$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer (raw, json) Hash identifier: 6mwxU+x/VOgiCJTHCNKOEkRZcWQLOHL4nrUzgdFtFdo= Subject key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4E3DEA672519CCFCB27F01837405E2F9A294ADF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft caRepository: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 08 Jul 2025 21:53:13 +0000 Certificate not after: Tue 07 Jul 2026 21:58:13 +0000 Subordinate resources: IP: 103.166.226.0/23 IP: 2401:4fa0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3d:ea:67:25:19:cc:fc:b2:7f:01:83:74:05:e2:f9:a2:94:ad:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 8 21:53:13 2025 GMT Not After : Jul 7 21:58:13 2026 GMT Subject: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:a6:94:05:f1:2c:3b:10:5c:d1:7b:90:4a: 25:c2:8a:29:60:6a:ab:e1:fa:96:22:63:28:e4:dc: 46:ec:df:51:fc:78:79:ae:cb:d2:80:46:46:9b:cf: 3d:7f:b4:37:19:b1:53:c7:4b:30:50:af:f5:ff:6c: bd:52:44:43:43:64:e2:c2:6a:b5:d9:47:e0:f2:1d: 8b:14:8b:a0:65:0e:cb:60:51:9f:67:5d:f7:71:bd: 2c:ba:89:ba:0e:54:34:ad:a1:35:54:0c:c5:d8:a8: 17:a2:f1:24:3d:96:49:15:aa:01:8a:60:eb:60:9c: f7:31:cd:e6:ad:5b:82:4a:01:60:8b:8c:e3:44:38: 7a:5b:a5:a3:8f:04:77:9e:49:6e:c0:7a:b9:f1:a8: 8a:61:21:e8:a7:b1:31:4f:a8:cc:d4:32:24:55:a7: fa:55:21:4c:e8:10:c9:4b:d1:9c:99:e2:74:10:0c: e0:ae:f1:7c:1a:27:1a:35:11:75:af:83:31:53:75: 1e:72:86:fc:7c:b5:4a:61:3f:01:29:63:83:14:5d: f8:f5:ea:de:bb:72:55:88:a3:72:44:83:56:f9:61: 3d:cd:65:5b:6c:41:e9:82:5b:59:75:62:01:7f:0c: e9:fc:58:9f:ad:fe:ca:45:6c:3b:32:81:16:09:8f: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.226.0/23 IPv6: 2401:4fa0::/32 Signature Algorithm: sha256WithRSAEncryption 66:b8:69:ad:e3:46:58:11:56:71:73:1c:44:6a:5f:b9:1b:61: 03:bb:9b:9f:97:44:8a:e5:94:58:be:aa:c9:1d:70:17:03:39: 2f:20:67:9f:b1:71:3c:b4:fc:e0:38:f0:f0:0e:1c:3a:05:89: 48:3e:a3:3e:95:a8:df:c8:fd:55:34:ab:23:03:99:65:2d:56: e7:22:e9:88:5f:a2:8f:1b:b1:ea:14:2b:03:86:8b:56:df:1b: 76:fe:99:1c:8e:d1:79:4d:48:a7:f2:13:0e:ee:de:f0:39:d1: e8:b7:43:67:06:4f:1a:e2:60:94:f1:d5:e3:f4:d7:3d:aa:63: e2:ac:d8:0a:65:a5:c7:cf:09:00:ac:00:ec:00:c3:02:19:c9: 38:a0:79:ec:b5:e0:b5:24:33:5c:87:95:7c:56:89:74:0d:fd: 34:c9:1c:0c:9e:b7:cf:f1:d6:d7:d2:c2:db:35:5d:1c:a1:0f: cc:97:1e:fc:0b:41:60:94:c8:94:65:27:f6:21:13:92:6d:fd: ce:82:5c:3a:90:5f:1f:8f:52:e3:b2:45:da:f6:43:c8:8a:0a: a4:df:c4:3f:b1:ee:ca:2a:50:1a:ed:75:50:ae:e1:b3:f6:cb: f6:e8:35:a1:11:2d:26:8d:eb:53:4a:aa:0e:fd:d2:83:f1:2f: e2:42:9f:22 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUTj3qZyUZzPyyfwGDdAXi+aKUrfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwODIxNTMxM1oX DTI2MDcwNzIxNTgxM1owMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUy RUM1NkFDQkNCQ0VCMjFDNDk4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbUppQF8Sw7EFzRe5BKJcKKKWBqq+H6liJjKOTcRuzfUfx4ea7L0oBGRpvP PX+0NxmxU8dLMFCv9f9svVJEQ0Nk4sJqtdlH4PIdixSLoGUOy2BRn2dd93G9LLqJ ug5UNK2hNVQMxdioF6LxJD2WSRWqAYpg62Cc9zHN5q1bgkoBYIuM40Q4elulo48E d55JbsB6ufGoimEh6KexMU+ozNQyJFWn+lUhTOgQyUvRnJnidBAM4K7xfBonGjUR da+DMVN1HnKG/Hy1SmE/ASljgxRd+PXq3rtyVYijckSDVvlhPc1lW2xB6YJbWXVi AX8M6fxYn63+ykVsOzKBFgmPZcECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCwnoNndJTHr7x4uxWrLy86yHEmOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhmZjA5NTg0 LTkxMTAtNGIwZC04ZjZkLTJjZTUyNThlODQ2Yi8wLzJDMjdBMEQ5REQyNTMxRUJF RjFFMkVDNTZBQ0JDQkNFQjIxQzQ5OEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnpuIwDQQCAAIwBwMFACQBT6AwDQYJKoZIhvcNAQELBQADggEBAGa4aa3jRlgR VnFzHERqX7kbYQO7m5+XRIrllFi+qskdcBcDOS8gZ5+xcTy0/OA48PAOHDoFiUg+ oz6VqN/I/VU0qyMDmWUtVuci6Yhfoo8bseoUKwOGi1bfG3b+mRyO0XlNSKfyEw7u 3vA50ei3Q2cGTxriYJTx1eP01z2qY+Ks2AplpcfPCQCsAOwAwwIZyTigeey14LUk M1yHlXxWiXQN/TTJHAyet8/x1tfSwts1XRyhD8yXHvwLQWCUyJRlJ/YhE5Jt/c6C XDqQXx+PUuOyRdr2Q8iKCqTfxD+x7soqUBrtdVCu4bP2y/boNaERLSaN61NKqg79 0oPxL+JCnyI= -----END CERTIFICATE-----Generated at Sun Jul 20 22:32:10 2025 by rpki-client