$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer (raw, json) Hash identifier: tjGYBj7ljOFyEJArY/yfruY0+7XyV8q+42zkco08xqw= Subject key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 079437171B2EB98BE0ABFBE84791BED8911A4128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:03:46 +0000 Certificate not after: Sun 02 May 2027 02:08:46 +0000 Subordinate resources: IP: 157.66.140.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:94:37:17:1b:2e:b9:8b:e0:ab:fb:e8:47:91:be:d8:91:1a:41:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:03:46 2026 GMT Not After : May 2 02:08:46 2027 GMT Subject: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:72:25:c8:2a:d9:17:53:d8:3c:9a:74:1d: 9c:df:8d:96:86:11:3a:d0:bd:27:26:66:65:4d:f7: 9a:5c:44:9d:33:54:0d:2c:f6:2d:39:f0:33:97:4a: 28:c0:d0:f8:1a:a2:c0:c9:49:7a:8a:34:bd:88:34: f0:35:90:b3:3a:f2:b6:72:0b:8a:6a:f0:5d:80:c8: f3:ce:ab:9d:d8:b4:29:ee:45:89:e7:a0:6f:7d:a0: 77:32:df:30:e3:80:45:21:65:8b:d2:0b:b6:2f:e3: bc:b9:9a:0b:f8:b1:7f:a0:1e:92:b1:5b:ca:2b:55: 67:5f:90:a4:94:bc:f1:54:4e:ee:a9:eb:97:b4:05: 6c:86:24:20:06:21:ef:d8:97:3f:be:02:4d:88:b8: 77:35:99:30:54:08:e2:17:cd:31:2d:14:08:8f:0c: c4:00:27:2a:d0:88:2c:6e:e8:7f:9e:b6:7e:1f:a2: 05:14:a9:73:63:4f:63:0d:57:45:00:05:ce:7e:0b: 6d:25:d2:f7:fe:8f:6f:ae:0b:b0:d6:6d:ea:18:dd: 14:3a:ca:1f:63:ae:f4:29:3d:0a:e1:71:a1:1b:bb: 9c:db:df:13:45:f2:e6:37:db:38:6a:6b:09:b2:f6: 52:1c:3b:7d:f3:c9:6d:b6:c3:c9:dc:aa:eb:68:31: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.140.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:1b:ef:13:2d:19:49:bd:b7:a8:9a:36:c7:ef:96:dc:c1:9c: d1:08:66:21:1d:18:fb:b1:2e:1d:1d:bd:bc:08:ad:4d:0c:88: 64:f4:79:d6:b7:77:29:36:bf:91:4d:65:19:ee:77:1f:f8:7c: a8:c3:80:41:aa:d1:ef:22:1d:ec:37:ce:21:e8:16:a6:63:66: 01:fd:a6:2b:ab:5b:e8:6f:39:99:6a:4f:09:ba:6d:34:3c:57: 1c:6d:21:73:91:38:0a:1b:76:aa:f6:01:05:d8:90:0f:09:ec: cb:9a:a7:b9:84:2c:80:59:14:65:61:a9:84:b6:23:c2:b4:d5: 57:47:b4:a2:00:69:91:3b:dc:b5:ff:88:09:d8:c7:8c:ec:50: 54:f0:c3:db:79:d6:dd:f2:f3:f4:b0:c7:9a:3a:fb:90:9f:db: 9d:15:40:22:33:4f:73:28:ce:b0:d6:9f:b8:8a:7e:3f:5b:cf: 3f:83:b0:16:38:9d:74:20:fd:85:38:78:9f:e5:d5:4e:3d:67: bf:03:02:f4:8b:3c:35:dd:94:e1:32:ab:87:86:04:14:3f:25: 86:cb:70:69:dd:a1:1e:15:24:16:b6:ac:81:65:f5:a1:8d:f1: 39:27:b8:bd:7b:66:46:c1:50:1c:27:09:77:fe:a0:e6:e5:09: 28:69:51:a3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUB5Q3FxsuuYvgq/voR5G+2JEaQSgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMDM0NloX DTI3MDUwMjAyMDg0NlowMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2 NjM4Qzg5Q0YyQjM1RTUzQTYxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcPciXIKtkXU9g8mnQdnN+NloYROtC9JyZmZU33mlxEnTNUDSz2LTnwM5dK KMDQ+BqiwMlJeoo0vYg08DWQszrytnILimrwXYDI886rndi0Ke5Fieegb32gdzLf MOOARSFli9ILti/jvLmaC/ixf6AekrFbyitVZ1+QpJS88VRO7qnrl7QFbIYkIAYh 79iXP74CTYi4dzWZMFQI4hfNMS0UCI8MxAAnKtCILG7of562fh+iBRSpc2NPYw1X RQAFzn4LbSXS9/6Pb64LsNZt6hjdFDrKH2Ou9Ck9CuFxoRu7nNvfE0Xy5jfbOGpr CbL2Uhw7ffPJbbbDydyq62gxZD0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDci9X82/G32Tw9mOMic8rNeU6YRMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RiYTlmNGUyLWM3M2ItNDQyNy05ODI5LTFkYTFiYWFiODcwYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYmE5ZjRl Mi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC8zNzIyRjU3RjM2RkM2REY2 NEYwRjY2MzhDODlDRjJCMzVFNTNBNjExLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnUKMMA0GCSqGSIb3DQEBCwUAA4IBAQA6G+8TLRlJvbeomjbH75bcwZzRCGYh HRj7sS4dHb28CK1NDIhk9HnWt3cpNr+RTWUZ7ncf+Hyow4BBqtHvIh3sN84h6Bam Y2YB/aYrq1vobzmZak8Jum00PFccbSFzkTgKG3aq9gEF2JAPCezLmqe5hCyAWRRl YamEtiPCtNVXR7SiAGmRO9y1/4gJ2MeM7FBU8MPbedbd8vP0sMeaOvuQn9udFUAi M09zKM6w1p+4in4/W88/g7AWOJ10IP2FOHif5dVOPWe/AwL0izw13ZThMquHhgQU PyWGy3Bp3aEeFSQWtqyBZfWhjfE5J7i9e2ZGwVAcJwl3/qDm5QkoaVGj -----END CERTIFICATE-----Generated at Tue May 12 22:10:00 2026 by rpki-client