$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer File: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer (raw, json) Hash identifier: WiqWc91eA+Z7RcDr/cKlmAUEg0mdIQXftnvTCVQwdOU= Subject key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2D04402EE526DFE8507C4DB070F53A25BAFAC713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:54 +0000 Certificate not after: Sun 02 May 2027 00:27:54 +0000 Subordinate resources: IP: 103.148.76.0/23 IP: 2001:df2:c280::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 06:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:04:40:2e:e5:26:df:e8:50:7c:4d:b0:70:f5:3a:25:ba:fa:c7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:54 2026 GMT Not After : May 2 00:27:54 2027 GMT Subject: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:bf:e1:06:9f:45:4e:96:d2:61:c5:28:da: 91:a3:bd:f4:86:8d:46:e5:ba:2e:fe:ab:c8:af:e0: 66:30:0d:34:88:29:94:f5:db:66:b4:93:d7:68:75: c2:cc:d9:11:6d:10:68:fc:f0:e1:67:d7:28:9f:fa: 40:42:b8:5d:49:01:56:9e:0a:59:ee:ea:44:f4:0e: 23:0a:f7:e1:ea:44:5f:13:03:de:d7:0a:9a:59:2f: dd:47:68:21:80:ea:c3:37:54:1e:7e:08:99:d9:11: 06:ee:80:de:dd:1c:1c:dd:43:62:56:04:b8:8e:a6: 08:6d:8e:a8:f7:6d:a9:ea:6e:f4:55:10:74:d4:47: 43:7a:96:c9:58:e8:3e:b2:c3:1e:02:19:89:91:28: fa:5c:91:88:27:16:7d:5d:2f:db:71:47:3d:41:ac: 81:f2:48:1f:fa:ff:0d:52:19:d0:cc:00:03:27:84: 28:f7:2d:91:a9:ed:fd:f7:dd:2d:69:c9:3c:3c:f3: 29:db:2e:03:56:df:ca:e5:e0:fb:83:2c:b3:1a:9d: 5b:93:c1:10:86:55:b4:78:c0:07:68:03:1d:82:ad: f1:7e:63:d5:1a:ce:0e:d1:d4:c8:a3:78:c6:8d:54: 18:66:67:f8:cf:80:d6:19:ef:31:01:1a:06:16:b4: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.76.0/23 IPv6: 2001:df2:c280::/48 Signature Algorithm: sha256WithRSAEncryption 75:d3:56:9d:65:5a:61:d7:9d:ca:82:c6:0e:ec:67:28:45:7e: 0f:b1:9e:f9:c5:1f:e8:22:86:31:8c:10:30:6f:0e:28:7c:15: b9:78:1d:eb:4d:1d:59:5f:61:e6:87:aa:b1:7e:b9:46:1e:66: 3e:a1:fc:4c:ea:92:37:e5:60:03:4e:18:7a:58:81:7b:54:2d: 97:93:0c:35:d6:47:cc:c4:dd:11:b0:2c:c1:58:ef:fd:02:39: 79:0e:87:46:9a:7f:5d:04:5e:71:3f:cc:ef:88:a4:dd:52:96: a1:7c:ee:71:a2:6f:56:7c:11:98:00:24:cf:82:30:45:15:ea: c8:ec:25:a0:0e:aa:ed:dd:0f:4c:e6:50:d4:76:18:f5:b3:30: c2:66:c5:77:07:d6:27:37:af:e0:c0:6f:e8:16:7e:dc:36:32: 63:4c:f5:06:75:f7:d9:94:d5:ac:4a:84:b3:ec:48:59:a6:ab: 68:c5:7b:9b:1b:1d:98:89:ff:4a:9d:cd:31:a8:3e:88:d4:47: 33:f5:28:d3:0e:fb:30:4c:24:9d:fc:30:61:87:b9:06:54:83: 27:90:89:25:01:4f:ff:ad:f7:22:91:01:1d:f8:ef:a3:39:14: e5:50:e4:c7:27:94:d3:49:50:8b:ac:c3:a0:7a:53:4c:27:73: ac:16:3d:99 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIULQRALuUm3+hQfE2wcPU6Jbr6xxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjI1NFoX DTI3MDUwMjAwMjc1NFowMzExMC8GA1UEAxMoMzc2MDZFOTlDNTlFNzEwN0Q1QUNG QTdFOERFM0ZDREZFMEZGQTY1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANs/v+EGn0VOltJhxSjakaO99IaNRuW6Lv6ryK/gZjANNIgplPXbZrST12h1 wszZEW0QaPzw4WfXKJ/6QEK4XUkBVp4KWe7qRPQOIwr34epEXxMD3tcKmlkv3Udo IYDqwzdUHn4ImdkRBu6A3t0cHN1DYlYEuI6mCG2OqPdtqepu9FUQdNRHQ3qWyVjo PrLDHgIZiZEo+lyRiCcWfV0v23FHPUGsgfJIH/r/DVIZ0MwAAyeEKPctkant/ffd LWnJPDzzKdsuA1bfyuXg+4MssxqdW5PBEIZVtHjAB2gDHYKt8X5j1RrODtHUyKN4 xo1UGGZn+M+A1hnvMQEaBha0UPECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDdgbpnFnnEH1az6fo3j/N/g/6ZXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQwMzE3NDZlLWIwZjYtNDgyNy04YzRlLWI4MTkyZGVjYzM5YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MDMxNzQ2 ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC8zNzYwNkU5OUM1OUU3MTA3 RDVBQ0ZBN0U4REUzRkNERkUwRkZBNjU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5RMMA8EAgACMAkDBwAgAQ3ywoAwDQYJKoZIhvcNAQELBQADggEBAHXTVp1l WmHXncqCxg7sZyhFfg+xnvnFH+gihjGMEDBvDih8Fbl4HetNHVlfYeaHqrF+uUYe Zj6h/EzqkjflYANOGHpYgXtULZeTDDXWR8zE3RGwLMFY7/0COXkOh0aaf10EXnE/ zO+IpN1SlqF87nGib1Z8EZgAJM+CMEUV6sjsJaAOqu3dD0zmUNR2GPWzMMJmxXcH 1ic3r+DAb+gWftw2MmNM9QZ199mU1axKhLPsSFmmq2jFe5sbHZiJ/0qdzTGoPojU RzP1KNMO+zBMJJ38MGGHuQZUgyeQiSUBT/+t9yKRAR3476M5FOVQ5McnlNNJUIus w6B6U0wnc6wWPZk= -----END CERTIFICATE-----Generated at Thu May 7 06:52:44 2026 by rpki-client