Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer (raw, json)
Hash identifier: RsMhq/xeaKXhXJ9421xMynDr8VnFll3d25zD4x6WG9E=
Subject key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0E0F90248281FEEC234C863FFAC7AFFCAB110194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
caRepository: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 25 Dec 2024 13:17:57 +0000
Certificate not after: Wed 24 Dec 2025 13:22:57 +0000
Subordinate resources: IP: 121.50.128.0/20
IP: 202.50.200.0/22
IP: 203.190.184.0/21
IP: 2400:c900::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0f:90:24:82:81:fe:ec:23:4c:86:3f:fa:c7:af:fc:ab:11:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 25 13:17:57 2024 GMT
Not After : Dec 24 13:22:57 2025 GMT
Subject: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:ac:84:81:b0:86:c4:c1:84:b7:9e:30:b4:
5a:4c:b2:64:8d:a3:fc:40:19:da:89:d5:e0:a6:44:
23:84:86:0d:29:e5:94:81:ca:99:d0:79:93:04:de:
ed:5c:21:9c:16:ea:b7:2a:be:b8:31:4f:0e:05:82:
12:8e:e7:15:e4:06:b4:3c:85:5a:96:f2:b6:a6:70:
66:f3:d5:e1:6b:c4:42:4c:65:9d:8d:53:52:9f:fb:
05:f5:43:21:de:bb:ae:17:86:b4:25:2f:6d:6d:64:
71:32:a1:09:b4:e0:8a:09:c5:d3:fa:ed:92:57:7f:
62:70:31:ef:7e:04:07:93:04:01:1e:be:a8:69:24:
88:1c:c5:c7:30:5b:23:39:e9:89:f3:25:59:86:f9:
f9:4a:06:c2:ac:6f:25:03:e7:a8:a1:5e:88:f2:0c:
2e:d1:f6:6a:d0:8c:a3:fc:d6:72:f2:78:95:f6:f2:
32:5e:4c:3b:35:44:e5:62:0f:e3:2b:0e:33:7b:6c:
f9:1b:3f:14:e6:99:55:26:26:73:b1:1f:5d:e7:51:
16:ec:ae:92:3e:f4:2e:b2:02:fc:b1:bf:83:b3:5b:
5a:84:55:d3:59:48:05:bc:75:dd:f7:68:dc:80:f3:
a4:b1:9e:86:75:a5:b0:73:4d:16:46:19:11:2f:d8:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.50.128.0/20
202.50.200.0/22
203.190.184.0/21
IPv6:
2400:c900::/32
Signature Algorithm: sha256WithRSAEncryption
37:c2:8e:84:03:79:bc:25:30:c6:ea:db:9f:02:49:04:fa:d0:
f4:fb:43:b6:7a:54:b0:17:4f:aa:e9:20:8d:14:26:d8:9f:b6:
be:08:a8:72:af:69:19:65:d2:07:8e:14:c2:a0:ba:6b:77:74:
a5:94:90:d0:3c:2c:85:f9:e5:14:79:39:7c:55:5a:04:06:7f:
8d:06:5e:7c:b7:3c:0c:c6:ff:0d:38:f8:2d:8c:08:bc:6a:5e:
be:6c:ba:d3:0f:ab:ef:57:73:c5:28:7b:68:ea:32:52:b0:7f:
3a:dc:07:de:01:ed:b8:b2:f0:5e:e0:9e:9a:21:61:38:ec:00:
f5:f1:1d:fe:59:a3:e5:44:64:bc:d2:f0:82:5d:fd:92:a8:33:
f1:73:e7:ee:32:e4:1f:f4:27:b6:59:a8:2c:7f:b0:43:3e:a8:
92:5e:33:0c:b3:54:fb:18:b6:b5:dc:22:bf:9e:89:ff:6e:84:
bf:d3:a1:92:82:3f:67:e7:54:b2:85:84:75:93:fb:18:9f:f7:
fd:9c:f6:7b:80:fb:b2:2e:67:cb:2e:42:95:68:12:00:ec:b9:
2a:c2:53:77:1c:cd:3a:b4:2a:36:9d:ae:0f:d8:9f:bb:e6:4f:
6e:4d:35:52:5f:0d:ac:0d:42:f4:ba:0b:a4:59:a6:83:73:73:
a1:44:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:12 2025 by rpki-client