$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer File: 27992B841C717A90B3FDBD81B476F3FF9045212D.cer (raw, json) Hash identifier: 5WCIe3HQ15PLHKOERMyCjU4YzroKkbr+Q91nTLEalyA= Subject key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6C6D1A1EC2730D6B99BB7F2F4EC1162497C60F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 25 Oct 2025 12:13:36 +0000 Certificate not after: Sat 24 Oct 2026 12:18:36 +0000 Subordinate resources: IP: 103.55.226.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6d:1a:1e:c2:73:0d:6b:99:bb:7f:2f:4e:c1:16:24:97:c6:0f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 25 12:13:36 2025 GMT Not After : Oct 24 12:18:36 2026 GMT Subject: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:be:a4:e3:75:cd:c8:94:f7:9b:27:cf:9a: a9:c5:c1:35:aa:66:91:8b:42:f0:d7:73:e0:27:53: 65:9b:b1:62:71:49:df:eb:ba:c8:11:ab:23:c3:67: 62:bb:96:c8:51:1e:62:5c:28:cd:e7:43:eb:7f:04: 76:a9:f3:5c:f3:b4:a0:39:69:5f:f9:3e:c4:25:8d: 75:b1:49:b6:53:ae:cb:86:85:84:41:6d:df:d5:ce: 7e:43:e0:3e:80:0d:99:aa:79:e0:7b:74:c5:a4:c1: 96:22:dc:22:99:af:b5:29:4a:46:6f:12:bb:2f:25: d6:f9:8d:ab:c5:06:e2:c9:7a:92:7a:a7:04:03:e4: b4:d8:11:91:80:f0:0f:e8:ac:9f:ba:d4:86:39:87: f3:0e:49:de:03:84:c6:3f:19:6c:73:3b:f1:03:57: e0:cf:90:55:f3:aa:6d:f8:5a:1f:20:a7:ef:ae:8a: d9:02:35:60:d1:36:96:73:87:1d:d3:4b:58:a5:56: 09:88:a1:2c:dc:52:79:39:c7:f0:8c:4b:6b:c9:86: 38:a6:be:7f:b8:7d:d6:34:58:3d:dd:ad:0c:10:f4: 28:46:bd:6c:4c:6d:55:0d:86:fa:5c:d9:88:27:3a: 76:ab:f2:f4:4f:54:1c:a0:17:a8:8f:b1:47:58:60: b3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.226.0/23 Signature Algorithm: sha256WithRSAEncryption 78:e8:18:91:7c:a3:44:c6:33:a1:a4:21:fa:bd:22:ae:54:75: e4:6c:7c:91:b0:38:87:ee:a1:17:3a:43:cd:fc:fd:69:5c:49: 53:98:c9:5d:3c:60:f6:82:7a:f2:b5:ca:4e:71:0b:04:1e:82: 2f:e0:86:4f:98:88:38:a0:0f:aa:d8:14:f3:6b:d8:ee:32:81: 1d:8c:a0:35:3a:a7:f2:a1:d0:71:37:1d:72:bf:c3:9b:7d:d9: 47:9d:c9:89:0f:f8:f8:b3:b8:4d:10:01:8a:4b:77:5d:c3:8c: c9:69:6f:28:5b:5f:30:1e:06:e2:23:2e:a8:3e:4f:b1:49:3e: 0e:62:82:14:d1:d6:f0:2c:d1:7b:1e:65:8b:03:3b:c2:2c:3e: ee:a6:4d:b6:17:e8:05:cc:e9:1a:11:27:87:b2:1f:f6:d3:32: cf:21:64:6c:19:ec:e7:58:96:53:f7:ac:2e:6f:93:24:50:42: a5:d1:45:6b:c4:e2:db:3a:9a:8b:f7:77:79:9b:9e:d2:18:19: 8a:0e:fc:59:01:7c:fc:22:86:d9:18:b2:b0:03:52:67:9e:4f: 9d:eb:61:c1:ee:55:a6:98:ac:a1:43:fe:09:45:e3:b9:9e:fd: 09:9a:bf:18:06:fc:5a:4a:f2:49:eb:f0:e9:14:00:b4:60:cf: 2a:a9:e7:89 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbG0aHsJzDWuZu38vTsEWJJfGD4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNTEyMTMzNloX DTI2MTAyNDEyMTgzNlowMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRC RDgxQjQ3NkYzRkY5MDQ1MjEyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6dvqTjdc3IlPebJ8+aqcXBNapmkYtC8Ndz4CdTZZuxYnFJ3+u6yBGrI8Nn YruWyFEeYlwozedD638EdqnzXPO0oDlpX/k+xCWNdbFJtlOuy4aFhEFt39XOfkPg PoANmap54Ht0xaTBliLcIpmvtSlKRm8Suy8l1vmNq8UG4sl6knqnBAPktNgRkYDw D+isn7rUhjmH8w5J3gOExj8ZbHM78QNX4M+QVfOqbfhaHyCn766K2QI1YNE2lnOH HdNLWKVWCYihLNxSeTnH8IxLa8mGOKa+f7h91jRYPd2tDBD0KEa9bExtVQ2G+lzZ iCc6dqvy9E9UHKAXqI+xR1hgs9ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCeZK4QccXqQs/29gbR28/+QRSEtMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZTNkZDk1 LTJhODUtNDM5ZS04NGYyLTk3MmEyM2UzMjcxZS8wLzI3OTkyQjg0MUM3MTdBOTBC M0ZEQkQ4MUI0NzZGM0ZGOTA0NTIxMkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnN+IwDQYJKoZIhvcNAQELBQADggEBAHjoGJF8o0TGM6GkIfq9Iq5UdeRsfJGw OIfuoRc6Q838/WlcSVOYyV08YPaCevK1yk5xCwQegi/ghk+YiDigD6rYFPNr2O4y gR2MoDU6p/Kh0HE3HXK/w5t92UedyYkP+PizuE0QAYpLd13DjMlpbyhbXzAeBuIj Lqg+T7FJPg5ighTR1vAs0XseZYsDO8IsPu6mTbYX6AXM6RoRJ4eyH/bTMs8hZGwZ 7OdYllP3rC5vkyRQQqXRRWvE4ts6mov3d3mbntIYGYoO/FkBfPwihtkYsrADUmee T53rYcHuVaaYrKFD/glF47me/QmavxgG/FpK8knr8OkUALRgzyqp54k= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:07 2025 by rpki-client