Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer
File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer (raw, json)
Hash identifier: KkOBMwkU3w9iGPKVtWTyu5qK4X460vdiQjKzUEXRNiI=
Subject key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3386B89E45EBE32D809B0243F7415A88AFE8CBBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
caRepository: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 25 Oct 2024 16:18:18 +0000
Certificate not after: Fri 24 Oct 2025 16:23:18 +0000
Subordinate resources: IP: 103.54.80.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:86:b8:9e:45:eb:e3:2d:80:9b:02:43:f7:41:5a:88:af:e8:cb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Oct 25 16:18:18 2024 GMT
Not After : Oct 24 16:23:18 2025 GMT
Subject: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:a1:89:0f:80:e6:b5:72:a3:cb:63:67:0d:
ce:bc:f5:fe:e4:76:2a:fa:13:e7:3c:f8:e3:75:01:
9d:5e:88:5e:dc:79:b6:7c:20:20:27:43:39:42:e2:
c9:72:c4:93:91:14:5c:16:ff:ae:00:35:ed:12:2e:
5c:3a:45:ef:b3:85:33:3f:bd:65:92:cf:d0:0f:c2:
05:22:a3:f7:da:1f:67:7d:a1:99:7b:24:54:87:d6:
39:d0:94:05:20:6d:78:f6:81:96:15:bd:a0:9a:de:
e7:e1:8f:67:b4:f4:0f:11:86:96:26:69:ea:ce:50:
34:7e:19:47:00:50:d0:1a:5d:f8:4c:64:4a:07:9a:
e4:b7:ad:48:d7:42:d6:6f:16:15:fa:03:db:97:dc:
bd:72:f7:7a:ea:76:96:01:b7:8c:5e:5c:28:2c:58:
45:d5:dd:98:15:35:c0:87:85:0a:c5:91:bb:4b:de:
45:94:dd:3f:09:e7:aa:38:fb:2a:49:8b:e1:ee:4c:
27:6c:65:ac:b4:62:84:94:59:44:12:7a:0c:d3:74:
07:de:dc:3b:19:26:fd:d6:bb:bf:7b:8d:0b:69:1d:
08:f3:65:09:e5:fd:44:8b:a1:e2:38:1f:2e:58:b4:
54:e8:5a:fb:27:59:c6:75:b5:19:20:e4:a2:ee:0f:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.80.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:4c:c6:3a:05:45:c8:7f:27:29:d3:5f:5c:89:80:59:0a:ee:
b5:40:07:69:6a:27:c3:40:99:0e:b7:3b:c0:c6:5d:cb:7a:23:
4b:99:2d:d7:d2:11:a4:ce:a7:14:7a:5b:33:48:e1:85:0d:0c:
9d:e0:ad:7a:68:28:6a:f5:bb:48:64:a1:eb:35:55:a0:91:d7:
61:bd:d8:77:cf:1c:ba:1b:4f:cc:f1:86:f4:c9:57:e5:29:91:
56:81:64:de:bf:47:6f:10:90:09:51:89:4d:6b:cf:88:3a:b7:
6c:88:a6:ef:a9:17:0f:b4:93:ef:bb:56:9c:99:bb:63:14:cb:
20:f3:83:a0:fe:90:c6:d4:99:89:51:7f:bd:c0:06:a7:8a:b6:
5a:25:fd:35:50:63:54:35:d2:f9:94:a7:0a:cd:e6:6c:f2:18:
dc:61:a8:1e:50:0e:a0:9a:65:22:ed:eb:40:52:43:01:0e:ac:
03:8e:1b:b4:41:bd:66:de:b5:89:9c:4a:39:e0:32:e8:12:a3:
b1:5f:69:70:77:c7:89:d2:7c:74:41:e1:85:75:18:87:b4:67:
62:c4:4c:2e:77:f3:c4:a2:44:f5:74:93:29:fb:d8:d5:93:6a:
10:6f:4a:f0:29:68:db:02:43:70:42:c0:e9:e6:fc:93:e3:86:
7c:f3:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:27 2025 by rpki-client