$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer File: 27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer (raw, json) Hash identifier: zpzCKIMeXzBMFyV3N6sLGkL4g4c+Fv4iG+COZp4CgXE= Subject key identifier: 27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3B0D15134496C2AFAB468239175E8B73F32BFCEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:24:53 +0000 Certificate not after: Sun 02 May 2027 00:29:53 +0000 Subordinate resources: IP: 103.184.66.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0d:15:13:44:96:c2:af:ab:46:82:39:17:5e:8b:73:f3:2b:fc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:24:53 2026 GMT Not After : May 2 00:29:53 2027 GMT Subject: CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:1e:c5:68:57:38:61:41:4d:32:1a:ac:7c: f9:92:58:cd:d3:3d:71:1f:d9:72:22:29:e1:17:e3: a2:47:6d:2e:e3:e8:17:7b:f3:d7:36:e1:8f:99:87: 3b:51:cc:42:21:28:f0:d7:ee:de:ad:6d:85:22:d5: 13:32:13:c1:06:80:0e:5b:d8:0c:ba:99:5b:e1:39: 2a:cd:23:f4:fc:c9:09:8b:de:c1:d4:c8:f0:6c:7f: f8:73:97:68:6b:a4:ea:d7:08:87:40:0b:6e:8b:5e: c3:5e:1a:34:f2:67:e9:52:65:7d:48:8f:5d:c7:03: 1a:8e:34:a0:1d:70:10:0f:c3:32:45:c5:dc:2e:af: 84:b2:e0:15:91:34:ab:77:4a:6a:2c:27:9c:44:c6: 79:a9:dc:2d:79:42:de:25:d7:03:f6:70:fc:88:13: 73:9c:79:30:3c:fe:98:ce:5e:b9:68:b3:ed:d4:1c: f3:22:75:84:f2:4c:48:9e:74:03:57:53:59:5e:45: 8d:68:0f:95:16:2f:e7:70:75:65:55:b6:d2:db:10: 61:0b:f3:bb:3d:6f:3a:92:6c:f6:fc:83:c5:79:4b: 52:91:ab:e2:99:89:ff:27:5c:ba:38:b9:84:59:89: 60:9c:a5:aa:e4:08:03:09:e4:8a:4f:14:dd:f4:fd: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.66.0/23 Signature Algorithm: sha256WithRSAEncryption 83:c5:83:52:09:09:75:71:5f:5b:8b:2c:3b:96:25:a2:a0:49: d8:2d:f5:cd:bc:8c:57:08:a3:06:f4:e5:7d:4f:b4:9c:90:1b: 2e:79:9c:bd:da:9f:ef:13:27:ce:5b:4c:ca:71:eb:47:72:b4: 2c:fd:4b:51:be:52:2c:d0:19:9b:b7:41:24:46:2c:c6:a0:d2: 6c:bb:3d:52:e7:cb:97:32:ee:0c:88:2c:48:9b:79:12:55:fa: bc:f0:0d:d6:11:97:c0:44:be:58:05:ff:12:75:7e:46:49:da: 8f:7c:88:6c:fc:5b:29:bc:0f:11:a1:39:d0:84:4f:bd:af:d5: ef:65:7a:65:67:2b:44:fa:b8:9a:4c:9d:45:39:ee:a6:f1:9e: 83:2a:2e:2d:76:35:5a:21:36:5d:e4:ce:c4:a3:29:4f:79:5f: 36:8b:14:f1:d7:86:6c:bd:0a:d4:2f:7b:f9:62:9c:1c:18:cf: 76:68:75:86:04:92:8e:c3:55:3c:33:ec:1e:c0:6f:fd:c8:41: 11:17:50:dc:6f:2f:8b:9a:21:aa:7a:fc:11:8c:4e:91:48:16: f7:cb:df:4a:fe:e1:1a:9f:03:ff:06:68:05:69:01:7c:2a:29: 4c:26:b6:20:d8:d6:c6:f9:13:1d:27:24:e4:36:06:26:6b:a5: 3e:50:49:95 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOw0VE0SWwq+rRoI5F16Lc/Mr/OowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjQ1M1oX DTI3MDUwMjAwMjk1M1owMzExMC8GA1UEAxMoMjdBMDJDQTRGRUI2QjJEN0M5OEJF MTU5MzUyMjYzMjFCQzUwODJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpEHsVoVzhhQU0yGqx8+ZJYzdM9cR/ZciIp4RfjokdtLuPoF3vz1zbhj5mH O1HMQiEo8Nfu3q1thSLVEzITwQaADlvYDLqZW+E5Ks0j9PzJCYvewdTI8Gx/+HOX aGuk6tcIh0ALbotew14aNPJn6VJlfUiPXccDGo40oB1wEA/DMkXF3C6vhLLgFZE0 q3dKaiwnnETGeancLXlC3iXXA/Zw/IgTc5x5MDz+mM5euWiz7dQc8yJ1hPJMSJ50 A1dTWV5FjWgPlRYv53B1ZVW20tsQYQvzuz1vOpJs9vyDxXlLUpGr4pmJ/ydcuji5 hFmJYJylquQIAwnkik8U3fT96/8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCegLKT+trLXyYvhWTUiYyG8UILDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ0NDY5ZWU5LTgxNGUtNDU3YS1iYjEzLWE1YzRiNmYxYjVhZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NDQ2OWVl OS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yN0EwMkNBNEZFQjZCMkQ3 Qzk4QkUxNTkzNTIyNjMyMUJDNTA4MkMzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7hCMA0GCSqGSIb3DQEBCwUAA4IBAQCDxYNSCQl1cV9biyw7liWioEnYLfXN vIxXCKMG9OV9T7SckBsueZy92p/vEyfOW0zKcetHcrQs/UtRvlIs0Bmbt0EkRizG oNJsuz1S58uXMu4MiCxIm3kSVfq88A3WEZfARL5YBf8SdX5GSdqPfIhs/FspvA8R oTnQhE+9r9XvZXplZytE+riaTJ1FOe6m8Z6DKi4tdjVaITZd5M7EoylPeV82ixTx 14ZsvQrUL3v5YpwcGM92aHWGBJKOw1U8M+wewG/9yEERF1Dcby+LmiGqevwRjE6R SBb3y99K/uEanwP/BmgFaQF8KilMJrYg2NbG+RMdJyTkNgYma6U+UEmV -----END CERTIFICATE-----Generated at Tue May 12 22:16:35 2026 by rpki-client