Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer
File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer (raw, json)
Hash identifier: ydG5Lt2t0BJPlGdpvnqXCVO9GzMhUcRgW5RthLA1DlM=
Subject key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 08CD5A1311C1A59BB92D28A4011E534EFF5A49A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft
caRepository: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 11 May 2024 18:14:01 +0000
Certificate not after: Sat 10 May 2025 18:19:01 +0000
Subordinate resources: IP: 27.112.76.0/22
IP: 27.131.248.0/22
IP: 49.0.24.0/22
IP: 103.5.48.0/23
IP: 103.5.215.0/24
IP: 103.6.34.0/24
IP: 103.6.180.0/24
IP: 103.6.200.0/22
IP: 103.7.173.0/24
IP: 103.8.224.0/22
IP: 103.8.244.0/22
IP: 103.12.12.0/22
IP: 103.12.167.0/24
IP: 103.13.37.0 -- 103.13.38.255
IP: 103.13.200.0/22
IP: 103.14.108.0/24
IP: 103.16.48.0/23
IP: 103.16.188.0/22
IP: 103.16.197.0/24
IP: 103.16.232.0/22
IP: 103.17.172.0/22
IP: 103.17.182.0/23
IP: 103.18.16.0/22
IP: 103.18.96.0/22
IP: 103.18.190.0/23
IP: 103.19.76.0/22
IP: 103.19.184.0/22
IP: 103.19.204.0/22
IP: 103.20.21.0/24
IP: 103.20.106.0/23
IP: 103.23.151.0/24
IP: 103.25.165.0/24
IP: 103.27.3.0/24
IP: 103.29.120.0/22
IP: 103.31.36.0/22
IP: 103.31.164.0/22
IP: 103.35.236.0/22
IP: 103.36.40.0/22
IP: 103.37.230.0/23
IP: 103.37.244.0/22
IP: 103.40.68.0/23
IP: 103.52.213.0/24
IP: 103.54.1.0/24
IP: 103.55.56.0/23
IP: 103.58.147.0/24
IP: 103.74.6.0/23
IP: 103.74.12.0/23
IP: 103.76.132.0/22
IP: 103.86.94.0/24
IP: 103.90.8.0/22
IP: 103.93.164.0/23
IP: 103.195.158.0/23
IP: 103.215.68.0/22
IP: 103.224.140.0/23
IP: 103.225.184.0/23
IP: 103.225.242.0/24
IP: 103.226.136.0/22
IP: 103.227.14.0/24
IP: 103.227.220.0/22
IP: 103.228.80.0/23
IP: 103.229.164.0/22
IP: 103.230.83.0/24
IP: 103.231.171.0/24
IP: 103.231.198.0/23
IP: 103.242.208.0/23
IP: 103.243.108.0/23
IP: 103.245.177.0/24
IP: 103.246.76.0/24
IP: 103.246.129.0/24
IP: 103.247.16.0/23
IP: 103.247.32.0/22
IP: 103.247.126.0/23
IP: 103.249.58.0/23
IP: 103.249.210.0/24
IP: 103.252.85.0/24
IP: 103.254.51.0/24
IP: 110.92.72.0/22
IP: 114.30.88.0/21
IP: 116.193.188.0/22
IP: 116.254.96.0/22
IP: 117.103.48.0/20
IP: 119.252.128.0/21
IP: 121.50.32.0/21
IP: 124.66.162.0/23
IP: 180.222.216.0/22
IP: 202.4.185.0/24
IP: 202.37.120.0/24
IP: 202.43.88.0/23
IP: 202.59.192.0/20
IP: 202.59.255.0/24
IP: 202.65.224.0/20
IP: 202.122.160.0/20
IP: 202.150.64.0/19
IP: 202.158.252.0/24
IP: 202.171.237.0/24
IP: 203.1.25.0/24
IP: 203.19.4.0/24
IP: 203.79.26.0/23
IP: 203.83.24.0/21
IP: 203.119.52.0/22
IP: 203.161.190.0/23
IP: 203.171.216.0/22
IP: 203.217.134.0/23
IP: 203.223.90.0/23
IP: 210.23.64.0/20
IP: 2001:dc6::/32
IP: 2001:de8:2::/48
IP: 2001:df0:263::/48
IP: 2001:df0:268::/48
IP: 2001:df0:2e6::/48
IP: 2001:df0:409::/48
IP: 2001:df1:4700::/48
IP: 2001:df5:ec00::/48
IP: 2404:400::/32
IP: 2404:e300::/32
IP: 2404:f500::/32
IP: 2406:5400::/32
IP: 2406:6b00::/32
IP: 2407:6b80::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 22:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:cd:5a:13:11:c1:a5:9b:b9:2d:28:a4:01:1e:53:4e:ff:5a:49:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 11 18:14:01 2024 GMT
Not After : May 10 18:19:01 2025 GMT
Subject: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:be:da:2c:76:b7:f6:e4:95:9e:46:88:be:
6f:ed:0c:51:45:cb:fa:91:b3:93:54:31:91:4a:fa:
b2:71:24:7c:01:5d:08:4f:88:ae:95:6c:8a:60:ed:
8f:63:89:67:51:fc:9f:0e:8a:50:0d:a5:b2:09:8f:
66:5c:e0:39:56:54:05:03:14:40:8d:11:3d:f2:af:
