Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer (raw, json)
Hash identifier: 6VLcAmpnRvI7GbpvJCeWnfkjHqv2ba4eS6gMCnWHUYM=
Subject key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 357D00B4F1CD9B8523791FCBD81098822127AF73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
caRepository: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 08 Jul 2024 21:26:12 +0000
Certificate not after: Mon 07 Jul 2025 21:31:12 +0000
Subordinate resources: IP: 43.252.144.0/23
IP: 103.14.110.0/23
IP: 103.233.88.0/23
IP: 120.89.94.0/23
IP: 192.140.224.0/23
IP: 2001:df0:222::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:7d:00:b4:f1:cd:9b:85:23:79:1f:cb:d8:10:98:82:21:27:af:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 8 21:26:12 2024 GMT
Not After : Jul 7 21:31:12 2025 GMT
Subject: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:c6:c7:bc:a4:f8:11:b3:a5:e5:30:3c:5d:
d3:b7:24:f8:4b:a7:7f:67:e2:cd:c3:43:a5:28:46:
f8:2b:9e:ec:12:f3:92:60:ee:77:8e:6e:23:0e:ec:
7b:72:a4:0a:1f:d4:47:af:e4:d0:8b:91:dc:38:3e:
67:4f:ec:c5:fd:ec:a0:06:6a:aa:0a:c0:65:cc:5f:
d5:4f:23:c1:68:ed:5f:db:04:c8:2c:5a:35:19:ce:
d4:7c:b0:ea:d5:f1:e3:49:40:d1:1d:b4:b0:bd:0c:
81:43:5f:bf:98:37:0e:8f:b2:c2:66:d5:d0:31:1a:
c5:0f:e1:d5:5d:ef:2d:17:ca:1a:77:6e:eb:53:49:
6e:6f:92:a3:10:9f:b0:63:43:8b:88:a8:ee:8d:28:
dd:aa:a0:8a:a9:b3:f6:34:65:d3:c3:00:cc:71:c0:
2b:4f:b8:ba:a5:ce:6d:c0:a0:9e:44:1c:3c:29:b2:
4b:1f:05:d3:f9:fe:fa:d8:0c:b9:0c:2e:4b:65:d1:
89:57:5e:52:5e:f7:3c:fb:43:9e:1d:9c:de:61:b5:
66:82:56:cd:f9:e7:ff:54:d9:13:bd:cd:12:34:09:
6b:46:41:2b:30:e4:c0:e2:94:6f:a1:4b:68:03:19:
28:dd:a9:c0:ce:dc:42:f7:89:2b:95:c9:eb:50:f4:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.144.0/23
103.14.110.0/23
103.233.88.0/23
120.89.94.0/23
192.140.224.0/23
IPv6:
2001:df0:222::/48
Signature Algorithm: sha256WithRSAEncryption
13:b5:da:4b:b0:49:ca:47:69:25:21:62:9c:13:08:66:3a:2b:
f3:af:26:05:fa:48:51:73:3a:e3:93:5a:10:c3:d0:92:d3:f3:
f0:14:f8:12:74:a2:e3:59:75:6b:80:1a:38:b6:0b:78:01:11:
c1:f3:22:97:43:24:e7:3b:b3:c5:99:5f:65:e3:d7:f6:3d:08:
f5:b0:78:b2:e3:9b:f0:39:1d:3b:4b:68:d5:76:6d:eb:95:ae:
85:41:dc:bf:b6:2f:24:72:ad:8a:74:e2:5f:4e:81:37:db:50:
c4:86:b5:db:82:72:d2:a4:58:c4:4b:c4:8a:9a:29:ae:8d:5c:
02:33:42:b2:18:ff:9f:d0:3e:83:35:5a:a4:89:63:b5:71:c0:
b9:2a:4c:b9:3f:34:cb:48:8c:4d:d9:b3:5a:a1:a1:ad:61:b5:
4b:7f:04:66:8f:c0:a3:00:10:33:ba:54:25:82:64:7b:83:68:
ec:20:99:aa:e3:89:bc:7d:da:81:83:db:cb:84:c2:bc:2e:38:
75:b9:eb:cb:4a:dd:a2:1e:e8:39:bb:83:e3:62:3d:12:5a:43:
a3:c2:a3:a8:49:c9:9b:73:41:3a:a8:80:b8:43:df:3d:06:fc:
3d:ce:0d:bd:9c:3e:b1:03:19:9d:8f:ba:bb:9a:9b:b3:d4:6b:
d0:20:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:46 2025 by rpki-client