Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
File: D1E28E396E82778793018513BD084854BE663886.cer (raw, json)
Hash identifier: Wkfs9mGulyhtyRDXRXHD2b3MESb38fNYZOeLNEj7TRw=
Subject key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 49A797FB980319BE2309A54CFDD6BAFE7026D0D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
caRepository: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 15 Nov 2024 23:21:03 +0000
Certificate not after: Fri 14 Nov 2025 23:26:03 +0000
Subordinate resources: IP: 103.169.230.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Apr 2025 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a7:97:fb:98:03:19:be:23:09:a5:4c:fd:d6:ba:fe:70:26:d0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Nov 15 23:21:03 2024 GMT
Not After : Nov 14 23:26:03 2025 GMT
Subject: CN=D1E28E396E82778793018513BD084854BE663886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:47:3f:18:2e:9d:9b:f2:cc:87:22:96:e0:
53:a0:60:6b:14:23:8c:f6:1e:f8:73:73:f8:2c:3b:
d0:a8:f5:f2:81:46:31:44:fc:dc:c4:1f:ed:e6:84:
fc:67:ce:38:fb:dc:67:d4:cd:07:94:75:47:56:01:
a2:ab:f9:4d:36:09:56:4f:59:1f:01:c9:df:39:05:
d3:77:5a:9f:78:1b:91:95:c5:89:40:a1:14:6c:31:
5c:9d:90:cc:11:78:c4:db:ef:b0:0c:53:70:b7:1b:
08:cd:55:b2:14:a8:4e:f8:d0:9b:b9:3a:e3:e5:82:
a4:80:4b:b1:e7:37:1c:e2:e9:89:85:50:a7:40:2d:
00:7f:22:2c:7e:7b:08:f6:35:5a:db:83:cb:e7:3c:
92:bf:4c:a6:e9:fa:3d:06:7f:5e:96:f0:19:eb:f2:
23:4b:29:f3:4b:09:28:19:66:bb:34:8f:0c:82:12:
9d:d2:ec:c5:49:9c:86:96:91:ac:dc:82:f8:40:d2:
1d:2b:6c:0c:f7:ef:9b:58:d7:5c:a6:f5:c7:43:a1:
d4:33:88:9d:07:1e:89:cd:f2:0a:2c:f4:cc:a2:9d:
fe:d2:c8:4d:3b:22:3c:fa:be:4d:e3:29:16:b4:df:
b5:b3:ee:a2:56:17:fa:78:a0:bf:46:e8:c1:f0:7f:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.230.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:43:45:53:01:7f:33:cc:ea:7e:1a:2d:b6:74:4c:a4:96:6a:
1a:0e:8f:8e:37:c3:22:74:fe:95:dd:d3:8b:1c:e1:4a:5d:0b:
6f:ad:17:55:54:d5:e5:b2:63:d7:2c:8c:c7:8d:81:3c:de:d4:
5f:17:03:01:aa:df:85:01:00:7f:cb:b8:f0:62:15:21:33:fb:
f3:00:25:32:8e:a6:e7:f9:bf:4b:97:e3:d4:09:b9:5a:50:f2:
07:1d:da:cd:a7:26:ce:b9:d6:d9:d7:63:62:8a:20:b0:90:96:
98:94:c5:17:a6:23:03:c4:03:59:0c:ed:89:86:7e:25:f6:41:
f0:84:62:14:68:a9:8d:0f:de:43:e4:57:c8:39:cc:e7:9b:e9:
7d:fd:bc:a6:1d:3c:63:67:73:ca:96:bd:46:de:21:d5:96:d1:
2f:d8:27:78:ba:3f:89:d2:b7:d1:b5:12:7d:16:f9:d6:41:64:
72:4b:6a:3c:13:4a:00:d8:95:a2:65:38:29:1e:40:d7:0c:e7:
b0:82:82:32:fc:22:64:9e:f2:97:31:ff:4b:18:23:36:f4:b2:
4d:b1:80:68:16:57:de:94:76:ec:88:c3:81:c7:6c:55:d4:62:
3d:31:74:16:ec:b2:7d:8e:c8:92:0a:9d:70:d7:17:a3:d2:cc:
13:e8:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:37:54 2025 by rpki-client