$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer File: 7F27536154B06F776D6914F8A4F12A5DE8458BD0.cer (raw, json) Hash identifier: bBTA976rsA3MoGkPqQiQ1vyrpBCMdOmbQage5KneHd8= Subject key identifier: 7F:27:53:61:54:B0:6F:77:6D:69:14:F8:A4:F1:2A:5D:E8:45:8B:D0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 69A1C637BE2412C47FD1C7B5874A2ACD7E52C586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:59 +0000 Certificate not after: Sun 02 May 2027 02:07:59 +0000 Subordinate resources: IP: 103.210.221.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a1:c6:37:be:24:12:c4:7f:d1:c7:b5:87:4a:2a:cd:7e:52:c5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:59 2026 GMT Not After : May 2 02:07:59 2027 GMT Subject: CN=7F27536154B06F776D6914F8A4F12A5DE8458BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:9f:b2:3d:ab:5e:8e:ba:5d:d2:46:56:4b: ad:5a:e5:a8:7f:54:28:c1:f7:af:ba:30:45:72:a1: fb:06:f1:73:d4:7f:c1:03:4d:e2:7e:a9:a5:76:86: 2a:65:a5:b6:7c:e0:2f:e4:fd:2a:db:45:27:43:7b: f9:44:cf:21:1c:0f:a9:d8:4f:37:40:88:1b:fb:7c: 2f:19:a2:e6:be:52:21:65:25:d7:ae:9e:5b:2a:75: d7:26:f1:ff:b7:96:c2:2d:4b:c3:dd:79:21:2b:18: 2d:9a:fa:48:65:86:c8:99:a6:48:f5:4f:a9:0f:e1: 23:36:d2:a2:89:fa:2d:d6:92:53:7c:ec:f7:82:67: 01:af:ed:2f:19:31:13:2a:60:70:e9:7f:50:14:ad: 7f:94:e3:5e:67:6e:3b:8a:c1:ae:62:87:44:9d:50: b4:99:71:46:05:ae:18:f9:f9:1c:eb:6d:02:36:1e: 96:9a:91:8b:0a:63:6b:ac:34:ac:73:38:f2:98:1b: 05:72:4a:d9:bc:a8:31:68:d4:1d:e6:8a:ae:dd:2f: 26:e1:21:4a:01:52:01:d0:32:c1:a9:6d:68:d2:37: 2b:db:f7:59:20:5c:3b:7b:c6:00:c9:c6:20:be:c9: 2a:b9:40:80:91:50:55:03:b1:66:c8:cf:72:6c:37: 34:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:27:53:61:54:B0:6F:77:6D:69:14:F8:A4:F1:2A:5D:E8:45:8B:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/7F27536154B06F776D6914F8A4F12A5DE8458BD0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:18:90:04:65:18:7a:17:94:42:f2:9f:84:46:68:65:6b:85: a0:9e:22:3e:30:46:2e:09:d8:f5:5a:54:39:3a:2a:5c:df:10: 7c:bb:dd:fd:1f:c0:86:1c:fa:08:e8:5a:ed:ff:14:21:3e:be: 34:e4:f0:0a:b1:d1:c4:e5:80:c1:02:71:5e:95:54:e8:2d:76: ae:7f:b3:56:69:f9:23:ee:97:f1:4c:31:b8:55:9b:bb:be:13: ba:e8:b6:61:39:12:4e:61:ad:81:58:29:69:e8:2e:07:f0:6e: d1:93:bf:b0:66:35:35:d9:90:ac:c0:b7:46:f7:ad:07:17:01: 99:0d:1e:3d:63:0b:bb:4b:67:10:ce:4c:88:e2:55:09:e4:30: 8f:10:c7:4d:27:c2:1d:c6:54:86:15:b3:e2:1c:58:87:5a:f9: eb:51:97:0b:26:5a:6d:97:0d:4c:79:55:d1:0b:76:6e:f2:aa: 5c:9f:93:4f:aa:66:72:58:63:56:99:2c:cb:f0:d2:dd:ad:ea: 87:e8:ae:9d:ce:3c:38:68:aa:77:d4:94:29:60:90:e8:05:0a: a1:92:ec:aa:53:b2:be:83:42:08:ed:4c:02:ea:bc:27:cd:d2: f3:6b:98:a3:f3:1f:8d:aa:28:dd:c8:3a:69:63:db:ac:0d:e2: 2e:07:f4:98 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaaHGN74kEsR/0ce1h0oqzX5SxYYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDI1OVoX DTI3MDUwMjAyMDc1OVowMzExMC8GA1UEAxMoN0YyNzUzNjE1NEIwNkY3NzZENjkx NEY4QTRGMTJBNURFODQ1OEJEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANV8n7I9q16Oul3SRlZLrVrlqH9UKMH3r7owRXKh+wbxc9R/wQNN4n6ppXaG KmWltnzgL+T9KttFJ0N7+UTPIRwPqdhPN0CIG/t8Lxmi5r5SIWUl166eWyp11ybx /7eWwi1Lw915ISsYLZr6SGWGyJmmSPVPqQ/hIzbSoon6LdaSU3zs94JnAa/tLxkx EypgcOl/UBStf5TjXmduO4rBrmKHRJ1QtJlxRgWuGPn5HOttAjYelpqRiwpja6w0 rHM48pgbBXJK2byoMWjUHeaKrt0vJuEhSgFSAdAywaltaNI3K9v3WSBcO3vGAMnG IL7JKrlAgJFQVQOxZsjPcmw3NL0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH8nU2FUsG93bWkU+KTxKl3oRYvQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q5ZWUyMDlhLTExOTMtNGQ2Zi05ZGJlLTg3NzdiYjg5ODBhYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOWVlMjA5 YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC83RjI3NTM2MTU0QjA2Rjc3 NkQ2OTE0RjhBNEYxMkE1REU4NDU4QkQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ9LdMA0GCSqGSIb3DQEBCwUAA4IBAQA7GJAEZRh6F5RC8p+ERmhla4WgniI+ MEYuCdj1WlQ5Oipc3xB8u939H8CGHPoI6Frt/xQhPr405PAKsdHE5YDBAnFelVTo LXauf7NWafkj7pfxTDG4VZu7vhO66LZhORJOYa2BWClp6C4H8G7Rk7+wZjU12ZCs wLdG960HFwGZDR49Ywu7S2cQzkyI4lUJ5DCPEMdNJ8IdxlSGFbPiHFiHWvnrUZcL Jlptlw1MeVXRC3Zu8qpcn5NPqmZyWGNWmSzL8NLdreqH6K6dzjw4aKp31JQpYJDo BQqhkuyqU7K+g0II7UwC6rwnzdLza5ij8x+NqijdyDppY9usDeIuB/SY -----END CERTIFICATE-----Generated at Wed May 13 02:41:36 2026 by rpki-client