$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer (raw, json) Hash identifier: N4NXEWslXJW+4bcuuglC59lwOlTTGrlgGVZ22NSlPxc= Subject key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 276DD89AD5F5B35C19F2CFB21FC49DCBBBB6D9D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft caRepository: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 16:40:43 +0000 Certificate not after: Tue 02 Jun 2026 16:45:43 +0000 Subordinate resources: IP: 103.129.220.0/22 IP: 2001:df6:8900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6d:d8:9a:d5:f5:b3:5c:19:f2:cf:b2:1f:c4:9d:cb:bb:b6:d9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 16:40:43 2025 GMT Not After : Jun 2 16:45:43 2026 GMT Subject: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:f1:ad:79:b6:b8:1e:ee:a3:35:1e:ed:59: 1c:0b:02:73:ca:41:34:49:ac:84:e2:0c:43:a4:e9: 92:bd:97:e4:23:a7:9a:25:ec:01:0b:0e:b3:2d:6c: 11:9d:0d:7c:9b:ba:87:99:73:a6:68:f0:8f:28:d5: 5e:a2:f1:6a:45:f7:07:84:39:9e:24:87:aa:77:f6: dc:a9:b4:6f:25:05:b5:99:94:9e:9b:c1:3f:c8:d3: 0d:c2:4c:96:7b:6d:53:b4:9a:58:27:5f:31:66:24: e1:f3:12:f9:75:df:8b:11:4c:06:9f:f6:21:ae:4f: 2c:ba:56:e3:80:56:f0:8e:c4:63:92:77:3e:38:5e: e7:3e:1d:65:42:fd:17:2b:85:95:3c:62:0c:26:8b: b5:b5:96:4a:a9:e6:c3:69:9a:6b:12:2c:07:e1:26: e9:5c:d4:ea:18:c3:1b:62:8e:17:2d:e2:93:93:df: 14:4a:db:c5:b9:44:7f:18:0d:6d:79:ee:d7:a0:d6: 97:5f:02:22:78:c2:74:ad:db:e7:76:32:b7:29:4e: 50:49:eb:8c:3f:14:7a:42:3d:2c:af:f7:e3:c5:ff: 96:45:93:ff:8d:f6:60:21:5b:a1:4c:7b:f1:4f:70: 8b:b4:32:9d:b0:05:c1:48:d6:59:e1:34:5c:2a:92: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.220.0/22 IPv6: 2001:df6:8900::/48 Signature Algorithm: sha256WithRSAEncryption 7b:ff:d1:82:1f:83:29:20:cf:7c:b6:17:3d:3c:66:00:32:6d: 76:8b:33:bf:2c:39:a1:48:a0:c4:4e:ec:c8:07:bf:55:b3:85: 7e:6f:c5:f9:cb:7f:42:53:52:5e:0a:0c:a7:b3:9f:f9:ab:d7: f0:a8:95:df:3b:36:f5:c3:e6:ed:3b:6f:3d:68:33:2d:b0:b7: 83:41:2c:da:a3:94:27:1e:2f:86:bb:0c:e1:d9:55:ba:94:b1: 54:03:c4:61:5e:da:a8:f4:23:06:b6:14:4a:14:5c:80:9f:0d: 26:8d:97:ae:33:26:0e:af:7b:1f:e0:0c:7e:66:3b:4e:0c:a0: 5c:10:75:4f:61:ea:9e:8f:71:76:5f:7d:de:59:d3:91:d4:a8: 6e:b0:52:b0:c2:39:65:5c:55:bf:43:90:33:6c:c3:70:10:d6: 70:1b:97:df:5d:9e:58:72:4e:3d:22:57:4a:4f:13:ea:68:88: 42:b4:73:6f:0b:e1:1b:6b:a9:7e:47:84:8b:60:8f:6d:19:11: 38:6c:bd:d9:3f:27:bc:f1:8e:4f:65:b4:63:91:23:1d:24:58: 83:f6:b8:d5:81:2d:a1:5d:3f:05:92:60:a6:68:75:bf:18:f8: 96:e1:f4:c7:47:90:d9:32:a9:d4:38:b0:6b:16:c5:cf:e4:51: 7c:0d:95:a7 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJ23YmtX1s1wZ8s+yH8Sdy7u22dkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE2NDA0M1oX DTI2MDYwMjE2NDU0M1owMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1 MjNGMUExQUNEN0QwMThEMEFERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALA/8a15trge7qM1Hu1ZHAsCc8pBNEmshOIMQ6Tpkr2X5COnmiXsAQsOsy1s EZ0NfJu6h5lzpmjwjyjVXqLxakX3B4Q5niSHqnf23Km0byUFtZmUnpvBP8jTDcJM lnttU7SaWCdfMWYk4fMS+XXfixFMBp/2Ia5PLLpW44BW8I7EY5J3Pjhe5z4dZUL9 FyuFlTxiDCaLtbWWSqnmw2maaxIsB+Em6VzU6hjDG2KOFy3ik5PfFErbxblEfxgN bXnu16DWl18CInjCdK3b53YytylOUEnrjD8UekI9LK/348X/lkWT/432YCFboUx7 8U9wi7QynbAFwUjWWeE0XCqSVysCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOJ/Bwsn6rCW4rNSPxoazX0BjQrdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2YTAwMmRl LTBjZGUtNDYyZS05NDA0LTQ2YmM2MjcwZTA0Zi8wL0UyN0YwNzBCMjdFQUIwOTZF MkIzNTIzRjFBMUFDRDdEMDE4RDBBREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJngdwwDwQCAAIwCQMHACABDfaJADANBgkqhkiG9w0BAQsFAAOCAQEAe//Rgh+D KSDPfLYXPTxmADJtdoszvyw5oUigxE7syAe/VbOFfm/F+ct/QlNSXgoMp7Of+avX 8KiV3zs29cPm7TtvPWgzLbC3g0Es2qOUJx4vhrsM4dlVupSxVAPEYV7aqPQjBrYU ShRcgJ8NJo2XrjMmDq97H+AMfmY7TgygXBB1T2Hqno9xdl993lnTkdSobrBSsMI5 ZVxVv0OQM2zDcBDWcBuX312eWHJOPSJXSk8T6miIQrRzbwvhG2upfkeEi2CPbRkR OGy92T8nvPGOT2W0Y5EjHSRYg/a41YEtoV0/BZJgpmh1vxj4luH0x0eQ2TKp1Diw axbFz+RRfA2Vpw== -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:08 2025 by rpki-client