$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer File: 37F03E3124DF827AEC6F617458716798083055BC.cer (raw, json) Hash identifier: NJf1npR7zQrvG3P1SNpRUT4K9gBru2HF4/r9MqXYbnY= Subject key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0C1FC64BB3D54FB8AB85B7967F6E5A658B86B1C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:01:20 +0000 Certificate not after: Sun 02 May 2027 01:06:20 +0000 Subordinate resources: IP: 103.189.200.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1f:c6:4b:b3:d5:4f:b8:ab:85:b7:96:7f:6e:5a:65:8b:86:b1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:01:20 2026 GMT Not After : May 2 01:06:20 2027 GMT Subject: CN=37F03E3124DF827AEC6F617458716798083055BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:48:0b:ba:ca:17:66:3f:cc:d3:83:04:dc: 24:11:14:1d:23:a7:41:83:7f:46:47:57:88:bd:26: cc:f8:03:80:f0:06:90:84:2c:b6:17:b8:0c:86:27: a4:54:7e:d4:6a:59:32:4a:76:43:5d:77:0a:69:85: fc:29:14:86:b9:62:90:41:f0:00:36:d4:77:56:a4: 92:d9:73:3d:62:9e:f0:18:6f:1e:21:81:26:2e:2e: a4:8d:4c:25:97:4c:e6:3d:7c:3b:fa:ba:67:d0:03: cf:ab:71:47:fa:90:b2:c5:f9:38:13:a3:dd:11:43: 29:83:3a:13:d2:90:88:9a:05:a3:2f:37:5c:74:f7: aa:5d:d6:98:d1:09:98:2b:da:26:f2:e4:3c:18:97: ff:43:55:40:c6:13:b0:ef:1f:85:c3:18:3f:b6:26: cf:e1:a3:0c:1e:00:98:81:c3:dc:5f:02:64:18:85: f3:12:c2:da:d6:52:df:b0:34:cd:b4:82:d4:49:16: a0:fb:c7:a9:0f:6b:ae:82:a8:c4:43:8d:96:3b:a0: 74:81:3d:6a:82:0b:d9:3e:e1:43:c9:7d:de:0e:59: f0:55:a7:f8:58:6f:ec:32:b1:cc:50:99:26:12:fc: da:9b:88:6a:eb:bf:78:a1:b5:7f:18:d8:04:a8:af: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.200.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:ef:71:cb:f8:c7:27:5d:1a:73:31:de:23:10:8a:db:3a:db: d6:0b:d3:74:27:c6:e1:6f:b0:2c:be:67:1b:2f:a7:22:4b:b3: 1c:f9:7b:0d:10:ae:36:25:0e:b9:86:dd:14:ae:be:89:18:46: c8:b6:d8:6c:7a:f1:03:f8:66:f7:95:76:14:dd:40:4b:20:cf: c0:87:3d:ce:0a:9b:5c:b7:10:97:81:21:e2:fd:8b:01:da:18: 5c:5a:7f:f9:11:2a:7c:95:c2:0f:b2:3d:3a:a2:76:4b:00:3b: d4:8c:a4:86:66:1a:cf:1a:80:d2:05:52:37:c8:2b:9c:23:d5: 48:3f:d6:a9:0d:76:44:c8:79:8f:7b:d3:55:6b:cd:e1:c4:59: 42:18:9c:a4:76:1f:43:d6:17:3e:05:9d:94:30:66:67:eb:25: db:bb:12:f3:bb:5c:ab:68:43:98:62:0a:7b:f6:be:63:d0:81: 7b:94:31:e3:61:58:00:f2:d7:8b:59:e2:74:77:c2:29:a7:f0: eb:f3:94:42:98:a3:02:48:35:ec:4f:b6:b7:78:bd:70:15:51: a6:89:dd:80:71:9f:03:1b:b5:cd:53:6b:4c:63:ce:63:9b:04: 4f:c0:e8:2e:33:b8:f8:2b:7a:cd:d4:2c:8b:07:17:9f:28:79: b9:46:d1:29 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDB/GS7PVT7irhbeWf25aZYuGsccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDEyMFoX DTI3MDUwMjAxMDYyMFowMzExMC8GA1UEAxMoMzdGMDNFMzEyNERGODI3QUVDNkY2 MTc0NTg3MTY3OTgwODMwNTVCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBySAu6yhdmP8zTgwTcJBEUHSOnQYN/RkdXiL0mzPgDgPAGkIQsthe4DIYn pFR+1GpZMkp2Q113CmmF/CkUhrlikEHwADbUd1akktlzPWKe8BhvHiGBJi4upI1M JZdM5j18O/q6Z9ADz6txR/qQssX5OBOj3RFDKYM6E9KQiJoFoy83XHT3ql3WmNEJ mCvaJvLkPBiX/0NVQMYTsO8fhcMYP7Ymz+GjDB4AmIHD3F8CZBiF8xLC2tZS37A0 zbSC1EkWoPvHqQ9rroKoxEONljugdIE9aoIL2T7hQ8l93g5Z8FWn+Fhv7DKxzFCZ JhL82puIauu/eKG1fxjYBKivEfMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDfwPjEk34J67G9hdFhxZ5gIMFW8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdhMmU1ZjAzLWJmOTYtNGI0MC1iZDRhLTZlMzg4OGM0MDIwNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YTJlNWYw My1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC8zN0YwM0UzMTI0REY4MjdB RUM2RjYxNzQ1ODcxNjc5ODA4MzA1NUJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ73IMA0GCSqGSIb3DQEBCwUAA4IBAQBs73HL+McnXRpzMd4jEIrbOtvWC9N0 J8bhb7AsvmcbL6ciS7Mc+XsNEK42JQ65ht0Urr6JGEbItthsevED+Gb3lXYU3UBL IM/Ahz3OCptctxCXgSHi/YsB2hhcWn/5ESp8lcIPsj06onZLADvUjKSGZhrPGoDS BVI3yCucI9VIP9apDXZEyHmPe9NVa83hxFlCGJykdh9D1hc+BZ2UMGZn6yXbuxLz u1yraEOYYgp79r5j0IF7lDHjYVgA8teLWeJ0d8Ipp/Dr85RCmKMCSDXsT7a3eL1w FVGmid2AcZ8DG7XNU2tMY85jmwRPwOguM7j4K3rN1CyLBxefKHm5RtEp -----END CERTIFICATE-----Generated at Tue May 5 14:19:35 2026 by rpki-client