This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer File: 065943D1744CF4841A6D3D50944D2A4DB537A128.cer (raw, json) Hash identifier: Nc8uZdJ7ogRMVp8tsQoLIH19BoGv6Zgd4S5V/F8coM8= Subject key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7F5227C559132F68F3D005A580A80266B694B8BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft caRepository: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 22 Dec 2025 18:35:56 +0000 Certificate not after: Mon 21 Dec 2026 18:40:56 +0000 Subordinate resources: IP: 157.15.77.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 10:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:52:27:c5:59:13:2f:68:f3:d0:05:a5:80:a8:02:66:b6:94:b8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 22 18:35:56 2025 GMT Not After : Dec 21 18:40:56 2026 GMT Subject: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:00:03:2e:c8:b4:2b:07:69:63:4b:02:cf: 68:09:bc:59:1e:6b:57:78:5e:c2:0d:52:f5:8a:ee: d8:e9:45:94:73:68:42:f8:ca:15:be:af:3c:1a:ff: 39:60:de:f3:3f:ea:1d:cd:d7:46:80:e5:70:03:9d: 65:ca:10:77:10:a8:ec:a1:ac:29:2f:f9:80:9a:93: 34:f6:eb:c3:45:e8:38:48:53:e4:9a:ec:dc:8d:94: 5e:6b:41:91:69:ac:31:1a:0f:b9:28:64:42:b6:3f: 65:a8:8b:36:ee:f1:18:9a:13:ad:5e:70:20:01:6e: 9f:6e:a6:5b:ac:ce:3b:b5:9e:a7:e4:9d:3f:d2:65: 37:b6:a7:e6:c6:63:0c:b8:e1:27:a0:74:e7:23:e5: 79:67:d9:01:be:04:c0:d7:a1:eb:9d:59:e8:9d:9b: 9c:ed:c5:4a:d9:ba:bf:65:8a:e4:c4:81:04:f7:45: f3:95:28:47:96:f6:03:18:a5:0e:8c:98:38:a7:87: 22:c4:98:3c:1a:ff:a4:c1:41:d2:41:9e:4a:de:d5: d8:bb:a6:9b:d4:68:38:a6:29:d3:21:c8:aa:ab:ac: f5:71:62:dc:97:77:e6:d5:ce:c3:a7:b0:95:74:5c: fc:b5:1f:61:4f:ba:d0:4c:0b:ac:9c:80:85:9d:97: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.77.0/24 Signature Algorithm: sha256WithRSAEncryption 72:1a:48:8c:9f:12:61:b5:98:1d:d6:62:13:88:aa:b9:a5:8b: a0:26:61:0c:09:66:77:10:19:4a:75:95:54:c1:0f:5a:f7:2e: 61:74:55:1e:9a:a0:0d:a3:5c:ed:af:29:12:3b:65:5a:1e:4f: 6b:f9:6a:35:db:cf:be:34:98:f7:b1:c9:64:6d:ad:f7:69:64: 22:50:9f:4b:4e:73:1d:74:ea:8a:21:5b:30:1f:5d:e2:b4:cc: c5:87:d8:ba:65:93:f7:04:d3:1a:dc:ea:6a:8b:2c:d3:41:d0: f0:f8:ad:64:11:fc:fa:1d:4f:01:e8:dd:85:13:26:d2:a5:50: 5b:5c:a4:cb:eb:41:15:5f:90:d0:9c:44:67:97:90:b8:52:8d: c2:56:45:d2:18:8f:34:ad:d8:a1:b7:9a:f4:52:bf:2b:4e:65: a0:25:b9:b3:d7:dd:70:06:31:23:ed:1c:7f:cb:bb:22:33:3f: 54:9c:a4:9e:7d:11:27:a1:1e:0b:92:d1:e5:71:c3:5e:b5:d3: 72:b4:d1:75:a3:91:5b:38:2e:13:11:9a:bc:3a:8e:03:af:8a: 92:c5:36:43:f2:ae:a6:ef:78:60:13:c0:c0:bc:13:6a:99:98: 45:54:55:61:be:79:45:1e:2c:fc:8e:20:8c:e5:b3:d4:93:42: 0e:e7:3c:b8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUf1InxVkTL2jz0AWlgKgCZraUuL8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIyMjE4MzU1NloX DTI2MTIyMTE4NDA1NlowMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQz RDUwOTQ0RDJBNERCNTM3QTEyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7xAAMuyLQrB2ljSwLPaAm8WR5rV3hewg1S9Yru2OlFlHNoQvjKFb6vPBr/ OWDe8z/qHc3XRoDlcAOdZcoQdxCo7KGsKS/5gJqTNPbrw0XoOEhT5Jrs3I2UXmtB kWmsMRoPuShkQrY/ZaiLNu7xGJoTrV5wIAFun26mW6zOO7Wep+SdP9JlN7an5sZj DLjhJ6B05yPleWfZAb4EwNeh651Z6J2bnO3FStm6v2WK5MSBBPdF85UoR5b2Axil DoyYOKeHIsSYPBr/pMFB0kGeSt7V2Lumm9RoOKYp0yHIqqus9XFi3Jd35tXOw6ew lXRc/LUfYU+60EwLrJyAhZ2X/DkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAZZQ9F0TPSEGm09UJRNKk21N6EoMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1N2UxMWRj LWZmNzEtNGVkNy1hNjk1LTgzNDkyMmUwZTM2MS8wLzA2NTk0M0QxNzQ0Q0Y0ODQx QTZEM0Q1MDk0NEQyQTREQjUzN0ExMjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdD00wDQYJKoZIhvcNAQELBQADggEBAHIaSIyfEmG1mB3WYhOIqrmli6AmYQwJ ZncQGUp1lVTBD1r3LmF0VR6aoA2jXO2vKRI7ZVoeT2v5ajXbz740mPexyWRtrfdp ZCJQn0tOcx106oohWzAfXeK0zMWH2Lplk/cE0xrc6mqLLNNB0PD4rWQR/PodTwHo 3YUTJtKlUFtcpMvrQRVfkNCcRGeXkLhSjcJWRdIYjzSt2KG3mvRSvytOZaAlubPX 3XAGMSPtHH/LuyIzP1ScpJ59ESehHguS0eVxw16103K00XWjkVs4LhMRmrw6jgOv ipLFNkPyrqbveGATwMC8E2qZmEVUVWG+eUUeLPyOIIzls9STQg7nPLg= -----END CERTIFICATE-----Generated at Wed Dec 31 07:42:48 2025 by rpki-client