$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer File: 37A94886A0E275DC8F922930328C955CC4307FF1.cer (raw, json) Hash identifier: UWqXP3hjrjQZze/0NSs/zpRz/QvAs178q3r0np0wkBg= Subject key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C752F7B27BFC379A655DA2BDE5B4EC24DA6960A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft caRepository: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 01 Feb 2026 06:56:29 +0000 Certificate not after: Sun 31 Jan 2027 07:01:29 +0000 Subordinate resources: IP: 36.50.253.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:75:2f:7b:27:bf:c3:79:a6:55:da:2b:de:5b:4e:c2:4d:a6:96:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 1 06:56:29 2026 GMT Not After : Jan 31 07:01:29 2027 GMT Subject: CN=37A94886A0E275DC8F922930328C955CC4307FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:be:9b:33:12:6e:da:5c:5b:de:fc:de:29: 19:86:21:4b:2f:2c:d8:6b:c8:a0:e8:c4:96:49:f7: 61:24:ee:5c:91:e9:20:fe:18:92:06:a2:4a:f4:f6: 0a:a8:b4:e3:86:1d:37:46:ef:7e:7d:3b:8f:e5:6f: 61:be:03:e0:9d:c4:f6:7c:7f:48:31:37:0b:bc:5e: ac:1f:24:fa:cc:14:98:34:c9:0e:b1:4f:10:19:7f: 99:1b:18:13:70:33:0c:27:a1:de:76:0e:ef:3d:e1: fa:06:b3:12:1f:37:9a:42:a9:30:27:5a:0e:d9:b0: f3:d4:c5:3f:1a:59:b4:8b:08:0e:0e:23:bd:ec:90: f2:8d:36:2c:b0:53:9a:18:04:84:c8:87:f7:15:b4: 07:2a:58:da:11:a9:3f:8d:f1:ba:1a:30:b3:87:bc: 5d:a4:2d:1e:c0:99:4c:09:c9:bb:ef:b7:be:9e:16: 3d:5b:34:01:bb:86:09:11:3c:0c:85:b5:75:94:d4: 0b:57:c5:06:7b:a4:dc:a7:20:10:45:5a:30:47:51: 1e:53:c4:de:d8:59:31:a5:e6:ab:31:af:fa:0e:d5: 15:41:8d:da:a6:ee:e0:a2:7a:1f:41:43:94:bc:80: 62:cd:63:c3:b0:07:fd:be:21:6a:72:71:2a:02:7e: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:f3:64:04:2b:96:ba:67:48:8c:0d:07:dd:da:c3:c1:65:e1: b9:5a:dd:44:56:a8:f6:28:c5:e6:d3:75:47:68:68:57:5e:75: cd:30:87:a3:66:b4:1d:68:36:2e:0a:ba:f4:6b:3a:be:b6:b2: 7a:6e:de:cf:88:4c:2d:25:33:ce:27:8a:1e:4c:89:f1:86:85: 3a:08:1e:bd:cc:a9:fa:b7:ab:a5:2d:bc:0d:1c:3d:fe:5e:0e: 1a:2f:f7:a2:ef:06:8c:4a:69:9d:ad:db:5f:36:03:ab:ea:98: 2b:c0:90:5d:04:45:ac:96:d6:dd:7a:a6:3b:27:55:06:32:08: d2:6f:3d:b5:6a:d5:59:c0:50:51:cb:62:14:35:9e:63:8a:d1: 36:a9:22:70:cb:3b:9d:e2:fe:ee:f4:15:61:7e:a5:c2:b0:60: a8:3a:32:ff:fe:f5:2f:80:c0:4a:dc:49:b6:7f:6a:da:ed:de: 02:47:1b:5c:4e:d8:0c:ea:86:4b:e8:38:de:3a:67:b1:11:b5: d6:21:cc:eb:14:f9:5f:8d:9d:ff:02:df:2c:05:47:79:79:cb: 60:39:e1:3e:86:c6:42:3c:8c:0b:16:b1:be:d1:3f:93:14:7e: f9:e5:b1:a8:84:91:5f:33:e8:42:61:f8:5c:ed:d4:0d:5f:ef: 83:66:8c:29 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfHUveye/w3mmVdor3ltOwk2mlgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwMTA2NTYyOVoX DTI3MDEzMTA3MDEyOVowMzExMC8GA1UEAxMoMzdBOTQ4ODZBMEUyNzVEQzhGOTIy OTMwMzI4Qzk1NUNDNDMwN0ZGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3WvpszEm7aXFve/N4pGYYhSy8s2GvIoOjElkn3YSTuXJHpIP4YkgaiSvT2 Cqi044YdN0bvfn07j+VvYb4D4J3E9nx/SDE3C7xerB8k+swUmDTJDrFPEBl/mRsY E3AzDCeh3nYO7z3h+gazEh83mkKpMCdaDtmw89TFPxpZtIsIDg4jveyQ8o02LLBT mhgEhMiH9xW0BypY2hGpP43xuhows4e8XaQtHsCZTAnJu++3vp4WPVs0AbuGCRE8 DIW1dZTUC1fFBnuk3KcgEEVaMEdRHlPE3thZMaXmqzGv+g7VFUGN2qbu4KJ6H0FD lLyAYs1jw7AH/b4hanJxKgJ+spsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDepSIag4nXcj5IpMDKMlVzEMH/xMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTZmZWFh LTZiNGYtNDdjZi05ZTNjLTAwYWVhYzY3YTMyYS8xLzM3QTk0ODg2QTBFMjc1REM4 RjkyMjkzMDMyOEM5NTVDQzQzMDdGRjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAkMv0wDQYJKoZIhvcNAQELBQADggEBAD/zZAQrlrpnSIwNB93aw8Fl4bla3URW qPYoxebTdUdoaFdedc0wh6NmtB1oNi4KuvRrOr62snpu3s+ITC0lM84nih5MifGG hToIHr3Mqfq3q6UtvA0cPf5eDhov96LvBoxKaZ2t2182A6vqmCvAkF0ERayW1t16 pjsnVQYyCNJvPbVq1VnAUFHLYhQ1nmOK0TapInDLO53i/u70FWF+pcKwYKg6Mv/+ 9S+AwErcSbZ/atrt3gJHG1xO2AzqhkvoON46Z7ERtdYhzOsU+V+Nnf8C3ywFR3l5 y2A54T6GxkI8jAsWsb7RP5MUfvnlsaiEkV8z6EJh+Fzt1A1f74NmjCk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:46:51 2026 by rpki-client