Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer (raw, json)
Hash identifier: 8kDoKxnjPAKERwCn6bcvgcXQkJbzP3ZCkbN3w65fDtU=
Subject key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 21FA749CB215BCCF0E99D0BF7BE5751910D82AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
caRepository: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 25 Dec 2024 00:28:30 +0000
Certificate not after: Wed 24 Dec 2025 00:33:30 +0000
Subordinate resources: IP: 103.183.250.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fa:74:9c:b2:15:bc:cf:0e:99:d0:bf:7b:e5:75:19:10:d8:2a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 25 00:28:30 2024 GMT
Not After : Dec 24 00:33:30 2025 GMT
Subject: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:7a:74:b2:08:6f:fd:3c:2e:37:13:e6:0b:
c1:48:ab:ec:72:c8:5d:25:70:c2:35:0b:2a:e4:68:
ef:cd:73:c4:0a:cc:93:71:89:99:b6:d5:10:e3:56:
f0:41:1b:96:f4:b3:57:02:29:3a:e1:52:94:cf:88:
30:fd:3c:0b:26:0f:de:f9:05:07:84:d6:ed:e8:00:
a2:37:f7:21:26:a8:ef:06:92:3e:c1:77:d2:cf:6a:
82:d3:99:78:1e:f4:7c:ca:e4:6d:00:62:76:47:54:
1c:ac:d5:16:e1:72:31:4a:00:da:07:5f:b5:99:d3:
15:a7:2b:79:2e:80:28:94:7f:4f:56:b0:b4:18:cd:
d0:b3:ce:bf:56:76:aa:70:74:ac:14:f2:7f:02:8b:
c4:6d:f9:22:35:cb:c4:15:19:3f:44:50:34:ba:cc:
d5:ae:81:02:74:d7:5e:3d:88:3d:98:84:7e:de:71:
25:4c:ac:fc:1d:44:c9:bb:8e:76:4e:33:af:25:a3:
38:40:f1:8f:e2:41:b5:51:47:98:28:11:7e:3c:60:
03:5c:d1:4f:94:5a:56:4e:79:83:8c:cf:c3:19:57:
eb:f9:9b:5f:df:7f:62:be:45:ad:7b:fe:3f:4b:02:
24:62:fb:68:e5:6d:28:9a:1d:e9:c0:bc:c7:68:85:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.183.250.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:5e:9b:c4:f4:ea:25:03:89:9a:7c:b4:d9:98:a4:34:4b:36:
1e:b3:16:6c:ec:58:61:9c:c8:11:4e:c1:b9:e7:d1:c5:c5:0f:
85:14:54:5a:26:4d:f7:63:32:c1:49:e5:a7:9a:73:42:cc:ac:
6d:1d:85:b9:ab:da:19:44:c6:d7:d3:05:1b:e3:d4:f4:8f:65:
19:59:da:86:86:4f:37:23:af:f9:a9:47:08:3d:73:d7:87:40:
f2:67:dc:9b:fd:1f:af:2d:cb:de:06:d4:b0:05:4b:dd:8a:38:
35:47:f5:ee:ff:49:fe:a7:ac:8a:a2:2f:4b:cd:ca:21:49:bc:
68:32:25:3b:62:ae:e9:8e:76:9b:69:be:5b:18:9e:4c:ba:47:
78:7a:2c:4b:8d:3b:db:6f:15:db:d7:79:cf:c7:42:85:19:79:
2b:6f:72:b7:5d:ad:a5:67:df:55:a2:49:07:46:fb:fa:51:40:
bc:6b:53:08:37:6a:70:cf:c4:42:ec:f4:5c:9e:06:76:70:8c:
53:d3:7c:2d:2f:94:3c:70:84:00:3c:ea:6f:4c:d0:77:18:d4:
b6:a1:c6:5e:f7:6c:b6:bf:1d:4b:bd:66:e4:18:c0:74:cc:5d:
93:86:6d:82:3b:52:6d:d3:06:40:6a:ec:95:46:33:1d:4c:f3:
fe:ad:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:17 2025 by rpki-client