GFvI75UcvnoMifVAYbdLPS4Xa0TTPD67RkIRXNZPTMM=
Subject key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6AF64660ECAA2B3E891701855235A72E87A9152E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 15 Mar 2025 02:34:25 +0000
Certificate not after: Sat 14 Mar 2026 02:39:25 +0000
Subordinate resources: IP: 103.169.227.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f6:46:60:ec:aa:2b:3e:89:17:01:85:52:35:a7:2e:87:a9:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 15 02:34:25 2025 GMT
Not After : Mar 14 02:39:25 2026 GMT
Subject: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:53:50:d0:8c:70:fa:2b:cf:79:07:56:95:
3e:42:3b:8d:e8:8c:81:c1:a3:a8:56:2f:7b:85:db:
96:ab:d2:4e:01:14:3c:84:aa:76:38:5e:c4:6a:2c:
33:34:6c:57:4f:a5:0b:88:19:c8:ba:40:a7:51:f9:
02:a4:ab:3b:0f:14:bd:24:b5:94:31:03:f1:79:f2:
21:7b:40:37:9c:46:89:cb:d5:f6:43:3c:db:49:b9:
af:cb:df:e4:fa:44:2a:a2:9f:f9:f5:00:41:20:ea:
d8:1f:be:74:3d:24:ce:b6:66:2a:ab:02:32:ce:3e:
dd:17:62:91:55:7c:d4:c6:05:65:cb:63:ac:7d:c3:
24:cf:17:84:fc:a6:e9:7f:c5:6d:80:11:61:82:5d:
d2:86:29:b2:6c:42:40:83:e7:da:8e:ac:41:b2:1e:
3b:38:bd:aa:34:10:8e:1f:70:7d:74:8a:f6:ef:62:
62:f2:80:05:ca:71:94:2f:08:fe:8d:e5:88:28:a2:
ce:34:a5:9c:d7:b1:ca:47:fd:d9:14:e5:c5:da:ed:
5b:e2:42:e1:ce:12:c0:ff:98:d1:fa:42:36:15:94:
c6:b3:48:45:6f:3b:db:a3:df:a7:26:7a:8f:2f:4f:
d8:85:d9:98:c6:22:d3:11:10:7d:8c:d9:c2:06:e4:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c3:2c:32:32:a7:df:b7:12:19:eb:73:12:b3:27:68:dd:41:
d7:47:80:c2:d2:a9:d9:de:b5:2b:a7:9d:64:68:17:e4:1b:82:
64:8b:42:e5:51:05:de:5c:49:4b:d1:0a:dc:ab:f5:82:c3:d7:
8c:c2:0c:4d:b0:1f:de:5c:55:5a:32:0c:74:60:0e:b1:23:91:
5f:43:43:bf:26:fa:ea:af:a0:a8:0f:0c:34:bf:dc:6c:09:ac:
4d:c2:49:c5:e7:c2:e7:10:b6:e1:14:0b:5a:4c:0f:f2:76:0c:
90:f7:0e:fe:c5:c5:2a:b8:8f:b0:6b:07:e6:ec:c0:d0:88:5d:
a2:82:30:b3:9e:b0:40:23:a8:d7:bb:40:16:35:dd:aa:cc:ec:
f4:fa:9b:06:e3:76:1d:5c:ee:ff:64:8c:6d:b6:ed:99:93:ad:
59:d3:4e:dd:77:5a:5b:63:32:f2:17:3d:c5:cd:c3:b4:89:fe:
4e:a7:a5:e1:c5:d0:ed:d1:18:44:74:ca:38:0d:04:e0:ac:c8:
a4:cf:8f:6a:e0:5d:c5:7b:4a:4b:cd:d4:56:2a:c9:7b:9d:5f:
c3:32:cf:cd:56:91:cf:6c:35:08:0c:ce:8c:e6:af:f3:b5:49:
2b:a0:4a:0f:01:ee:57:56:ca:0d:ce:a9:d5:29:a9:22:09:b0:
e4:f0:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:35 2025 by rpki-client