$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer (raw, json) Hash identifier: eO2RpWjSzwRbdzg7WrssUFP1gtbwYWM38jItfo9rHjY= Subject key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A43F2C7360CCBC9ED85B44CEBAB8B836E91D29C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:51 +0000 Certificate not after: Sun 02 May 2027 02:05:51 +0000 Subordinate resources: IP: 45.123.142.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:43:f2:c7:36:0c:cb:c9:ed:85:b4:4c:eb:ab:8b:83:6e:91:d2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:51 2026 GMT Not After : May 2 02:05:51 2027 GMT Subject: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:42:11:ab:0c:9a:6b:5c:2e:0b:16:7e:2c: 21:25:e2:59:03:13:5f:30:30:5c:a5:76:22:ee:83: c8:fc:36:62:ad:8a:d5:d7:43:ed:86:e1:35:fc:b2: ef:00:49:e4:d1:5c:e2:ed:be:51:11:7d:8e:31:d3: ef:93:75:58:3a:68:51:a0:95:8c:fb:7b:1a:cf:cd: d3:f9:47:de:9a:bd:23:4b:4e:1f:fc:c2:53:ef:23: e4:16:cf:8f:5d:0b:d6:71:7f:28:6d:3d:f7:a9:c8: 4d:d7:a8:59:b1:a6:b3:c4:da:ad:c6:c5:0d:ad:b1: 56:6d:b7:eb:db:f6:1b:fd:d1:05:f0:06:e7:a9:d3: cf:ba:76:37:08:51:b3:6c:4b:aa:1d:d3:6a:88:0d: 04:19:52:39:e6:25:ff:06:ce:54:cf:38:e1:4d:32: 6c:0e:8d:49:54:08:da:c0:91:c4:f3:64:bc:26:cd: 48:4d:b7:3f:4b:dd:c2:3b:40:8b:eb:f1:5a:49:01: 9d:24:c5:b1:0e:b5:44:a3:a4:b4:f2:bd:d9:b1:54: 8e:8e:02:6d:c9:fc:55:1d:d4:91:78:6a:2f:2b:52: ab:75:94:42:4c:ae:7c:c8:59:7f:f6:91:6b:92:1f: 47:6b:35:ab:ac:57:90:98:0d:c3:c0:fb:05:59:35: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.142.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:db:21:0f:2e:48:b7:5a:03:3f:3d:7d:a2:16:b1:65:1e:25: 4e:1c:96:40:fe:de:77:51:1f:9a:21:f5:ea:3e:de:bc:52:0d: 66:94:05:31:d5:57:12:30:56:f1:19:0d:f9:9a:b8:76:f5:3a: a0:58:ad:e8:a7:c0:9f:ca:b3:83:2d:9b:37:87:42:2c:8d:50: 5f:ad:94:b5:fb:a8:d6:47:a8:df:10:e2:38:33:b9:6d:87:77: e7:d0:c7:1c:8d:0d:56:58:33:3f:87:05:d0:21:71:20:22:84: 18:92:8d:6e:30:eb:ad:5f:b2:3e:39:34:d7:fb:76:9a:1b:9a: 50:02:f6:17:03:b8:af:8b:8c:2f:d3:87:11:83:9e:2b:0c:89: 40:50:3f:1d:80:c0:58:f2:90:86:af:fa:39:b2:ab:9f:c3:c0: 85:d1:40:d0:fc:90:7c:e2:e4:81:8f:02:16:ef:a3:71:de:84: 7f:82:e7:ac:ad:2f:9c:1d:b7:ac:ee:0f:34:1c:c9:b3:4f:af: d7:9e:6f:68:83:25:f7:ee:5e:8b:34:5a:db:c2:9e:2e:ca:c8: 6a:25:e1:d9:3a:b7:f9:65:bc:9f:2c:4e:04:4c:e5:6e:b0:2d: 8a:28:c7:7a:69:15:35:4c:4e:4c:78:21:6a:14:4f:fe:ab:87: 8b:50:68:50 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCkPyxzYMy8nthbRM66uLg26R0pwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDA1MVoX DTI3MDUwMjAyMDU1MVowMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUy QTYyRUQ3NjQ5QTNEMEU5M0Y0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrzQhGrDJprXC4LFn4sISXiWQMTXzAwXKV2Iu6DyPw2Yq2K1ddD7YbhNfyy 7wBJ5NFc4u2+URF9jjHT75N1WDpoUaCVjPt7Gs/N0/lH3pq9I0tOH/zCU+8j5BbP j10L1nF/KG0996nITdeoWbGms8TarcbFDa2xVm2369v2G/3RBfAG56nTz7p2NwhR s2xLqh3TaogNBBlSOeYl/wbOVM844U0ybA6NSVQI2sCRxPNkvCbNSE23P0vdwjtA i+vxWkkBnSTFsQ61RKOktPK92bFUjo4Cbcn8VR3UkXhqLytSq3WUQkyufMhZf/aR a5IfR2s1q6xXkJgNw8D7BVk1EYMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDt21Zo/Fo9hEOUqYu12SaPQ6T9AMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q3NGExNTI3LTVjOGUtNGJkMy1hMWM3LTlkMWVkMmQyM2UxNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNzRhMTUy Ny01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC8zQjc2RDU5QTNGMTY4RjYx MTBFNTJBNjJFRDc2NDlBM0QwRTkzRjQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALXuOMA0GCSqGSIb3DQEBCwUAA4IBAQB92yEPLki3WgM/PX2iFrFlHiVOHJZA /t53UR+aIfXqPt68Ug1mlAUx1VcSMFbxGQ35mrh29TqgWK3op8CfyrODLZs3h0Is jVBfrZS1+6jWR6jfEOI4M7lth3fn0MccjQ1WWDM/hwXQIXEgIoQYko1uMOutX7I+ OTTX+3aaG5pQAvYXA7ivi4wv04cRg54rDIlAUD8dgMBY8pCGr/o5squfw8CF0UDQ /JB84uSBjwIW76Nx3oR/guesrS+cHbes7g80HMmzT6/Xnm9ogyX37l6LNFrbwp4u yshqJeHZOrf5ZbyfLE4ETOVusC2KKMd6aRU1TE5MeCFqFE/+q4eLUGhQ -----END CERTIFICATE-----Generated at Tue May 12 22:16:32 2026 by rpki-client