$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer File: CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer (raw, json) Hash identifier: voYrx47Gdma33z29zQPRNBSn8O8cQvo4+bFBNTGouVQ= Subject key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5804999E55A71B637D2CC5A597A4F7AAC58FA187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:50 +0000 Certificate not after: Sun 02 May 2027 01:59:50 +0000 Subordinate resources: IP: 103.129.56.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:04:99:9e:55:a7:1b:63:7d:2c:c5:a5:97:a4:f7:aa:c5:8f:a1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:54:50 2026 GMT Not After : May 2 01:59:50 2027 GMT Subject: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:75:9f:4b:ff:c0:fa:1e:47:db:f3:44:4c: cb:5c:81:7b:59:68:e8:1e:f1:17:90:52:c6:d0:53: 69:ae:22:93:64:42:4f:7a:7f:95:26:c5:ae:05:26: 2f:3b:1a:b1:33:b1:55:6e:f5:18:a1:1f:32:59:1b: 0c:f5:c3:09:30:03:6b:97:84:c9:7e:53:25:56:48: 23:ae:6c:63:c2:1a:ca:83:af:dc:d9:bf:e9:69:bc: 95:31:80:4d:f9:a8:cc:7c:9c:d4:b0:a2:60:8b:7c: 3c:86:08:dc:bd:b6:d6:a0:bc:5a:60:56:cd:53:94: 21:76:df:7b:f6:26:39:63:99:3e:87:d1:a5:7d:76: 61:23:49:f7:5c:c3:24:92:ea:41:fa:b5:9e:29:9c: ae:da:44:96:22:2d:83:80:1e:c6:e1:ee:f6:39:c2: 48:d4:11:76:f3:75:fb:fe:48:ac:f2:9c:63:b5:23: 55:3b:03:9d:36:3b:2a:ef:60:22:12:69:ac:9f:61: 4a:b3:31:bd:24:86:25:b6:e0:99:ce:80:f5:88:36: 29:cd:0b:16:9a:06:47:ec:cd:76:e8:e1:61:5b:8d: 4a:69:0a:cc:95:4f:35:c6:12:01:cf:99:61:ef:1c: f7:53:21:3f:42:c3:38:77:60:f9:9e:d3:4f:b3:5e: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.56.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:66:11:eb:76:14:52:6b:78:23:fc:0a:af:75:ed:36:bc:e4: e1:01:ce:60:b4:f5:27:90:41:26:f4:d8:21:16:20:61:fa:f8: 5d:e9:92:11:11:37:46:df:6b:3b:c3:80:e5:49:66:8b:0c:7f: d0:59:c9:d9:b5:10:ba:69:ba:e3:4b:6d:83:b1:51:a8:27:2d: 6c:d0:e8:20:74:ab:d9:db:f8:aa:40:76:90:ae:63:af:35:72: 0c:b8:b3:6f:20:75:23:21:26:e2:ca:30:9b:77:91:92:9b:f1: 14:18:a3:11:f8:90:c8:df:3f:81:74:bc:c6:02:fc:69:7d:92: 44:46:4b:a5:d0:8d:f9:a9:0b:e6:97:3a:8e:e5:81:ca:ed:2d: 9b:4f:fd:73:73:81:5f:9a:49:4a:da:8a:0e:24:30:00:00:b4: e0:13:f2:fa:7f:42:c8:ef:c9:6b:05:bd:cf:90:b2:72:19:d1: 32:f9:13:8c:f4:eb:aa:12:73:78:99:2b:1b:07:fb:09:60:08: da:cf:03:0e:80:c5:2e:54:8b:3f:91:9a:17:5e:c6:7b:7c:54: f8:23:7e:08:3e:a4:bd:34:c5:b6:0b:50:1c:69:d1:0a:4c:0c: 97:a5:73:38:cc:54:db:7a:98:16:29:a2:80:13:b5:b4:85:18: bc:2d:2b:d8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWASZnlWnG2N9LMWll6T3qsWPoYcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTQ1MFoX DTI3MDUwMjAxNTk1MFowMzExMC8GA1UEAxMoQ0EyN0MzRTUzQzcyN0VDNjEyMzhE MUUyQzFFMzUzNTQwQ0VFQjc5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMiIdZ9L/8D6Hkfb80RMy1yBe1lo6B7xF5BSxtBTaa4ik2RCT3p/lSbFrgUm LzsasTOxVW71GKEfMlkbDPXDCTADa5eEyX5TJVZII65sY8IayoOv3Nm/6Wm8lTGA TfmozHyc1LCiYIt8PIYI3L221qC8WmBWzVOUIXbfe/YmOWOZPofRpX12YSNJ91zD JJLqQfq1nimcrtpEliItg4AexuHu9jnCSNQRdvN1+/5IrPKcY7UjVTsDnTY7Ku9g IhJprJ9hSrMxvSSGJbbgmc6A9Yg2Kc0LFpoGR+zNdujhYVuNSmkKzJVPNcYSAc+Z Ye8c91MhP0LDOHdg+Z7TT7Nez30CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMonw+U8cn7GEjjR4sHjU1QM7redMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NjOGQ0ZWUyLTU0OWUtNDE2MC04ZDZmLTg3NzMwZThhZTVlMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYzhkNGVl Mi01NDllLTQxNjAtOGQ2Zi04NzczMGU4YWU1ZTIvMC9DQTI3QzNFNTNDNzI3RUM2 MTIzOEQxRTJDMUUzNTM1NDBDRUVCNzlELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4E4MA0GCSqGSIb3DQEBCwUAA4IBAQALZhHrdhRSa3gj/Aqvde02vOThAc5g tPUnkEEm9NghFiBh+vhd6ZIRETdG32s7w4DlSWaLDH/QWcnZtRC6abrjS22DsVGo Jy1s0OggdKvZ2/iqQHaQrmOvNXIMuLNvIHUjISbiyjCbd5GSm/EUGKMR+JDI3z+B dLzGAvxpfZJERkul0I35qQvmlzqO5YHK7S2bT/1zc4FfmklK2ooOJDAAALTgE/L6 f0LI78lrBb3PkLJyGdEy+ROM9OuqEnN4mSsbB/sJYAjazwMOgMUuVIs/kZoXXsZ7 fFT4I34IPqS9NMW2C1AcadEKTAyXpXM4zFTbepgWKaKAE7W0hRi8LSvY -----END CERTIFICATE-----Generated at Tue May 12 22:47:41 2026 by rpki-client