Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer
File: CB8106D827747D008C9DE9181B4EC6739C8EE800.cer (raw, json)
Hash identifier: zBpnXn8DCbuJVUBH1SyQMyRVrZAvfi3+zC1ANMFU5jE=
Subject key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4974B5AF607007F24A9C1F26768AB9996EAD53B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Jul 2024 17:31:25 +0000
Certificate not after: Mon 30 Jun 2025 17:36:25 +0000
Subordinate resources: IP: 103.21.204.0/22
IP: 103.248.196.0/22
IP: 2400:f340::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:74:b5:af:60:70:07:f2:4a:9c:1f:26:76:8a:b9:99:6e:ad:53:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 1 17:31:25 2024 GMT
Not After : Jun 30 17:36:25 2025 GMT
Subject: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:e4:e6:f3:c6:14:2f:33:5e:d6:55:d0:c9:
1a:9e:f6:86:93:ba:7f:00:f8:4e:67:52:f5:8a:c3:
f3:39:5d:98:2d:6f:ac:ac:71:05:92:ec:d8:22:36:
f4:b3:31:86:57:f0:e5:12:68:83:ea:9e:71:40:19:
3f:f3:0d:32:3c:0e:98:f4:bb:cd:bf:1c:89:92:18:
1d:cc:ff:77:8c:57:eb:29:92:d8:98:80:42:ce:31:
65:86:0a:57:ee:ac:fb:48:f5:75:8a:a6:4e:bc:82:
01:60:b9:97:24:8b:fc:19:67:c6:d8:08:d1:da:75:
5b:50:c5:bb:d9:1e:1e:9f:20:bb:f3:8b:ae:ea:30:
4d:83:d6:67:78:54:5b:14:6e:d6:a6:fb:81:95:ce:
ad:db:a5:3c:8a:cf:29:4b:3f:7d:4f:86:a9:38:4e:
81:fb:45:cd:9e:a4:ab:c2:53:48:ed:15:5e:6c:7f:
98:3b:b7:52:8c:e5:f6:68:a5:33:bb:dc:57:34:9f:
c5:9f:2d:c4:22:d4:94:9e:58:be:29:34:85:b5:fb:
db:18:ac:59:fb:24:d7:02:29:92:a7:93:db:24:9f:
e0:8c:f5:bd:42:4e:ac:bc:5e:3b:d4:2b:cc:e9:cd:
7f:1c:f9:3d:b6:14:95:87:88:48:27:33:1d:ae:6e:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.204.0/22
103.248.196.0/22
IPv6:
2400:f340::/32
Signature Algorithm: sha256WithRSAEncryption
07:8f:76:c0:1c:2f:1f:9e:b7:5b:c1:e9:d5:48:ff:25:bc:f9:
1d:ec:f2:6d:22:52:fd:3f:d3:b0:d2:1d:28:e6:28:e5:e7:6a:
0a:56:c7:97:1b:34:10:07:67:8a:fd:86:db:26:5a:3c:d8:9d:
88:5b:44:78:c9:e0:9f:5f:b1:24:19:d6:cb:ca:d8:b3:f0:19:
9e:1a:8b:54:f5:6a:f8:f6:23:41:d5:b5:3c:2a:cb:44:73:1b:
f2:d6:7e:76:47:ce:8a:d6:d6:0f:09:34:b1:94:87:ca:12:ca:
e1:f1:ad:ed:48:a3:bc:d7:10:75:2f:9b:05:6b:56:b9:3e:62:
24:92:a3:5a:75:81:5e:9c:d5:76:b8:d4:1d:f8:d5:7a:1d:77:
b6:36:4e:ea:50:97:30:a8:b1:8c:46:b5:13:3e:28:2f:0a:8e:
3a:8b:64:6d:f6:5a:ee:60:db:a6:a6:f6:72:30:17:d1:47:21:
29:68:31:2b:4b:21:dd:05:5c:6a:0a:2d:ed:11:4e:d2:0a:4e:
1f:29:8b:9f:9d:3c:cf:e0:81:ff:3a:c8:29:74:34:a2:ce:43:
a6:da:52:cd:5f:25:77:42:06:60:e3:05:86:1c:08:88:59:ea:
cc:e2:37:00:84:6d:75:28:fe:ff:71:c4:5c:80:63:28:31:67:
9d:e4:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:07 2025 by rpki-client