Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer
File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer (raw, json)
Hash identifier: ACVvplsuUHtYmROrHFKQUoyyfPV/MinICd43YiYRAiQ=
Subject key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0DEB318C4EF47E99E80369254A90C45C40900E0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 26 Dec 2024 23:26:02 +0000
Certificate not after: Thu 25 Dec 2025 23:31:02 +0000
Subordinate resources: IP: 103.162.141.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:eb:31:8c:4e:f4:7e:99:e8:03:69:25:4a:90:c4:5c:40:90:0e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 26 23:26:02 2024 GMT
Not After : Dec 25 23:31:02 2025 GMT
Subject: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:6e:8b:32:86:32:7b:e8:2d:88:c0:ad:aa:
9b:46:01:b0:65:3a:a7:6b:9b:1b:bc:d7:d6:af:e2:
b0:79:2c:07:a5:a9:0a:3c:23:72:63:ce:92:d8:a8:
10:4e:5a:2c:e2:96:70:94:dc:6f:7c:a9:a0:18:b3:
3f:c6:3f:10:57:45:42:08:58:71:8e:ad:7e:a6:dd:
9c:90:9f:86:de:99:e1:a8:3f:46:e4:47:41:ea:83:
d1:90:df:56:5f:52:5a:b9:c9:ef:b4:ce:83:e5:1f:
43:d1:53:c5:45:d8:6a:bf:18:1b:72:dc:9f:07:6f:
43:0a:6e:89:27:ca:e2:17:3a:b4:23:20:2b:65:de:
94:2f:fc:4c:fe:41:77:62:1d:6d:80:eb:fe:13:fa:
60:27:8d:9f:dd:ac:2c:c9:96:f1:ae:ee:96:cd:29:
d3:3f:cc:7f:ce:52:24:0a:d1:e8:6f:3a:a9:c0:98:
da:b3:02:01:d3:db:63:00:d6:53:ca:2a:d4:1b:b7:
a9:3d:e0:09:01:f4:8c:3f:62:23:aa:38:9a:61:ba:
b9:46:af:f0:2e:f2:db:cb:94:19:b0:6b:8c:4f:d6:
36:b0:f2:f7:7e:ee:f8:a5:fb:0f:af:a8:94:17:0f:
13:85:18:d9:88:32:e9:c1:b3:37:d7:9f:fc:16:95:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ae:c7:65:b3:b8:eb:f2:86:cc:d5:d2:83:d7:88:21:05:b6:
d5:75:1e:95:60:36:1b:32:df:b9:c6:46:31:6b:11:0f:7c:2b:
cd:79:71:66:f6:a3:65:be:19:b0:bd:9a:32:bf:88:58:b3:db:
a0:1a:7e:31:08:bd:83:24:1b:9c:b4:fb:b1:83:e1:60:54:bc:
6e:b4:7e:2c:5d:e5:4a:5e:53:ca:af:08:86:c0:7b:5f:07:9a:
9c:32:05:fe:4d:1a:eb:c1:6f:2e:08:18:a6:c6:32:aa:9b:eb:
04:7b:4c:38:24:b2:cd:cd:ca:e3:4b:bd:e1:11:77:96:8c:7a:
2c:b5:c6:e6:ce:99:c6:35:24:9e:ee:b5:ef:97:e3:b6:df:d0:
30:f5:3d:7a:9d:d4:5d:7a:ea:7d:2e:10:03:a7:e2:bd:ec:dc:
f9:8d:58:0b:52:b4:d1:ee:66:de:fa:9d:83:06:be:5c:19:78:
e6:f8:12:de:2a:87:8a:62:f1:85:cd:ae:21:80:fe:ca:ee:3c:
99:28:bd:52:99:01:e2:04:7b:5e:f0:0e:40:a8:81:4e:12:54:
bb:1a:83:a0:d0:95:c3:c4:58:f0:cd:7d:70:ec:f7:a9:a9:ba:
c5:d2:39:56:80:ca:08:73:bd:52:11:9a:da:d5:91:5d:a8:a6:
a0:c9:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:54:13 2025 by rpki-client