$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A27FF2B00B818D036621468F265A350211C5B6B1.cer File: A27FF2B00B818D036621468F265A350211C5B6B1.cer (raw, json) Hash identifier: cXXT8lcC8N8PXe860SFL2IILEBd3E3kjzGtQcRDXkNI= Subject key identifier: A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E54321852D05E2EF4E516D0AEE7DA8B676A0FCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:42:42 +0000 Certificate not after: Sun 02 May 2027 00:47:42 +0000 Subordinate resources: IP: 103.148.2.0/23 IP: 2405:c640::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:54:32:18:52:d0:5e:2e:f4:e5:16:d0:ae:e7:da:8b:67:6a:0f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:42:42 2026 GMT Not After : May 2 00:47:42 2027 GMT Subject: CN=A27FF2B00B818D036621468F265A350211C5B6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:c5:6a:cb:73:be:11:56:bd:a7:6d:e6:8e: 68:10:03:f7:ed:e6:2f:50:cc:09:4c:24:c4:fc:52: 28:fa:a9:ab:9f:cc:f9:57:f1:19:cd:0e:08:2b:c4: 95:b8:b6:89:21:cc:af:ec:a4:e6:c1:c0:1b:ea:3e: 1b:1b:a1:a1:95:f2:40:c7:34:39:4b:90:05:fe:d5: e5:9b:44:e9:37:9a:71:8c:4d:dc:48:24:ef:8c:83: a0:e9:33:8f:74:63:d9:77:20:0a:a2:80:1b:fe:40: 45:7d:db:ee:2d:49:04:a0:4d:b9:c3:70:8d:0f:d7: 94:f4:01:89:19:63:c9:e6:77:df:89:21:02:9b:f8: 0d:b8:13:8d:37:16:66:25:7a:a8:a6:c7:fa:37:bd: e7:40:19:41:39:77:35:da:78:32:7f:e2:55:f0:7d: 7b:54:8d:c7:63:e1:4d:53:8e:0e:41:3b:59:f2:31: e3:73:0c:a5:15:74:4c:61:65:d6:5b:ac:6e:14:cd: e5:7a:9d:15:12:4d:9a:15:94:75:52:93:2a:3a:53: e2:3d:3e:74:51:4e:dc:7e:d0:cf:7f:4e:68:f8:b1: 6f:d1:23:7f:f7:55:85:6f:f4:e9:04:41:05:d3:c2: 06:30:73:10:1b:30:ed:35:b5:36:7a:0a:3b:b7:d1: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:7F:F2:B0:0B:81:8D:03:66:21:46:8F:26:5A:35:02:11:C5:B6:B1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/A27FF2B00B818D036621468F265A350211C5B6B1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.2.0/23 IPv6: 2405:c640::/32 Signature Algorithm: sha256WithRSAEncryption 47:97:ca:85:bf:6b:ea:1c:de:6a:d0:4a:92:9d:70:49:31:ad: f1:cd:1d:0a:3d:73:a7:c9:91:b4:28:c1:ee:51:57:cf:01:44: a3:db:56:f4:37:c0:91:bb:15:fa:f7:b8:b2:42:ed:4e:e1:f5: 20:2d:bf:ec:36:9f:db:26:0b:ef:07:05:26:76:e6:56:f9:62: f4:98:12:b6:da:4e:b3:5c:93:22:20:1f:31:98:1c:14:ba:63: 51:a1:2d:0e:a3:7a:c6:83:af:60:62:b1:5d:c1:5f:e5:43:e3: d8:9b:9b:e1:b0:21:fc:96:6a:6d:a6:3e:7a:60:e9:4d:6e:c5: a6:8e:4a:26:97:20:12:66:a8:1a:24:7c:bb:43:77:72:19:73: 27:65:d7:0f:a5:b5:5e:3e:10:d8:4c:1a:01:53:96:7e:8a:33: 5f:51:ba:32:ce:28:87:43:30:35:4a:f5:a6:4e:cf:9c:8b:3f: 12:7a:e3:e5:dd:27:cc:62:d9:4b:1b:a3:57:a0:f6:6d:cf:2c: 9f:a7:ee:17:14:9b:bb:44:d4:b2:35:03:d9:37:bf:9d:2e:89: 51:30:d8:e9:f9:bf:05:ef:9a:7c:84:2f:29:98:e6:88:c6:f9: 6d:14:fb:31:f8:c1:4e:a1:73:fc:b2:39:42:e7:ca:16:56:bd: f6:35:b3:6b -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUXlQyGFLQXi705RbQrufai2dqD8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDI0MloX DTI3MDUwMjAwNDc0MlowMzExMC8GA1UEAxMoQTI3RkYyQjAwQjgxOEQwMzY2MjE0 NjhGMjY1QTM1MDIxMUM1QjZCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlWxWrLc74RVr2nbeaOaBAD9+3mL1DMCUwkxPxSKPqpq5/M+VfxGc0OCCvE lbi2iSHMr+yk5sHAG+o+GxuhoZXyQMc0OUuQBf7V5ZtE6TeacYxN3Egk74yDoOkz j3Rj2XcgCqKAG/5ARX3b7i1JBKBNucNwjQ/XlPQBiRljyeZ334khApv4DbgTjTcW ZiV6qKbH+je950AZQTl3Ndp4Mn/iVfB9e1SNx2PhTVOODkE7WfIx43MMpRV0TGFl 1lusbhTN5XqdFRJNmhWUdVKTKjpT4j0+dFFO3H7Qz39OaPixb9Ejf/dVhW/06QRB BdPCBjBzEBsw7TW1NnoKO7fRsCECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKJ/8rALgY0DZiFGjyZaNQIRxbaxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVlMjBlODAwLTI1YmItNGM3OC1hOGIzLWYwZWIyNWMyZTgyYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZTIwZTgw MC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC9BMjdGRjJCMDBCODE4RDAz NjYyMTQ2OEYyNjVBMzUwMjExQzVCNkIxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5QCMA0EAgACMAcDBQAkBcZAMA0GCSqGSIb3DQEBCwUAA4IBAQBHl8qFv2vq HN5q0EqSnXBJMa3xzR0KPXOnyZG0KMHuUVfPAUSj21b0N8CRuxX697iyQu1O4fUg Lb/sNp/bJgvvBwUmduZW+WL0mBK22k6zXJMiIB8xmBwUumNRoS0Oo3rGg69gYrFd wV/lQ+PYm5vhsCH8lmptpj56YOlNbsWmjkomlyASZqgaJHy7Q3dyGXMnZdcPpbVe PhDYTBoBU5Z+ijNfUboyziiHQzA1SvWmTs+ciz8SeuPl3SfMYtlLG6NXoPZtzyyf p+4XFJu7RNSyNQPZN7+dLolRMNjp+b8F75p8hC8pmOaIxvltFPsx+MFOoXP8sjlC 58oWVr32NbNr -----END CERTIFICATE-----Generated at Tue May 12 22:49:54 2026 by rpki-client