Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer
File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer (raw, json)
Hash identifier: lOLnGStE1kp7YpHiNTHyidNLrwNKVwTeofOzolGTSVQ=
Subject key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3DBE53CBAE28F35ACCAF87C7EF9DB67E2D0A689A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 16:20:30 +0000
Certificate not after: Mon 30 Jun 2025 16:25:30 +0000
Subordinate resources: IP: 43.242.132.0/23
IP: 103.28.106.0/23
IP: 103.72.110.0/23
IP: 2001:df0:26f::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:be:53:cb:ae:28:f3:5a:cc:af:87:c7:ef:9d:b6:7e:2d:0a:68:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 1 16:20:30 2024 GMT
Not After : Jun 30 16:25:30 2025 GMT
Subject: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:da:f5:e7:66:b6:8f:84:b4:8e:8d:8e:4e:
dd:8a:12:4c:c7:a4:2c:af:24:da:ce:b6:8c:cb:7f:
af:92:b7:87:e9:b1:07:ab:d6:01:00:59:2d:7e:b7:
e0:ce:4a:1b:d1:49:0c:42:b7:28:4c:2f:dd:3d:0f:
77:82:d7:4e:14:45:f9:9b:fd:17:c9:29:80:79:29:
28:da:18:4d:46:3e:39:3d:26:08:02:6f:cf:ff:87:
a2:7a:4b:b5:69:6b:05:5a:b5:ed:4e:07:39:39:35:
3b:9a:17:a9:3e:3b:1f:a2:17:43:9b:ed:b3:e2:35:
f7:a9:5a:ff:40:04:83:48:aa:ae:ed:54:60:58:24:
88:67:f0:98:27:0a:b6:d5:0f:4a:32:9e:97:bf:2b:
07:a9:35:91:18:b1:70:40:3e:e6:d6:84:3f:9d:25:
ad:29:1c:60:3f:cd:fb:72:7a:92:1a:a5:80:2c:cd:
c5:75:9a:7d:30:10:09:20:c9:d0:1d:fd:46:d8:82:
b5:35:8b:67:80:3f:24:34:5e:b9:35:64:4c:43:d1:
ff:fe:89:bc:4f:4d:b0:00:17:0c:48:7e:88:7d:18:
7f:0e:4a:41:55:11:51:c3:3d:fa:07:86:9d:6a:33:
62:2f:b1:5b:2e:17:b8:1e:7c:bd:d3:5f:7a:60:05:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.242.132.0/23
103.28.106.0/23
103.72.110.0/23
IPv6:
2001:df0:26f::/48
Signature Algorithm: sha256WithRSAEncryption
86:c0:dd:4c:2c:14:56:48:4e:c2:6d:21:dd:35:3f:0a:46:18:
8b:ff:20:64:92:6c:f6:fb:83:71:00:c5:09:6c:c1:3f:ff:3b:
97:e6:63:73:64:1f:fd:4b:70:cb:3f:b0:0e:78:20:2a:1a:93:
88:bf:0b:6c:c2:e2:1b:51:25:19:40:13:61:51:b2:39:3b:92:
73:71:90:a0:7b:9e:d5:e5:ff:0a:39:8f:5c:51:fc:50:09:6c:
66:af:79:05:cf:5a:a7:6a:74:31:a9:2b:9d:70:bb:97:43:9d:
5b:e8:17:4d:f2:0a:87:bf:ce:da:63:26:91:97:f5:02:b6:24:
53:ea:34:54:10:c6:94:56:a9:59:26:03:84:b9:75:5c:05:9d:
c4:74:d1:6d:56:8d:8b:d1:b7:76:bc:8d:6a:28:49:44:48:41:
55:ce:1c:32:82:4a:73:c1:7b:a3:a5:7a:4f:a8:38:07:54:c3:
6b:50:99:b1:1f:42:33:a6:20:72:62:b8:8e:28:9c:a3:02:8f:
d2:e2:de:13:e4:f8:8a:1c:7d:e0:0c:d2:46:ef:45:9a:d2:5a:
a1:d8:58:b0:3d:3f:8a:be:ce:90:27:ce:06:01:4e:74:9a:7d:
6c:14:c2:ae:8d:ec:f5:8b:29:1b:18:df:8a:55:f9:91:09:54:
33:5c:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:57 2025 by rpki-client