$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer (raw, json) Hash identifier: 8pg1E7SLzXdiYQXgzM7oTkeZ2m9gqa4kdzXKHEwfg+U= Subject key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0DC914CE51E4821CDF21F7188C24859449713ED1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Mar 2026 15:28:27 +0000 Certificate not after: Fri 12 Mar 2027 15:33:27 +0000 Subordinate resources: IP: 103.189.166.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c9:14:ce:51:e4:82:1c:df:21:f7:18:8c:24:85:94:49:71:3e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 15:28:27 2026 GMT Not After : Mar 12 15:33:27 2027 GMT Subject: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:18:95:12:48:e6:12:c2:b2:53:94:15:a2: fb:da:b1:c1:ac:c4:79:59:90:92:da:d4:1e:28:2d: 36:0c:cf:f1:02:3b:23:89:f3:d5:48:ba:3a:60:ee: b7:52:8f:2a:8c:1e:a1:9f:b3:0c:77:e6:59:3a:80: cc:aa:de:bf:2d:aa:59:9f:ab:55:73:4a:b5:8d:a9: 31:b4:dd:93:b6:1e:1d:88:f5:3d:79:aa:59:45:da: 58:c7:15:21:bd:9c:3b:2f:25:cb:60:44:df:b1:3f: b8:23:54:bf:45:ff:8e:e5:75:a9:4e:de:a8:82:41: bb:d5:d6:ea:74:bf:cd:de:f0:b3:00:8a:11:39:a7: 8a:9c:50:82:a7:6e:b1:7b:20:29:9f:15:e7:c0:bf: 6c:9b:7f:42:88:d2:64:47:14:68:e8:2a:cd:a9:a8: 83:fd:81:49:04:09:89:f3:7f:02:fd:0c:1e:11:f9: 73:8e:43:ff:06:1f:4a:e1:cb:e7:ed:d9:d8:0f:3a: ac:cd:5a:49:86:52:4f:b2:dc:f3:ef:93:7d:50:14: 6c:fc:04:78:60:17:4d:54:66:27:99:49:34:9d:f9: 85:76:66:fa:21:0e:43:04:58:52:0e:f5:75:a2:1c: 15:ec:08:6b:a8:5c:58:f3:46:4b:ec:ba:f6:e5:fa: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.166.0/23 Signature Algorithm: sha256WithRSAEncryption 43:f1:0e:28:02:c4:f5:27:e0:34:24:ac:23:13:48:71:76:f3: b7:fb:e5:bd:e8:40:08:35:2b:40:41:e2:d1:26:ec:1d:0a:95: a9:8c:93:7d:52:dd:8b:27:e8:8a:96:40:a5:9f:54:d5:20:68: 39:86:cf:d0:b4:4a:3d:a5:3e:61:a7:1d:3f:0b:20:a2:a4:1d: 12:69:f5:dc:74:4b:97:76:7e:d3:97:08:26:cc:72:b0:6e:fc: 74:29:df:89:2e:e2:b2:d5:a2:0c:86:58:39:30:0f:fc:87:67: 64:5c:e7:6e:d2:5a:33:84:6d:01:fa:0f:71:ef:fc:e9:10:63: 7e:87:b2:3b:35:cc:05:7d:c8:d5:b5:95:11:a1:13:b4:9a:57: 8e:ee:1a:c6:76:8e:70:a0:41:35:b4:7e:0b:4a:ec:7e:2e:d5: 34:ea:85:37:3b:24:73:7b:c8:21:cd:aa:9f:47:60:93:a1:e0: 0b:fa:c9:91:b8:e8:51:ef:ad:00:40:19:58:44:b0:41:e0:26: 25:72:88:fd:74:1f:42:77:cf:15:dd:06:b7:44:7c:ed:0f:46: aa:a0:79:43:ad:c0:a1:03:11:b2:f6:b9:0d:89:ad:10:1e:ed: 1e:18:ae:ac:67:9d:08:34:de:60:56:63:e8:a2:4f:09:17:42: ea:97:5e:dc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDckUzlHkghzfIfcYjCSFlElxPtEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMzE1MjgyN1oX DTI3MDMxMjE1MzMyN1owMzExMC8GA1UEAxMoMjdDNkE4ODQxNzY0MTg1MTkyRDNC N0UzRkM2RDFBQkQyRDEzN0Q1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVWGJUSSOYSwrJTlBWi+9qxwazEeVmQktrUHigtNgzP8QI7I4nz1Ui6OmDu t1KPKoweoZ+zDHfmWTqAzKrevy2qWZ+rVXNKtY2pMbTdk7YeHYj1PXmqWUXaWMcV Ib2cOy8ly2BE37E/uCNUv0X/juV1qU7eqIJBu9XW6nS/zd7wswCKETmnipxQgqdu sXsgKZ8V58C/bJt/QojSZEcUaOgqzamog/2BSQQJifN/Av0MHhH5c45D/wYfSuHL 5+3Z2A86rM1aSYZST7Lc8++TfVAUbPwEeGAXTVRmJ5lJNJ35hXZm+iEOQwRYUg71 daIcFewIa6hcWPNGS+y69uX6MQkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCfGqIQXZBhRktO34/xtGr0tE31RMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTMwYWM2NC0wZjEzLTQxNjItOTY4Zi1hZmU1Y2M3MTRjZjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMzBhYzY0 LTBmMTMtNDE2Mi05NjhmLWFmZTVjYzcxNGNmNi8wLzI3QzZBODg0MTc2NDE4NTE5 MkQzQjdFM0ZDNkQxQUJEMkQxMzdENTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvaYwDQYJKoZIhvcNAQELBQADggEBAEPxDigCxPUn4DQkrCMTSHF287f75b3o QAg1K0BB4tEm7B0KlamMk31S3Ysn6IqWQKWfVNUgaDmGz9C0Sj2lPmGnHT8LIKKk HRJp9dx0S5d2ftOXCCbMcrBu/HQp34ku4rLVogyGWDkwD/yHZ2Rc527SWjOEbQH6 D3Hv/OkQY36Hsjs1zAV9yNW1lRGhE7SaV47uGsZ2jnCgQTW0fgtK7H4u1TTqhTc7 JHN7yCHNqp9HYJOh4Av6yZG46FHvrQBAGVhEsEHgJiVyiP10H0J3zxXdBrdEfO0P RqqgeUOtwKEDEbL2uQ2JrRAe7R4YrqxnnQg03mBWY+iiTwkXQuqXXtw= -----END CERTIFICATE-----Generated at Thu Mar 26 05:40:34 2026 by rpki-client