$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer (raw, json) Hash identifier: GYzljI8WPEfvxZsGUlXRKcoZ3GdiQTS+gmWNuIwLAss= Subject key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0B2B45895B579ED8E94B9A2C160623BEAF6EF79A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:04 +0000 Certificate not after: Sun 02 May 2027 00:27:04 +0000 Subordinate resources: IP: 103.197.92.0/22 IP: 2403:80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2b:45:89:5b:57:9e:d8:e9:4b:9a:2c:16:06:23:be:af:6e:f7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:04 2026 GMT Not After : May 2 00:27:04 2027 GMT Subject: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:4e:ce:7f:9e:f4:98:21:5c:b0:84:60:99: 8e:37:fc:1b:74:41:28:a4:9b:22:14:da:ea:58:70: 96:10:dd:8c:29:e9:8d:5c:e7:51:31:a4:e3:aa:9d: 1b:05:e7:3e:67:05:3c:0e:c7:d3:23:d7:55:95:e7: d6:87:2b:e3:da:96:e6:4d:71:14:ea:7d:ed:8b:f6: 62:cd:31:e9:3c:e9:89:e3:4a:e9:52:63:b3:bb:96: 41:01:1a:9f:ea:0a:e2:1f:ae:1d:53:fa:ab:39:95: 44:ec:e4:e5:8b:21:38:69:42:f4:54:39:7e:74:32: 42:14:bf:4d:8d:5f:a5:c4:54:78:35:ba:fe:c2:77: f0:d9:a3:58:33:e5:22:c2:5b:dc:2b:3c:4f:d8:ff: eb:2f:64:2d:05:6f:c9:a5:9f:87:a9:ca:42:1a:e6: 26:70:57:e5:0d:3b:b6:9b:18:09:14:c1:99:6d:43: f0:77:4d:00:c6:16:32:15:0e:10:46:43:c6:59:0a: eb:7f:70:b1:42:50:d9:ee:55:fb:49:4c:b4:18:0d: 33:e8:d1:2e:2d:fa:61:d8:14:a3:77:b7:b4:f7:da: 9d:f8:57:a0:db:09:cf:73:6e:cf:cb:9c:7a:6c:12: c5:22:f4:4d:cc:70:fb:34:f2:24:57:1d:61:66:84: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.92.0/22 IPv6: 2403:80::/32 Signature Algorithm: sha256WithRSAEncryption 5b:4c:53:04:2f:33:b6:52:e9:95:7f:10:9b:ca:62:c6:dc:40: 33:59:70:f0:d6:3b:e5:d2:38:4e:82:df:5d:9a:f8:33:85:21: f5:83:92:f1:30:43:96:0d:a8:fe:c2:41:5b:bf:37:7b:14:88: 69:b0:27:f1:ec:81:fb:c8:74:f5:6a:9e:ca:ec:9f:95:c5:90: ad:c6:e7:ff:1b:a8:ec:cb:77:2d:b5:68:43:71:44:72:5b:86: 1e:79:74:12:03:97:45:ea:8d:38:f1:13:2a:a1:60:e3:f4:7b: d0:a4:f2:02:16:79:3f:cb:44:d6:58:fd:73:5a:e2:4a:b8:df: 09:c5:70:8b:85:3c:d9:12:ba:53:dd:97:eb:7b:14:80:4f:c3: cb:a3:15:5d:c4:e9:a9:0c:da:12:d5:5d:54:1b:39:20:1d:d5: 8f:e9:4a:6b:57:2b:a2:70:5a:8e:12:84:05:85:77:20:9c:29: 3c:5b:e5:58:40:04:d5:a5:e7:38:60:74:43:83:9d:e7:fa:80: 73:a4:1e:e1:f9:8e:d8:aa:6c:7f:56:c6:c3:a3:d9:20:85:4d: fa:9c:6b:c8:2f:c6:17:be:2d:8f:50:c8:c8:34:4d:46:04:ee: b8:e2:6a:d7:72:c4:ec:2d:ed:86:f1:b7:85:5a:23:b8:97:e5: a2:a9:91:dd -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUCytFiVtXntjpS5osFgYjvq9u95owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjIwNFoX DTI3MDUwMjAwMjcwNFowMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUy MzZDQUMzMUI1QkNDOTY5ODgwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJNWTs5/nvSYIVywhGCZjjf8G3RBKKSbIhTa6lhwlhDdjCnpjVznUTGk46qd GwXnPmcFPA7H0yPXVZXn1ocr49qW5k1xFOp97Yv2Ys0x6TzpieNK6VJjs7uWQQEa n+oK4h+uHVP6qzmVROzk5YshOGlC9FQ5fnQyQhS/TY1fpcRUeDW6/sJ38NmjWDPl IsJb3Cs8T9j/6y9kLQVvyaWfh6nKQhrmJnBX5Q07tpsYCRTBmW1D8HdNAMYWMhUO EEZDxlkK639wsUJQ2e5V+0lMtBgNM+jRLi36YdgUo3e3tPfanfhXoNsJz3Nuz8uc emwSxSL0Tcxw+zTyJFcdYWaEbM0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDfN8elL2uwTnMUjbKwxtbzJaYgBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNlZDEwMGRmLTA0NDEtNDM4MS1hM2ZhLTU4N2RiOWU5YzJmMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZWQxMDBk Zi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8zN0NERjFFOTRCREFFQzEz OUNDNTIzNkNBQzMxQjVCQ0M5Njk4ODAxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ8VcMA0EAgACMAcDBQAkAwCAMA0GCSqGSIb3DQEBCwUAA4IBAQBbTFMELzO2 UumVfxCbymLG3EAzWXDw1jvl0jhOgt9dmvgzhSH1g5LxMEOWDaj+wkFbvzd7FIhp sCfx7IH7yHT1ap7K7J+VxZCtxuf/G6jsy3cttWhDcURyW4YeeXQSA5dF6o048RMq oWDj9HvQpPICFnk/y0TWWP1zWuJKuN8JxXCLhTzZErpT3ZfrexSAT8PLoxVdxOmp DNoS1V1UGzkgHdWP6UprVyuicFqOEoQFhXcgnCk8W+VYQATVpec4YHRDg53n+oBz pB7h+Y7Yqmx/VsbDo9kghU36nGvIL8YXvi2PUMjINE1GBO644mrXcsTsLe2G8beF WiO4l+WiqZHd -----END CERTIFICATE-----Generated at Tue May 12 22:45:50 2026 by rpki-client