Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer
File: DA3283EBD45CCF7056D92A914183FB7825C66692.cer (raw, json)
Hash identifier: mkPyZOCi617E4QSWG5lyZ/fZAf8Ri/jYHh0QATIS3Vk=
Subject key identifier: DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: EAAEF92F90C2A3C9607FDB89DFC23697099ECF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
caRepository: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 28 Mar 2025 22:23:20 +0000
Certificate not after: Fri 27 Mar 2026 22:28:20 +0000
Subordinate resources: IP: 103.166.36.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Apr 2025 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ea:ae:f9:2f:90:c2:a3:c9:60:7f:db:89:df:c2:36:97:09:9e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 28 22:23:20 2025 GMT
Not After : Mar 27 22:28:20 2026 GMT
Subject: CN=DA3283EBD45CCF7056D92A914183FB7825C66692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:0d:f0:1f:74:b5:d6:f6:be:40:7c:d0:5a:
b9:ca:58:84:9b:f1:97:56:66:d3:5c:ba:87:42:5f:
ce:73:e2:fa:81:09:81:79:06:a8:f2:6c:9d:cb:05:
c3:ba:60:27:af:c7:59:5d:ac:f6:0a:c6:88:41:b9:
02:65:21:96:4e:88:b6:7e:6a:e7:29:f2:c4:c6:73:
6b:2b:68:74:0c:cb:c2:84:77:8d:fd:ee:20:db:88:
da:91:69:a7:03:13:4e:4b:4f:04:51:16:d5:33:94:
09:cc:0f:b2:79:39:76:bd:62:30:4c:45:96:ff:ad:
cf:2e:ff:6a:95:ea:12:0a:06:b4:29:6d:56:f2:a5:
a0:33:c0:77:ff:8a:81:3f:da:0a:a6:2f:41:fe:12:
53:cb:bc:ac:f1:00:a3:ca:16:f4:80:5b:5f:6f:78:
e5:25:b5:8d:03:e9:7c:59:b1:62:9b:d9:e3:ee:09:
6a:9f:3e:85:88:fc:ed:fe:f3:f4:46:89:4a:38:a9:
1e:77:66:c5:9c:ce:3a:50:2f:f9:b1:4a:1d:98:09:
a5:b1:de:97:f7:3a:eb:af:b8:8b:68:a2:e7:27:6e:
88:6a:81:d1:3b:88:e3:10:5d:27:fd:cd:40:89:bf:
00:5e:e3:66:7c:bf:ab:24:ba:0e:60:a8:e1:3d:3e:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.36.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:aa:9a:30:be:82:08:52:d2:14:9c:6b:96:5b:22:3f:25:1f:
48:67:8c:e9:d8:b7:8a:53:80:80:4e:2c:d1:99:b5:c3:84:d1:
ae:96:a6:ad:7c:3d:1e:5c:80:bb:a2:30:8d:13:cc:cc:f0:14:
16:ff:62:ed:87:a6:53:8f:18:ca:14:04:ef:7a:1a:b7:3a:cb:
c7:6b:9f:c3:c0:9b:34:0f:93:72:1d:90:ad:3f:cc:b3:64:59:
af:25:cf:4c:15:df:c7:01:4d:ac:75:31:dc:59:c1:55:23:66:
b3:32:88:92:f4:9c:34:3b:83:ca:10:34:a3:0c:f1:13:c8:b9:
8b:38:24:94:79:98:87:29:75:d7:63:96:87:5a:0b:bc:fb:c2:
ab:d3:3a:a4:59:31:79:16:37:98:6b:a6:8f:5c:71:11:3d:55:
58:1a:39:fe:11:e4:76:35:a2:2a:49:16:d3:d5:c1:d8:37:57:
96:dc:7f:68:fe:0c:a1:3e:4e:87:68:34:d1:e2:01:a2:ad:9b:
c3:52:0f:89:77:3e:1a:20:78:de:38:81:4f:5a:66:6c:4b:54:
65:a7:d4:ca:13:e0:d0:89:48:1e:91:74:94:25:75:b4:a0:f0:
b3:e9:c4:72:8e:75:a4:f8:bc:36:08:15:25:0e:0c:ec:18:9c:
08:49:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:47 2025 by rpki-client