$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/27E417DDE008607BCDD5A3593D3468A196716538.cer File: 27E417DDE008607BCDD5A3593D3468A196716538.cer (raw, json) Hash identifier: Na22f5o6B1iITvBHqOxkfQj2ptGGU8eR9k5jqWlF1to= Subject key identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6C4586446E0043147484A9FEC2C5383B3512B91E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:43:39 +0000 Certificate not after: Sun 02 May 2027 01:48:39 +0000 Subordinate resources: IP: 160.19.146.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:45:86:44:6e:00:43:14:74:84:a9:fe:c2:c5:38:3b:35:12:b9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:43:39 2026 GMT Not After : May 2 01:48:39 2027 GMT Subject: CN=27E417DDE008607BCDD5A3593D3468A196716538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:58:73:75:a2:56:87:ea:df:66:b2:e4:58: 75:68:af:c6:d7:2c:67:15:c8:7d:66:18:7e:1f:32: d8:04:a7:f4:83:6a:12:23:51:ec:30:c2:54:91:cf: c5:d3:d7:f4:9d:79:cb:c9:04:2f:6f:f0:b8:4b:02: 08:65:ac:c3:a8:34:a7:7f:41:e3:5a:31:c5:94:aa: b8:b1:15:6f:fc:48:f1:ff:c5:fe:3e:ac:2b:7c:3e: ca:42:a1:9b:ad:4e:d5:b1:92:af:97:ad:b5:33:49: e7:83:ef:15:95:c6:68:96:80:de:46:cf:3a:68:dd: fe:4e:9f:e2:a8:33:a0:8c:a3:6d:3f:6a:db:96:dd: 62:fe:78:75:54:a0:2d:2b:32:e1:9f:c4:d0:dc:89: 76:2f:85:53:5b:24:1a:70:36:2d:cb:42:8a:8a:fc: 8e:80:84:64:1d:90:d8:04:d0:45:5f:0b:ff:94:96: d1:ca:29:9a:52:23:b5:93:0c:09:cb:49:fd:f3:7f: 8e:b4:2c:94:c3:cd:13:14:d6:12:77:70:37:b8:42: 43:20:4d:40:a3:26:57:8f:73:c3:65:ce:c3:af:24: e3:26:48:f3:1f:7e:e6:e6:1a:d0:38:00:3e:f6:e3: 22:e5:e6:91:52:5f:b2:f2:a2:79:6c:63:2f:9f:f6: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:E4:17:DD:E0:08:60:7B:CD:D5:A3:59:3D:34:68:A1:96:71:65:38 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/27E417DDE008607BCDD5A3593D3468A196716538.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.146.0/23 Signature Algorithm: sha256WithRSAEncryption 03:92:87:e7:a6:b2:eb:94:76:76:ff:9f:3a:39:8f:ae:8d:60: 18:00:13:33:97:e8:29:3a:d0:cf:fd:d3:29:8c:3c:68:b2:09: c3:8e:0c:86:b5:ca:76:29:c3:bd:2a:d1:fb:f1:ee:e6:bd:d7: 9c:50:e3:ff:00:5e:3a:14:1c:91:e9:2c:8b:3c:74:55:d8:56: d6:8f:5a:ac:e2:28:e8:a2:59:7c:e0:4a:af:bc:d1:dd:d1:d0: 76:dd:a9:70:57:fc:2f:81:3a:fd:98:81:0a:14:e6:31:99:fb: df:30:03:c3:a1:68:80:1d:c4:72:dd:86:7d:27:68:ff:e5:77: 83:63:10:57:8c:62:f6:86:f1:40:5b:27:7c:d8:4a:ac:85:37: d6:3b:b9:e7:bf:77:74:02:30:4a:0b:ea:63:a3:83:68:5f:e3: fe:f1:26:61:77:79:94:78:da:4e:26:cf:8b:8d:83:18:4b:1c: 89:0e:ce:59:b9:9a:a9:9e:d5:08:cc:66:a2:bb:34:2c:ff:f2: 59:96:21:02:5e:6a:dc:8b:2b:53:60:0a:19:c5:5c:51:8d:41: 0f:f7:b5:dc:fa:25:34:e2:97:de:98:1d:7c:bb:ec:f8:d1:0d: e0:25:9e:46:3f:a0:01:86:3d:74:fc:b2:71:f7:f4:b7:0c:80: b9:93:99:7d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbEWGRG4AQxR0hKn+wsU4OzUSuR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDMzOVoX DTI3MDUwMjAxNDgzOVowMzExMC8GA1UEAxMoMjdFNDE3RERFMDA4NjA3QkNERDVB MzU5M0QzNDY4QTE5NjcxNjUzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmLWHN1olaH6t9msuRYdWivxtcsZxXIfWYYfh8y2ASn9INqEiNR7DDCVJHP xdPX9J15y8kEL2/wuEsCCGWsw6g0p39B41oxxZSquLEVb/xI8f/F/j6sK3w+ykKh m61O1bGSr5ettTNJ54PvFZXGaJaA3kbPOmjd/k6f4qgzoIyjbT9q25bdYv54dVSg LSsy4Z/E0NyJdi+FU1skGnA2LctCior8joCEZB2Q2ATQRV8L/5SW0copmlIjtZMM CctJ/fN/jrQslMPNExTWEndwN7hCQyBNQKMmV49zw2XOw68k4yZI8x9+5uYa0DgA PvbjIuXmkVJfsvKieWxjL5/28BsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCfkF93gCGB7zdWjWT00aKGWcWU4MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I5YjliZDM4LTJlZmEtNGQ0Yy1hOTU2LTQyNDkyYTNlNjAwMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iOWI5YmQz OC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8yN0U0MTdEREUwMDg2MDdC Q0RENUEzNTkzRDM0NjhBMTk2NzE2NTM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBOSMA0GCSqGSIb3DQEBCwUAA4IBAQADkofnprLrlHZ2/586OY+ujWAYABMz l+gpOtDP/dMpjDxosgnDjgyGtcp2KcO9KtH78e7mvdecUOP/AF46FByR6SyLPHRV 2FbWj1qs4ijooll84EqvvNHd0dB23alwV/wvgTr9mIEKFOYxmfvfMAPDoWiAHcRy 3YZ9J2j/5XeDYxBXjGL2hvFAWyd82EqshTfWO7nnv3d0AjBKC+pjo4NoX+P+8SZh d3mUeNpOJs+LjYMYSxyJDs5ZuZqpntUIzGaiuzQs//JZliECXmrciytTYAoZxVxR jUEP97Xc+iU04pfemB18u+z40Q3gJZ5GP6ABhj10/LJx9/S3DIC5k5l9 -----END CERTIFICATE-----Generated at Wed May 13 02:40:06 2026 by rpki-client