$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer (raw, json) Hash identifier: hHprdXKEg62Q0vJj15+zYl0Q204Sfs5epEjt4WMC8Lk= Subject key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 399A4D1BEC38F7CCF9AB58A32B0F53447DA9FC07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:39:13 +0000 Certificate not after: Sun 02 May 2027 00:44:13 +0000 Subordinate resources: IP: 103.3.232.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9a:4d:1b:ec:38:f7:cc:f9:ab:58:a3:2b:0f:53:44:7d:a9:fc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:39:13 2026 GMT Not After : May 2 00:44:13 2027 GMT Subject: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a2:85:5c:7f:59:f6:c9:8f:da:fd:7f:df:de: 17:dc:a1:39:6d:92:32:40:f2:11:bb:5e:9a:c6:4b: 54:86:87:a6:8f:c0:01:04:ba:8f:9c:7e:f0:01:3c: ce:cc:51:33:09:5f:6b:6b:3d:60:94:e1:c7:a9:9b: 60:03:3e:5f:6a:dc:ca:d8:64:1c:2a:88:52:78:66: 5d:e2:a6:d9:34:45:35:66:06:82:b6:ce:9b:78:06: 66:b5:1e:35:52:d3:dc:69:d5:da:9f:5e:e0:17:97: e5:d0:a0:51:ab:6f:d9:9f:33:93:4d:3d:9d:55:68: ef:72:73:8f:5e:d1:30:3f:dc:67:28:19:9e:5c:53: 7d:0a:f0:46:7d:3b:d5:8f:b5:55:71:22:db:0d:b7: 51:f4:e5:09:f4:7e:85:93:79:ee:f7:cf:73:f6:15: c8:4e:f6:da:52:c2:3b:a3:0f:84:27:99:da:b1:22: 06:18:27:ec:e3:5d:e1:40:86:78:b9:f6:da:b0:49: b2:ca:22:e7:92:85:5e:3d:72:76:01:fe:31:96:21: 7c:9d:59:14:56:cf:c1:c5:6d:b5:c7:0f:ef:74:d9: e2:8b:45:fb:a7:dc:47:1f:08:fd:46:43:47:e5:0b: cc:bb:29:f9:a2:38:4a:9e:53:5b:26:ed:a8:9f:98: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.232.0/24 Signature Algorithm: sha256WithRSAEncryption 98:93:d6:68:52:96:c7:9d:7f:02:6b:d6:04:8c:0d:bc:b1:a0: 70:37:0f:bd:5b:c3:1b:1a:4a:48:12:24:64:02:3e:d3:f0:e4: fe:19:e4:72:49:11:d6:19:57:71:ac:b2:cf:41:03:7c:4d:13: 14:db:74:e7:09:02:be:08:d1:eb:23:5c:31:8f:34:84:a0:5b: 7a:69:60:40:21:43:82:f8:5a:fa:29:52:3d:ec:66:ee:52:c4: 42:d7:1a:fe:c6:82:32:a6:7c:e5:96:a5:20:f6:a6:3d:46:65: d8:09:ca:3a:e8:6c:72:cd:6b:83:d7:26:17:f9:cc:d2:40:35: 70:73:35:93:8d:17:5a:d0:06:1d:6a:82:b3:21:61:2e:e3:b5: d4:9e:12:50:b5:15:5f:76:1c:fb:e5:35:a8:f7:b1:a3:93:ad: 99:8d:d5:9f:85:1e:13:e6:85:65:09:cf:30:02:a7:51:d1:80: c7:9e:24:35:37:0a:bd:25:12:ed:0b:f5:45:87:f7:da:ba:3e: 9c:55:12:9c:a3:9a:33:e1:3e:62:b2:33:b2:74:38:33:8b:b9: 86:f3:14:99:ff:ad:0e:42:c2:56:6c:81:fb:16:14:30:34:85: e1:22:12:1b:1e:5c:dc:26:da:36:63:79:e8:b5:13:bd:38:de: 31:fa:3f:11 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOZpNG+w498z5q1ijKw9TRH2p/AcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzkxM1oX DTI3MDUwMjAwNDQxM1owMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIz RkUyREQxRjlCNzlDQjU5RjdGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmihVx/WfbJj9r9f9/eF9yhOW2SMkDyEbtemsZLVIaHpo/AAQS6j5x+8AE8 zsxRMwlfa2s9YJThx6mbYAM+X2rcythkHCqIUnhmXeKm2TRFNWYGgrbOm3gGZrUe NVLT3GnV2p9e4BeX5dCgUatv2Z8zk009nVVo73Jzj17RMD/cZygZnlxTfQrwRn07 1Y+1VXEi2w23UfTlCfR+hZN57vfPc/YVyE722lLCO6MPhCeZ2rEiBhgn7ONd4UCG eLn22rBJssoi55KFXj1ydgH+MZYhfJ1ZFFbPwcVttccP73TZ4otF+6fcRx8I/UZD R+ULzLsp+aI4Sp5TWybtqJ+YQgUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDe7cJGWBKwxokI/4t0fm3nLWff0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU5ZTdjYTM5LThkYmMtNDI4Mi1hMGQzLTg0ODAyMzcyNjg2Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81OWU3Y2Ez OS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMC8zN0JCNzA5MTk2MDRBQzMx QTI0MjNGRTJERDFGOUI3OUNCNTlGN0Y0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZwPoMA0GCSqGSIb3DQEBCwUAA4IBAQCYk9ZoUpbHnX8Ca9YEjA28saBwNw+9 W8MbGkpIEiRkAj7T8OT+GeRySRHWGVdxrLLPQQN8TRMU23TnCQK+CNHrI1wxjzSE oFt6aWBAIUOC+Fr6KVI97GbuUsRC1xr+xoIypnzllqUg9qY9RmXYCco66GxyzWuD 1yYX+czSQDVwczWTjRda0AYdaoKzIWEu47XUnhJQtRVfdhz75TWo97Gjk62ZjdWf hR4T5oVlCc8wAqdR0YDHniQ1Nwq9JRLtC/VFh/fauj6cVRKco5oz4T5isjOydDgz i7mG8xSZ/60OQsJWbIH7FhQwNIXhIhIbHlzcJto2Y3notRO9ON4x+j8R -----END CERTIFICATE-----Generated at Tue May 12 22:45:42 2026 by rpki-client