$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer File: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer (raw, json) Hash identifier: 8pf+gvAB9H2U84Ly+BgRsfVFSI5iJMcPEReqZzlXyjo= Subject key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3361BF406A68CACCB4B6652F91FBC447B2069281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:19:50 +0000 Certificate not after: Sun 02 May 2027 00:24:50 +0000 Subordinate resources: IP: 103.141.170.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:61:bf:40:6a:68:ca:cc:b4:b6:65:2f:91:fb:c4:47:b2:06:92:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:19:50 2026 GMT Not After : May 2 00:24:50 2027 GMT Subject: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:1d:4b:7b:2e:95:84:1e:3b:86:2f:c9:b0: 7c:fe:5e:1f:57:fb:61:33:99:65:1b:e0:9d:71:1e: f6:f8:84:3b:28:5f:69:63:80:dc:6c:26:f1:13:fe: 99:6c:e7:6c:c7:27:72:2e:23:ea:b3:42:01:41:4d: 7c:73:a3:56:6c:af:12:51:dc:f9:41:8d:59:2d:6d: 74:13:f2:b2:4f:c6:90:84:49:91:5f:9b:8a:98:93: 65:2a:72:6f:74:a3:19:9b:0a:8f:06:4d:90:1b:66: 99:ef:5b:7c:1a:ce:2a:23:ff:4c:43:19:29:52:70: 97:45:8e:8f:0b:7e:bf:5a:8c:9d:04:fa:e5:bb:6d: 0e:78:e4:0b:cc:81:5f:c3:ea:81:97:7d:31:d4:0c: 15:f6:b0:05:ac:b7:c6:69:9e:db:23:65:e2:1f:10: 0c:2f:35:7e:e7:7e:e9:0c:5a:32:a1:87:22:6b:45: 5f:98:dd:38:14:3b:c8:ee:49:9d:be:59:e7:9f:4f: ea:67:fd:e4:d1:75:18:95:7e:3e:e9:80:f5:31:6a: 35:8b:52:cf:cb:2b:ea:0d:10:90:df:96:c3:98:8c: a3:97:11:64:36:7e:58:22:6e:21:44:de:2d:6d:fb: d0:26:c6:7c:44:1b:b2:bd:fc:c5:82:ba:4f:ca:fb: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.170.0/24 Signature Algorithm: sha256WithRSAEncryption 90:51:d6:6c:f6:38:3e:49:6a:a4:7d:f7:b0:b3:30:7e:04:dd: dd:f2:8c:b5:0f:58:fe:9c:2a:7a:ee:af:b7:63:16:ec:31:1f: a7:6a:14:ab:be:91:4a:fa:2e:a5:93:9f:c0:57:e7:94:ee:c2: 01:88:55:36:e0:04:15:6e:ea:1f:ed:c3:0f:5d:54:c4:bf:b2: 09:f6:6f:94:92:1f:39:39:01:bb:aa:01:62:ec:94:cf:90:05: 10:d5:29:01:a5:b3:44:7f:69:0c:4d:10:c5:78:2c:25:50:ae: b4:42:fc:d6:2c:38:30:ea:d9:da:53:b0:ab:26:a2:1e:21:e5: 27:8b:3f:31:94:8b:42:2d:8d:5b:77:7e:61:a9:58:82:d9:aa: 38:e9:c1:08:de:b2:73:c2:87:5c:96:9b:c9:6e:c4:58:cf:7e: da:2d:2b:5c:cb:9c:4a:56:b8:30:53:bc:14:89:02:9e:3d:96: 0e:b7:f2:11:0e:bf:7c:a9:00:39:38:13:af:e0:28:e7:40:62: f4:5f:62:8f:90:df:90:ee:2a:f3:33:c0:81:02:f3:e8:4b:5d: 3a:a2:4a:ed:9f:29:4c:e2:8b:75:97:89:3a:36:16:75:ee:24: 62:bf:fa:66:d2:ad:ab:68:56:18:0b:25:be:3c:44:09:36:4c: f3:b3:ab:e0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUM2G/QGpoysy0tmUvkfvER7IGkoEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTk1MFoX DTI3MDUwMjAwMjQ1MFowMzExMC8GA1UEAxMoMjdCMEEyRkEwMjgyNzA0MEU0REY2 NTA2N0M3QTBENTBEQTUxNTRFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+8HUt7LpWEHjuGL8mwfP5eH1f7YTOZZRvgnXEe9viEOyhfaWOA3Gwm8RP+ mWznbMcnci4j6rNCAUFNfHOjVmyvElHc+UGNWS1tdBPysk/GkIRJkV+bipiTZSpy b3SjGZsKjwZNkBtmme9bfBrOKiP/TEMZKVJwl0WOjwt+v1qMnQT65bttDnjkC8yB X8PqgZd9MdQMFfawBay3xmme2yNl4h8QDC81fud+6QxaMqGHImtFX5jdOBQ7yO5J nb5Z559P6mf95NF1GJV+PumA9TFqNYtSz8sr6g0QkN+Ww5iMo5cRZDZ+WCJuIUTe LW370CbGfEQbsr38xYK6T8r7vCUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCewovoCgnBA5N9lBnx6DVDaUVTmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNjNmY4YzBhLWUwM2YtNDE0MC1iYTE2LTgzM2FjMjI0MWFmYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zYzZmOGMw YS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yN0IwQTJGQTAyODI3MDQw RTRERjY1MDY3QzdBMEQ1MERBNTE1NEU2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ42qMA0GCSqGSIb3DQEBCwUAA4IBAQCQUdZs9jg+SWqkffewszB+BN3d8oy1 D1j+nCp67q+3YxbsMR+nahSrvpFK+i6lk5/AV+eU7sIBiFU24AQVbuof7cMPXVTE v7IJ9m+Ukh85OQG7qgFi7JTPkAUQ1SkBpbNEf2kMTRDFeCwlUK60QvzWLDgw6tna U7CrJqIeIeUniz8xlItCLY1bd35hqViC2ao46cEI3rJzwodclpvJbsRYz37aLStc y5xKVrgwU7wUiQKePZYOt/IRDr98qQA5OBOv4CjnQGL0X2KPkN+Q7irzM8CBAvPo S106okrtnylM4ot1l4k6NhZ17iRiv/pm0q2raFYYCyW+PEQJNkzzs6vg -----END CERTIFICATE-----Generated at Tue May 12 22:47:26 2026 by rpki-client