25:68:6b:e1:97:82:3d:58:52:fb:81:93:0e:7a:66:
57:7b:b6:f5:ef:82:9d:4b:37:81:0e:a3:8f:21:1e:
04:28:52:0a:fd:00:d0:fd:a5:77:eb:f4:65:2b:d0:
ab:6c:76:bf:4a:d5:5e:4c:d2:df:30:b6:80:af:32:
77:0f:6c:c8:8d:bc:de:05:dc:bd:6e:7d:78:09:c8:
6c:fb:8a:0e:76:44:67:c7:08:ec:b9:a2:42:51:45:
73:f0:bc:3a:60:f5:28:8e:f1:d6:61:ea:0b:e0:aa:
44:d6:b2:2f:fd:42:a2:2f:c4:04:a1:2f:56:c4:84:
39:f8:4b:44:1b:23:be:db:6b:22:07:49:8a:d6:9e:
87:61:71:6a:19:85:64:f2:0c:55:ea:11:b3:cb:4e:
66:30:d7:cb:53:dc:12:44:db:7f:67:a4:ee:c9:8a:
79:c0:05:d0:c1:b9:13:6c:c3:31:67:78:b2:50:b4:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.76.0/22
27.131.248.0/22
49.0.24.0/22
103.5.48.0/23
103.5.215.0/24
103.6.34.0/24
103.6.180.0/24
103.6.200.0/22
103.7.173.0/24
103.8.224.0/22
103.8.244.0/22
103.12.12.0/22
103.12.167.0/24
103.13.37.0-103.13.38.255
103.13.200.0/22
103.14.108.0/24
103.16.48.0/23
103.16.188.0/22
103.16.197.0/24
103.16.232.0/22
103.17.172.0/22
103.17.182.0/23
103.18.16.0/22
103.18.96.0/22
103.18.190.0/23
103.19.76.0/22
103.19.184.0/22
103.19.204.0/22
103.20.21.0/24
103.20.106.0/23
103.23.151.0/24
103.25.165.0/24
103.27.3.0/24
103.29.120.0/22
103.31.36.0/22
103.31.164.0/22
103.35.236.0/22
103.36.40.0/22
103.37.230.0/23
103.37.244.0/22
103.40.68.0/23
103.52.213.0/24
103.54.1.0/24
103.55.56.0/23
103.58.147.0/24
103.74.6.0/23
103.74.12.0/23
103.76.132.0/22
103.86.94.0/24
103.90.8.0/22
103.93.164.0/23
103.195.158.0/23
103.215.68.0/22
103.224.140.0/23
103.225.184.0/23
103.225.242.0/24
103.226.136.0/22
103.227.14.0/24
103.227.220.0/22
103.228.80.0/23
103.229.164.0/22
103.230.83.0/24
103.231.171.0/24
103.231.198.0/23
103.242.208.0/23
103.243.108.0/23
103.245.177.0/24
103.246.76.0/24
103.246.129.0/24
103.247.16.0/23
103.247.32.0/22
103.247.126.0/23
103.249.58.0/23
103.249.210.0/24
103.252.85.0/24
103.254.51.0/24
110.92.72.0/22
114.30.88.0/21
116.193.188.0/22
116.254.96.0/22
117.103.48.0/20
119.252.128.0/21
121.50.32.0/21
124.66.162.0/23
180.222.216.0/22
202.4.185.0/24
202.37.120.0/24
202.43.88.0/23
202.59.192.0/20
202.59.255.0/24
202.65.224.0/20
202.122.160.0/20
202.150.64.0/19
202.158.252.0/24
202.171.237.0/24
203.1.25.0/24
203.19.4.0/24
203.79.26.0/23
203.83.24.0/21
203.119.52.0/22
203.161.190.0/23
203.171.216.0/22
203.217.134.0/23
203.223.90.0/23
210.23.64.0/20
IPv6:
2001:dc6::/32
2001:de8:2::/48
2001:df0:263::/48
2001:df0:268::/48
2001:df0:2e6::/48
2001:df0:409::/48
2001:df1:4700::/48
2001:df5:ec00::/48
2404:400::/32
2404:e300::/32
2404:f500::/32
2406:5400::/32
2406:6b00::/32
2407:6b80::/32
Signature Algorithm: sha256WithRSAEncryption
6c:fd:82:2f:58:9a:f1:a5:98:d4:a8:15:20:0b:cb:56:4d:4f:
3e:e5:b2:f9:bb:ec:89:27:67:a3:9f:fb:07:01:20:f6:3d:d3:
17:a7:98:cc:86:c6:1b:a1:a1:de:f4:8c:f1:6c:7c:b7:0d:d5:
34:28:63:8e:0b:39:0c:89:bb:89:c6:2b:4a:ef:b5:fd:a3:0c:
e6:9e:b2:95:6f:1b:68:62:b9:7c:b7:28:ba:c2:71:f2:02:15:
5a:12:0f:bb:13:41:4e:ce:63:cd:e3:03:e2:47:7b:a0:81:ae:
c6:51:33:52:b5:3d:6f:e6:03:4a:4a:08:b8:18:54:ba:0d:4e:
fa:85:98:9f:a6:5a:dc:de:f2:43:71:98:3e:b3:d7:99:52:ac:
e7:f4:fb:00:bd:d4:4f:ae:70:54:12:74:85:9e:cf:36:fd:ff:
db:cc:36:eb:50:82:8e:4d:fe:37:53:60:d2:9d:9a:e3:c1:80:
3e:b1:d8:9b:8a:3f:c4:7f:44:c0:00:82:2c:35:55:51:a5:7f:
89:55:34:a5:57:94:92:0c:ab:9d:21:b2:8c:7f:8b:30:50:63:
4d:84:52:16:83:fb:d6:9f:01:27:f7:cb:cd:8d:da:3b:8a:c1:
06:77:e7:12:f7:aa:04:fb:05:3c:5a:ea:81:54:9a:cb:bc:ed:
3f:53:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:33 2024 by rpki-client on console-ams.rpki-client.org