Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer
File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer (raw, json)
Hash identifier: jKQzqFY03rIO95YPNW2hRlWnaxUo2IRhrMYVIQ+kXA4=
Subject key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1DEC0B312D8771D08A9103E7FA40587A96F63B2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft
caRepository: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 28 Mar 2025 21:10:13 +0000
Certificate not after: Fri 27 Mar 2026 21:15:13 +0000
Subordinate resources: IP: 103.166.6.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ec:0b:31:2d:87:71:d0:8a:91:03:e7:fa:40:58:7a:96:f6:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 28 21:10:13 2025 GMT
Not After : Mar 27 21:15:13 2026 GMT
Subject: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cc:a3:4c:73:a8:05:8a:5d:f8:99:ad:b5:5b:
a0:c2:13:8e:4d:d0:17:a6:b5:15:c7:10:86:38:a3:
ac:6f:5a:53:b3:e9:8a:10:a7:8d:7b:39:97:84:d5:
96:b0:ed:ae:fe:11:b5:7b:d3:0e:3b:75:fc:de:00:
ad:47:24:54:8a:b0:f7:51:83:f2:fe:b5:ec:bf:37:
ba:5a:a7:fb:16:98:17:22:19:6e:fe:1a:0b:65:44:
8c:64:46:ac:8d:a5:d3:0b:70:5d:52:f4:a8:ea:cc:
34:14:a1:60:d8:37:c2:e8:0c:f3:c1:02:40:57:18:
1a:eb:ee:85:76:27:8c:0e:25:51:13:7d:ab:1e:f5:
5b:82:3e:38:5e:7f:bb:9d:5c:7d:5e:4a:d1:18:5f:
c1:cd:2d:4a:26:28:52:77:5a:c8:02:24:0e:57:c3:
df:08:dd:b0:23:5d:67:ef:d4:69:6e:b1:14:6e:67:
b8:fe:21:39:97:86:5b:fe:64:6a:a3:a0:df:1a:ab:
ed:09:fa:f1:02:9c:ce:70:74:04:3f:69:09:f1:72:
62:cb:1c:f5:6e:39:a8:9e:73:51:5f:d8:76:e1:22:
72:e8:94:36:c5:75:9b:07:f5:c2:f4:10:fd:1f:fd:
55:1e:3c:ea:ac:cf:08:c6:46:51:63:34:dc:dd:4c:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.6.0/23
Signature Algorithm: sha256WithRSAEncryption
22:d7:d1:47:af:2f:d7:44:4f:a8:ce:a8:da:a7:12:90:ef:cf:
c4:6c:41:e9:68:51:ce:24:53:6e:42:9d:90:ac:48:5f:6c:db:
6d:2c:a8:b1:fb:34:8c:a2:b6:9f:08:dd:8d:45:5e:79:94:1c:
95:62:0b:57:24:7a:53:54:74:e7:eb:12:8d:9f:43:f9:ae:67:
25:30:b8:87:28:95:ad:40:e7:56:e2:89:f3:82:bc:98:19:40:
ba:eb:3f:cf:1a:98:e7:e7:36:c7:e2:2e:d6:f3:22:45:03:4d:
55:46:17:e7:fc:5b:1b:33:e5:98:35:c3:ce:ec:e4:bb:77:e1:
c7:fb:b9:41:42:77:60:3d:b1:d6:ec:42:48:4a:57:1f:81:17:
0e:fb:ec:80:34:7b:ed:a6:51:b3:24:f3:58:10:54:76:49:b7:
c8:93:23:03:d4:ff:90:e5:e0:20:ab:df:cb:96:be:67:8f:31:
6e:cf:bd:58:93:dd:39:f3:6d:c4:aa:20:c2:56:69:05:51:08:
f1:13:bf:c3:ad:b8:80:15:27:7a:e8:5f:b6:76:a0:be:5c:7f:
c9:77:18:03:d7:4c:b5:fe:b9:84:55:7d:08:c6:e3:8e:11:82:
36:c8:4b:b6:4e:35:16:c8:b9:e9:2a:52:d7:7f:b7:89:12:08:
b3:d1:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:04:55 2025 by rpki-client