$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer File: 727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer (raw, json) Hash identifier: myId5BhJnyH4fmQ2GYx7RXU//sd2GJ2AaN+s3NOpO7U= Subject key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 686B662439EB6F130424DB51B272C0FF5F6E1DCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:22:57 +0000 Certificate not after: Sun 02 May 2027 01:27:57 +0000 Subordinate resources: IP: 103.185.48.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6b:66:24:39:eb:6f:13:04:24:db:51:b2:72:c0:ff:5f:6e:1d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:22:57 2026 GMT Not After : May 2 01:27:57 2027 GMT Subject: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:37:76:ea:86:fe:86:84:c7:d9:55:c4:ef: 76:48:c0:dd:be:d2:c1:65:1f:cb:4c:a5:b7:60:d1: fa:11:a5:d2:59:27:83:47:0f:e3:a1:89:a3:7a:f9: 26:8f:61:77:a2:6f:1c:96:bc:6e:3a:e9:54:53:4d: 92:67:3a:76:d9:45:9c:ca:0d:a7:e1:fc:95:b3:94: d1:98:7f:f3:0e:c4:80:47:c8:67:cd:4a:d3:d8:a7: 73:71:fe:3a:f3:8a:b6:fd:d6:3c:46:df:28:1d:81: 6c:2d:53:d0:17:da:1e:3b:e8:81:bf:6a:19:f0:bf: 86:57:bb:1d:1f:b5:a4:ec:0f:29:70:38:42:45:98: 78:d1:82:e3:8a:e2:bc:51:c4:53:4b:9f:12:10:0a: b6:9d:68:87:7b:31:e0:89:68:a1:8d:35:50:2c:64: c3:6b:d7:4d:d6:3b:d6:00:f6:74:f3:ad:79:f8:80: 20:53:bf:a5:43:b9:d4:88:74:83:53:e5:f6:a0:e6: 9c:9e:60:62:48:2d:69:fd:37:2b:f0:a5:b0:97:b2: 49:46:0e:09:7d:2d:78:b1:04:0a:a8:dc:f5:22:76: 47:7f:2a:9d:29:5e:0f:4f:89:5e:eb:25:50:83:76: dd:f4:87:63:8d:88:d1:2e:2a:09:80:15:f0:27:71: f4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.48.0/23 Signature Algorithm: sha256WithRSAEncryption 66:ac:aa:22:df:4b:c0:c0:dd:70:aa:54:ea:2c:73:58:11:7f: 3d:50:b5:44:08:39:7b:75:c0:7e:c5:ab:19:20:c3:18:48:92: eb:8d:c3:4e:ae:fd:63:e9:8f:bb:ff:87:08:08:1b:94:34:bc: 25:c6:03:87:8d:dd:8e:44:ad:c9:29:32:4f:fe:c6:35:de:c3: b3:42:68:58:2f:bc:cf:82:7b:e5:46:f6:82:65:14:97:38:5f: 22:c0:3a:16:46:8a:45:85:86:cd:a9:0e:25:8f:ac:8f:9f:f8: 7f:22:f3:26:31:a3:36:61:ed:6c:ee:21:7a:65:76:ce:79:f7: 43:43:d7:1c:0e:9f:81:43:f3:5e:ae:d0:a7:89:97:04:59:7c: f2:a1:cd:91:a4:2a:a3:45:b7:cd:cd:bb:5d:4c:fb:25:19:03: 2e:40:24:fa:da:6f:7f:55:a4:fa:5a:8b:dc:72:ca:29:df:76: f9:43:04:e6:ed:d0:6d:4e:a0:ae:a8:a1:b5:80:ec:38:79:b2: 47:4f:2d:c1:43:21:12:b9:45:bf:f2:44:fd:ab:c0:4b:d1:4e: 21:13:66:15:39:1d:69:2a:3b:11:3d:66:aa:c6:03:34:f8:63: 61:b1:48:bf:54:f3:9b:13:19:43:de:a8:db:49:d8:b4:91:18: 4d:13:c2:62 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaGtmJDnrbxMEJNtRsnLA/19uHcwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjI1N1oX DTI3MDUwMjAxMjc1N1owMzExMC8GA1UEAxMoNzI3QUMwRjBDRUJDMTc1QjI0OTEz RkFCRjNFM0REQUU4ODQwNEFBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGqN3bqhv6GhMfZVcTvdkjA3b7SwWUfy0ylt2DR+hGl0lkng0cP46GJo3r5 Jo9hd6JvHJa8bjrpVFNNkmc6dtlFnMoNp+H8lbOU0Zh/8w7EgEfIZ81K09inc3H+ OvOKtv3WPEbfKB2BbC1T0BfaHjvogb9qGfC/hle7HR+1pOwPKXA4QkWYeNGC44ri vFHEU0ufEhAKtp1oh3sx4IlooY01UCxkw2vXTdY71gD2dPOtefiAIFO/pUO51Ih0 g1Pl9qDmnJ5gYkgtaf03K/ClsJeySUYOCX0teLEECqjc9SJ2R38qnSleD0+JXusl UIN23fSHY42I0S4qCYAV8Cdx9JsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHJ6wPDOvBdbJJE/q/Pj3a6IQEqvMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk5OTY4OGE5LWU3OGQtNGFiYS04M2JjLTUxNzg2NzkxMjBhZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85OTk2ODhh OS1lNzhkLTRhYmEtODNiYy01MTc4Njc5MTIwYWQvMC83MjdBQzBGMENFQkMxNzVC MjQ5MTNGQUJGM0UzRERBRTg4NDA0QUFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7kwMA0GCSqGSIb3DQEBCwUAA4IBAQBmrKoi30vAwN1wqlTqLHNYEX89ULVE CDl7dcB+xasZIMMYSJLrjcNOrv1j6Y+7/4cICBuUNLwlxgOHjd2ORK3JKTJP/sY1 3sOzQmhYL7zPgnvlRvaCZRSXOF8iwDoWRopFhYbNqQ4lj6yPn/h/IvMmMaM2Ye1s 7iF6ZXbOefdDQ9ccDp+BQ/NertCniZcEWXzyoc2RpCqjRbfNzbtdTPslGQMuQCT6 2m9/VaT6Wovccsop33b5QwTm7dBtTqCuqKG1gOw4ebJHTy3BQyESuUW/8kT9q8BL 0U4hE2YVOR1pKjsRPWaqxgM0+GNhsUi/VPObExlD3qjbSdi0kRhNE8Ji -----END CERTIFICATE-----Generated at Tue May 12 22:52:50 2026 by rpki-client