Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer
File: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer (raw, json)
Hash identifier: 8PAYtpcprRStu+LuwzxUpJmEvLnhtVSojCNSyV+XMPc=
Subject key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6B19BDD73AE6CB5E0EA093B14407C749FBFE02C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft
caRepository: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 21 Jul 2025 13:57:41 +0000
Certificate not after: Mon 20 Jul 2026 14:02:41 +0000
Subordinate resources: IP: 103.143.68.0/23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:19:bd:d7:3a:e6:cb:5e:0e:a0:93:b1:44:07:c7:49:fb:fe:02:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 21 13:57:41 2025 GMT
Not After : Jul 20 14:02:41 2026 GMT
Subject: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:76:55:4e:49:07:9e:01:43:ed:3d:c6:f6:
e1:30:6a:65:77:9a:49:95:af:d9:c9:e1:61:1c:77:
47:8e:8d:22:9e:46:85:ca:c6:93:d0:78:6b:28:15:
15:5e:18:0e:6e:fb:c8:56:5a:19:87:02:b7:ca:1a:
8f:8e:25:fe:04:48:d0:fc:d6:68:ee:4c:46:bf:6e:
05:59:e9:5e:70:f1:2f:c8:f8:da:cc:f8:6e:82:e0:
69:e3:df:4e:2b:95:9b:9f:e0:42:60:86:0d:ad:db:
b3:de:a6:21:0d:98:25:72:67:36:d8:cc:7a:7b:5e:
48:9e:06:9e:92:60:2c:6b:66:f0:df:91:5d:b1:69:
06:39:95:5b:bd:19:e8:d1:18:c1:b2:e6:2e:29:dc:
da:f5:03:03:32:65:a6:35:b3:c9:17:43:9e:2e:d6:
ef:d5:b9:aa:a7:2c:32:53:99:3d:5c:23:32:03:f8:
14:21:b5:fc:b5:55:b2:be:28:db:8c:1a:76:07:b6:
4b:0f:14:e9:16:5e:0b:78:d3:6a:f6:5f:4f:25:b8:
84:0b:5f:e2:59:ed:8d:73:95:67:03:ef:e5:bb:02:
61:20:ed:4b:78:fe:71:da:6d:fd:c3:9a:6b:c9:40:
86:f6:af:f4:a5:bd:d4:45:99:94:46:35:6b:e7:91:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.68.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b5:fe:88:f6:ef:6a:de:89:78:55:29:40:76:bf:c3:68:01:
2e:57:6a:20:ae:70:f9:f5:ba:f1:67:ed:bf:df:d8:76:85:f7:
c7:ea:b4:21:12:a6:77:9a:3e:dd:e9:1e:de:c0:cd:e2:68:00:
3c:76:77:fb:2c:96:30:87:d6:8f:4d:b8:03:65:40:30:ca:20:
df:df:40:80:85:69:90:52:d1:2a:07:f7:d9:2b:f5:59:65:57:
07:88:f8:b7:ac:52:42:ca:5e:76:00:5a:ba:ed:59:01:1f:6c:
67:3b:37:68:6e:d5:ad:18:fc:25:02:c4:b7:aa:a2:b3:c6:1c:
f3:48:01:9e:62:c3:22:e5:eb:b2:20:04:89:eb:58:ec:80:1b:
b5:03:6d:00:cc:be:01:a0:ff:00:2d:fe:da:16:91:e2:f7:04:
87:e7:5d:ee:20:8c:b2:f6:5f:80:b1:79:58:11:36:a1:93:a5:
35:fd:b2:1e:fa:65:b6:be:ea:74:0d:d4:b3:99:22:31:c4:38:
e6:94:7d:cf:9a:50:b1:f9:28:b1:c0:61:03:43:ca:7e:72:7e:
a3:63:a4:31:4a:5b:b0:3c:9f:62:32:c3:54:b2:89:4f:a7:fa:
80:2e:67:f8:90:3c:08:07:a2:c4:3c:4b:5a:8a:30:60:ff:88:
c1:52:88:e4
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUaxm91zrmy14OoJOxRAfHSfv+AsUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMTEzNTc0MVoX
DTI2MDcyMDE0MDI0MVowMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1
MTBGMEY2MTI3QUQ3NURCQzQ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkVdlVOSQeeAUPtPcb24TBqZXeaSZWv2cnhYRx3R46NIp5GhcrGk9B4aygV
FV4YDm77yFZaGYcCt8oaj44l/gRI0PzWaO5MRr9uBVnpXnDxL8j42sz4boLgaePf
TiuVm5/gQmCGDa3bs96mIQ2YJXJnNtjMenteSJ4GnpJgLGtm8N+RXbFpBjmVW70Z
6NEYwbLmLinc2vUDAzJlpjWzyRdDni7W79W5qqcsMlOZPVwjMgP4FCG1/LVVsr4o
24wadge2Sw8U6RZeC3jTavZfTyW4hAtf4lntjXOVZwPv5bsCYSDtS3j+cdpt/cOa
a8lAhvav9KW91EWZlEY1a+eRZRMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFItKDBD4igtu+eRRDw9hJ61128SSMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iNTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NDI0Mjgw
LTMzYmUtNGViNy04ZGI5LWUwM2Q0MTdjNGQ5Ny8wLzhCNEEwQzEwRjg4QTBCNkVG
OUU0NTEwRjBGNjEyN0FENzVEQkM0OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnj0QwDQYJKoZIhvcNAQELBQADggEBAF+1/oj272reiXhVKUB2v8NoAS5XaiCu
cPn1uvFn7b/f2HaF98fqtCESpneaPt3pHt7AzeJoADx2d/ssljCH1o9NuANlQDDK
IN/fQICFaZBS0SoH99kr9VllVweI+LesUkLKXnYAWrrtWQEfbGc7N2hu1a0Y/CUC
xLeqorPGHPNIAZ5iwyLl67IgBInrWOyAG7UDbQDMvgGg/wAt/toWkeL3BIfnXe4g
jLL2X4CxeVgRNqGTpTX9sh76Zba+6nQN1LOZIjHEOOaUfc+aULH5KLHAYQNDyn5y
fqNjpDFKW7A8n2Iyw1SyiU+n+oAuZ/iQPAgHosQ8S1qKMGD/iMFSiOQ=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:41 2025 by rpki-client