$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer File: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer (raw, json) Hash identifier: 46IBTj7bqDVgIGGVYsnV1PdIP4hbe1kczHmQQrm0KA0= Subject key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63A3DAB19A285E94A300190C6E50DD2D123D8161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft caRepository: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 09 Sep 2025 05:31:33 +0000 Certificate not after: Tue 08 Sep 2026 05:36:33 +0000 Subordinate resources: IP: 175.111.96.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a3:da:b1:9a:28:5e:94:a3:00:19:0c:6e:50:dd:2d:12:3d:81:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 9 05:31:33 2025 GMT Not After : Sep 8 05:36:33 2026 GMT Subject: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:31:be:83:c6:36:33:2a:e8:3b:d7:ab:d7: fe:69:3a:fd:7d:88:32:a3:8b:3d:b0:50:c7:78:68: 8a:22:22:bb:c2:b3:e9:4d:c9:0b:69:8c:0f:4b:6f: 3f:b1:18:f7:15:37:c8:a0:98:1a:d1:32:d7:c5:ef: 8a:72:9a:c1:2d:5d:ee:85:00:b1:fa:76:c1:27:15: b3:4f:fe:00:a4:2d:a0:40:90:68:6b:1c:09:3d:fb: e0:4b:93:1b:08:61:0a:42:e5:d5:d8:dc:60:16:b1: 15:6f:cb:6a:32:3a:27:2f:dc:d8:a5:d5:7b:32:65: 0c:29:82:43:e7:53:c5:3f:93:ec:e4:8d:d6:5b:46: 53:df:5e:d7:3f:bc:a2:f0:af:ed:59:92:47:04:7f: d7:bd:41:77:e5:9f:2a:b1:ce:52:9a:b5:07:46:a5: f2:79:57:45:e1:d9:5a:77:e9:67:87:67:26:a7:65: 23:18:80:d5:18:02:8d:18:4f:22:21:a5:59:2f:d9: f5:90:8b:ed:62:b6:ef:87:d9:0c:13:8c:ed:28:f5: b4:0f:3d:3f:71:36:d7:75:16:96:96:c5:cd:1a:5e: 70:f5:b6:8f:eb:3e:a0:0e:f7:9d:ee:85:78:45:e9: f7:8d:f1:94:3b:3f:a3:a2:a8:2e:78:82:e5:55:6b: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.96.0/24 Signature Algorithm: sha256WithRSAEncryption 17:c6:31:20:03:05:f2:b3:9a:7f:a2:83:3a:87:7d:22:38:c4: 0f:b5:36:75:b7:ba:1b:2c:58:c5:bb:fe:a4:cd:8e:5a:a4:36: ef:da:15:bd:5b:87:bc:26:f4:3f:8e:65:99:38:58:0a:29:14: 3c:9b:c3:c1:2f:7c:72:47:59:9f:b6:36:13:0f:28:f9:c9:64: e2:27:c5:07:32:5b:57:e7:e0:56:c4:52:f8:65:d3:60:39:3f: c0:0d:f1:79:b0:5d:4b:12:c8:83:a3:92:94:f3:94:bf:6d:26: 55:61:e0:5d:ea:1e:9e:2f:6c:cb:8d:65:25:90:7e:94:b6:6d: a5:94:e9:85:f8:71:cf:5f:a7:bd:31:76:c5:53:4c:f2:35:b0: 0c:81:e3:28:27:ab:19:ed:b7:0e:96:e5:c9:4d:17:c3:dc:6c: 48:b4:bd:a8:dd:e7:19:b9:bb:df:e0:7a:7a:6b:f3:b9:f8:14: d7:46:e8:a1:15:71:20:b0:79:ba:31:7a:66:73:d0:eb:2a:f0: f3:34:66:f4:00:42:12:74:a8:51:34:e4:1a:2e:2c:a8:b3:c5: 1b:41:ca:97:d1:f1:a2:ea:8a:19:55:62:fc:f5:79:65:8a:2a: b0:a7:75:62:c5:d0:a5:2e:44:e6:20:83:a7:ea:7c:6a:35:62: 4a:5f:d6:c7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY6PasZooXpSjABkMblDdLRI9gWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwOTA1MzEzM1oX DTI2MDkwODA1MzYzM1owMzExMC8GA1UEAxMoMjdCMkNFOTZGQUU4RTE3NjNBM0Mz MERCMzNDM0JCRDhGMDUxODM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsIMb6DxjYzKug716vX/mk6/X2IMqOLPbBQx3hoiiIiu8Kz6U3JC2mMD0tv P7EY9xU3yKCYGtEy18XvinKawS1d7oUAsfp2wScVs0/+AKQtoECQaGscCT374EuT GwhhCkLl1djcYBaxFW/LajI6Jy/c2KXVezJlDCmCQ+dTxT+T7OSN1ltGU99e1z+8 ovCv7VmSRwR/171Bd+WfKrHOUpq1B0al8nlXReHZWnfpZ4dnJqdlIxiA1RgCjRhP IiGlWS/Z9ZCL7WK274fZDBOM7Sj1tA89P3E213UWlpbFzRpecPW2j+s+oA73ne6F eEXp943xlDs/o6KoLniC5VVrUYUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCeyzpb66OF2Ojww2zPDu9jwUYOLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NTUxMWE4YS0zMGRhLTQ2NzAtYTAxMC03OTI2ZDdjZDUxMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1NTExYThh LTMwZGEtNDY3MC1hMDEwLTc5MjZkN2NkNTEwYi8wLzI3QjJDRTk2RkFFOEUxNzYz QTNDMzBEQjMzQzNCQkQ4RjA1MTgzOEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACvb2AwDQYJKoZIhvcNAQELBQADggEBABfGMSADBfKzmn+igzqHfSI4xA+1NnW3 uhssWMW7/qTNjlqkNu/aFb1bh7wm9D+OZZk4WAopFDybw8EvfHJHWZ+2NhMPKPnJ ZOInxQcyW1fn4FbEUvhl02A5P8AN8XmwXUsSyIOjkpTzlL9tJlVh4F3qHp4vbMuN ZSWQfpS2baWU6YX4cc9fp70xdsVTTPI1sAyB4ygnqxnttw6W5clNF8PcbEi0vajd 5xm5u9/genpr87n4FNdG6KEVcSCweboxemZz0Osq8PM0ZvQAQhJ0qFE05BouLKiz xRtBypfR8aLqihlVYvz1eWWKKrCndWLF0KUuROYgg6fqfGo1Ykpf1sc= -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:45 2025 by rpki-client