This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.cer (raw, json) Hash identifier: GY+XWOypryG/WDkAU+pXMN40VR473YEVsBFpxz3AGxQ= Subject key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 547E4FB9FEE75D7CDF3CEDDE96E071E144A29713 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft caRepository: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 20 Dec 2025 05:22:22 +0000 Certificate not after: Sat 19 Dec 2026 05:27:22 +0000 Subordinate resources: IP: 157.15.46.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7e:4f:b9:fe:e7:5d:7c:df:3c:ed:de:96:e0:71:e1:44:a2:97:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 20 05:22:22 2025 GMT Not After : Dec 19 05:27:22 2026 GMT Subject: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ea:d5:ba:c8:eb:dd:49:9f:ac:bb:ca:37:78: 04:1f:e3:fb:f6:d9:d1:d2:75:2e:03:d4:3b:7c:31: 3b:5f:96:9b:d4:3e:a6:17:6f:f3:0f:40:7d:85:11: 17:75:dd:36:e5:58:bb:2c:1a:b6:1c:92:bb:ad:66: a8:95:65:bf:ae:19:24:75:e5:0e:0b:1f:85:d3:5a: 6a:fd:e9:86:df:06:0e:f2:67:e3:08:ff:30:c9:eb: 2d:69:b6:58:54:ba:b8:88:ed:df:22:b7:86:08:c0: a6:3a:a6:82:30:f3:10:12:4c:0a:9e:b0:b2:2a:c2: 0e:63:81:12:92:fc:a8:d4:ac:fe:bc:5f:3c:f4:79: 9e:32:de:96:70:2c:50:60:e2:09:1a:60:dd:93:81: 10:c5:72:6b:23:0d:ce:54:0f:3d:10:14:d0:f2:28: 32:38:6d:94:fd:ae:ef:86:e8:e8:3c:85:d1:ea:f5: d9:05:83:cb:76:34:4b:89:0e:3d:62:bb:47:d3:2d: 02:b7:ac:ff:63:4d:d6:0e:c1:69:de:c6:8c:1a:57: 39:86:77:02:f7:87:65:7a:47:21:38:e8:0e:35:65: 56:5d:89:2b:d8:32:63:b7:f0:5e:89:da:83:77:81: 4e:1a:09:3f:10:db:20:13:cf:12:af:6e:7f:b9:6e: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.46.0/23 Signature Algorithm: sha256WithRSAEncryption 74:a2:bd:00:b7:bf:ed:3d:7f:5c:04:e4:11:40:07:34:d5:53: d3:9c:24:af:4f:a4:1f:5e:ee:2e:79:4f:d4:a5:ec:3e:23:9e: a6:be:1a:52:ce:42:00:a1:cc:d0:cb:f8:29:d4:39:69:3d:3d: 2a:7f:22:b3:ad:dd:89:a7:5a:c6:4c:25:47:b4:b2:c3:cc:e0: 14:c9:0a:82:ff:1f:ae:e9:4a:4b:da:cd:8f:1e:65:4a:1f:4d: a7:9b:64:0f:f8:ef:40:b9:9d:be:a4:57:e8:d4:74:ee:cc:28: ed:74:b4:96:89:c1:bf:06:94:66:36:2e:a9:88:23:6c:26:de: 85:9c:79:5e:ef:f5:d0:99:ee:30:a0:ec:25:ad:2b:f7:8f:b5: 2f:06:e3:1a:71:fe:33:69:1b:3c:fa:42:cf:b8:63:f1:8a:8a: 04:e4:00:a9:8b:72:4a:95:77:cf:2c:61:b1:dc:e1:81:51:46: f4:dc:a3:73:11:26:d3:72:85:f0:34:51:e6:19:7f:19:d3:77: cd:0f:60:d1:7f:21:dc:f3:9e:e7:71:3f:45:df:d4:c7:12:bb: 52:bf:fc:4d:ad:60:21:73:1a:d9:0d:61:96:5b:5e:fc:c2:b7: df:6d:4f:2b:85:80:a4:1b:27:49:d9:50:fe:8a:41:99:06:d2: 83:f2:1f:bf -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVH5Puf7nXXzfPO3eluBx4USilxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIyMDA1MjIyMloX DTI2MTIxOTA1MjcyMlowMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAx RjNGREE3RUZCMTgwMEQ1MkQ2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/q1brI691Jn6y7yjd4BB/j+/bZ0dJ1LgPUO3wxO1+Wm9Q+phdv8w9AfYUR F3XdNuVYuywathySu61mqJVlv64ZJHXlDgsfhdNaav3pht8GDvJn4wj/MMnrLWm2 WFS6uIjt3yK3hgjApjqmgjDzEBJMCp6wsirCDmOBEpL8qNSs/rxfPPR5njLelnAs UGDiCRpg3ZOBEMVyayMNzlQPPRAU0PIoMjhtlP2u74bo6DyF0er12QWDy3Y0S4kO PWK7R9MtAres/2NN1g7Bad7GjBpXOYZ3AveHZXpHITjoDjVlVl2JK9gyY7fwXona g3eBThoJPxDbIBPPEq9uf7luhrECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDAIr5SMR0KlJSAfP9p++xgA1S1kMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjMzRlZWQ5 LTE4N2UtNGY0Ni1hNWJiLTBlYThmNjY5YWU5MC8wLzMwMDhBRjk0OEM0NzQyQTUy NTIwMUYzRkRBN0VGQjE4MDBENTJENjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdDy4wDQYJKoZIhvcNAQELBQADggEBAHSivQC3v+09f1wE5BFABzTVU9OcJK9P pB9e7i55T9Sl7D4jnqa+GlLOQgChzNDL+CnUOWk9PSp/IrOt3YmnWsZMJUe0ssPM 4BTJCoL/H67pSkvazY8eZUofTaebZA/470C5nb6kV+jUdO7MKO10tJaJwb8GlGY2 LqmII2wm3oWceV7v9dCZ7jCg7CWtK/ePtS8G4xpx/jNpGzz6Qs+4Y/GKigTkAKmL ckqVd88sYbHc4YFRRvTco3MRJtNyhfA0UeYZfxnTd80PYNF/IdzznudxP0Xf1McS u1K//E2tYCFzGtkNYZZbXvzCt99tTyuFgKQbJ0nZUP6KQZkG0oPyH78= -----END CERTIFICATE-----Generated at Wed Dec 24 12:29:06 2025 by rpki-client