$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer File: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer (raw, json) Hash identifier: okaJocT+CZmiBHKsoSexDCa/pgJDHSdVZzLh6eHZTYY= Subject key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0151F60DB445DF19D2CFDAA101807485BD74C1B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:32:53 +0000 Certificate not after: Sun 02 May 2027 00:37:53 +0000 Subordinate resources: IP: 103.113.124.0/22 IP: 2402:bb40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:51:f6:0d:b4:45:df:19:d2:cf:da:a1:01:80:74:85:bd:74:c1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:32:53 2026 GMT Not After : May 2 00:37:53 2027 GMT Subject: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:73:b6:00:f8:fd:d0:c8:a7:d6:45:fb:96: e3:11:b0:a7:33:89:a6:62:b8:1b:bd:83:ae:ed:90: e0:be:4e:2b:a9:3c:f3:59:5e:bb:0b:95:54:c5:33: 16:63:54:6b:5b:a1:e6:25:3d:aa:d1:ef:35:7c:02: 61:97:ed:75:f7:41:32:7a:b7:1c:d4:a2:40:75:55: c4:05:d7:bd:01:19:27:d4:ee:b5:6d:7f:b6:6b:15: e5:a9:aa:9a:e2:98:f8:18:87:a3:2e:b5:66:de:e3: 11:08:ec:6e:c4:33:bf:ca:15:1f:9b:08:03:cd:e9: fd:a8:66:01:8b:66:10:51:69:8f:63:77:cb:52:f2: 61:83:96:b9:56:0c:61:6d:56:7b:f4:69:bd:c9:4f: a2:b7:05:5d:e1:85:c4:7f:dd:53:67:a0:4c:49:8e: e0:4b:a0:1d:58:4c:95:49:35:5e:01:9d:e3:d3:a9: fd:0b:30:64:30:52:79:b5:c1:2f:ca:83:0d:06:3c: 46:23:b1:8f:7b:5b:54:0d:e2:02:67:8b:53:6e:48: 86:ac:4f:ac:c3:14:92:a6:5f:69:e3:8f:e9:13:3a: 60:cd:35:14:42:52:c7:6a:02:6c:44:78:ad:8c:24: 6c:2e:ae:ff:27:85:a6:94:56:fe:bb:56:b7:8f:a5: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.113.124.0/22 IPv6: 2402:bb40::/32 Signature Algorithm: sha256WithRSAEncryption 9a:85:67:5b:e2:34:37:81:d7:b3:6d:61:44:3f:5b:28:df:7d: d9:4d:6c:ed:07:7f:c2:c3:85:71:ba:8c:72:6f:41:80:94:ba: b5:b1:7e:96:e5:46:5b:40:7e:5b:97:89:72:c7:58:e3:ac:9e: 0b:46:eb:f7:4f:96:c1:d0:45:8d:86:79:92:bc:f8:0e:0e:a7: 7a:f7:36:4f:bc:53:24:a4:a4:60:56:ef:ad:63:18:6b:85:e6: 08:79:10:e0:59:69:03:c8:25:ad:db:b8:39:c1:a5:77:ef:43: 11:49:dd:d5:c4:f4:1a:8f:2f:1d:d4:d1:ce:0f:59:ec:93:c5: 47:bc:46:49:40:41:fe:b8:fb:a2:7e:fd:1c:15:cf:8e:99:6e: 55:d7:df:d5:22:46:22:bf:0a:6d:8e:2d:cd:b5:0f:95:d6:42: 49:b5:52:05:2d:c1:51:4e:cb:60:a7:fd:01:26:5c:12:54:3b: ce:b6:4d:e9:7d:75:ed:db:4b:c4:b5:c9:14:cd:0d:e5:12:99: 82:45:55:91:c7:ef:5d:41:f9:af:f8:c1:7e:d7:dd:85:31:ba: ca:37:e8:62:60:53:cc:df:ff:3a:67:f3:50:b6:e8:36:46:69: 57:3d:9c:d1:f5:a4:7e:97:ed:08:5d:ba:00:71:a9:4e:2c:fb: 73:d2:91:50 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUAVH2DbRF3xnSz9qhAYB0hb10wbcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzI1M1oX DTI3MDUwMjAwMzc1M1owMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQy MTM2NDk1MjYzQjBFNkE3NTlGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdYc7YA+P3QyKfWRfuW4xGwpzOJpmK4G72Dru2Q4L5OK6k881leuwuVVMUz FmNUa1uh5iU9qtHvNXwCYZftdfdBMnq3HNSiQHVVxAXXvQEZJ9TutW1/tmsV5amq muKY+BiHoy61Zt7jEQjsbsQzv8oVH5sIA83p/ahmAYtmEFFpj2N3y1LyYYOWuVYM YW1We/RpvclPorcFXeGFxH/dU2egTEmO4EugHVhMlUk1XgGd49Op/QswZDBSebXB L8qDDQY8RiOxj3tbVA3iAmeLU25IhqxPrMMUkqZfaeOP6RM6YM01FEJSx2oCbER4 rYwkbC6u/yeFppRW/rtWt4+lGaUCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDfMOhqMFvow0m0hNklSY7Dmp1n1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUwZDAwNzE4LTUyMTAtNDQzOC1iNjRkLTYyZWMxZjNlYmNkMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MGQwMDcx OC01MjEwLTQ0MzgtYjY0ZC02MmVjMWYzZWJjZDAvMC8zN0NDM0ExQThDMTZGQTMw RDI2RDIxMzY0OTUyNjNCMEU2QTc1OUY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3F8MA0EAgACMAcDBQAkArtAMA0GCSqGSIb3DQEBCwUAA4IBAQCahWdb4jQ3 gdezbWFEP1so333ZTWztB3/Cw4Vxuoxyb0GAlLq1sX6W5UZbQH5bl4lyx1jjrJ4L Ruv3T5bB0EWNhnmSvPgODqd69zZPvFMkpKRgVu+tYxhrheYIeRDgWWkDyCWt27g5 waV370MRSd3VxPQajy8d1NHOD1nsk8VHvEZJQEH+uPuifv0cFc+OmW5V19/VIkYi vwptji3NtQ+V1kJJtVIFLcFRTstgp/0BJlwSVDvOtk3pfXXt20vEtckUzQ3lEpmC RVWRx+9dQfmv+MF+192FMbrKN+hiYFPM3/86Z/NQtug2RmlXPZzR9aR+l+0IXboA calOLPtz0pFQ -----END CERTIFICATE-----Generated at Tue May 12 22:29:06 2026 by rpki-client