This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer File: D8D82E797873C8877988A42E5C473D1919238C2A.cer (raw, json) Hash identifier: 7whp/omDBcLwHA4Ur4oIpjhjL/kedoH3Cke+gu+zPhs= Subject key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 28099BE230770B728C2BFE3E04AAB7B4BC462111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft caRepository: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 09 Dec 2025 18:28:09 +0000 Certificate not after: Tue 08 Dec 2026 18:33:09 +0000 Subordinate resources: IP: 157.15.42.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 05:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:09:9b:e2:30:77:0b:72:8c:2b:fe:3e:04:aa:b7:b4:bc:46:21:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 9 18:28:09 2025 GMT Not After : Dec 8 18:33:09 2026 GMT Subject: CN=D8D82E797873C8877988A42E5C473D1919238C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:eb:4f:31:5a:1b:d6:cc:2f:48:f4:50:00: 3a:ec:96:0f:82:14:0f:ba:b2:76:fd:e4:1e:55:49: 18:3f:27:30:ae:95:2b:8e:68:93:70:8e:b6:2b:ba: d2:a8:ba:7e:3c:95:45:90:53:02:49:03:15:34:f8: fa:3b:08:c5:0f:b1:53:c1:ca:70:f6:8d:5a:b0:d7: 34:4c:39:25:69:71:cf:76:f6:47:cd:35:b4:3c:60: f2:30:65:5b:40:c8:ed:0a:14:0a:78:b0:7d:69:4c: e3:13:0b:99:a8:09:e6:b2:0e:02:99:7d:64:b0:17: ff:82:f3:51:14:9d:f2:f4:8a:72:80:fb:1b:07:e3: b5:74:92:21:63:5a:7e:b1:60:a8:97:43:83:3b:fd: 71:38:f1:9d:52:fa:8b:52:1e:57:68:4c:83:d1:c9: b0:c0:c0:ad:64:a0:7e:97:5e:68:9e:b2:73:b5:a5: 8b:14:17:86:21:64:26:cd:e0:87:bb:41:a2:28:60: ae:11:4b:90:bf:a2:5a:4b:f0:0f:29:97:6c:46:80: 24:02:ba:72:7f:20:54:72:fe:35:35:f1:d9:4d:e5: 46:38:7d:5e:72:fc:42:0a:dc:b6:0d:57:44:66:a7: 79:ed:67:1f:8f:4b:6d:17:d6:24:e6:c0:ec:ff:10: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.42.0/23 Signature Algorithm: sha256WithRSAEncryption 80:b4:21:53:e9:bf:c0:5d:13:04:2f:27:74:d5:44:24:a1:b4: b5:6e:2a:70:f0:5e:9c:8a:38:38:11:42:ae:21:41:e4:11:20: 31:56:50:65:85:7c:2f:f3:fe:a1:da:cb:c8:15:fd:91:af:ca: a5:4b:73:d9:cf:e5:d4:cd:b3:87:ff:5f:ac:08:d6:70:f8:b9: 42:e9:c0:1c:0c:97:be:ff:21:6b:78:8d:0b:3a:b7:37:37:1e: af:78:5c:d3:a6:97:e1:b4:37:d3:68:b1:05:05:7d:a1:74:54: 58:e3:3f:c5:0b:8e:c1:52:d2:fe:da:77:19:32:25:dd:06:bb: 81:e0:c8:59:b8:ab:ff:1d:d3:f0:3d:47:dc:27:3e:d5:6e:59: 9c:1c:00:d7:e8:77:fc:37:bb:e3:f6:9d:11:a1:f9:d1:8b:79: be:f1:14:4b:63:f9:83:f8:6b:84:a1:89:14:c9:d6:4a:f0:22: 05:ac:b5:2d:7a:aa:d7:89:a7:dc:30:98:84:d3:33:d1:d7:43: bd:6e:77:95:27:77:90:5a:4c:9d:e7:18:af:5d:28:6f:63:89: 98:38:33:2d:8b:e2:d8:15:3b:10:d9:34:b1:0e:c8:7f:fd:8a: ef:94:50:5f:68:65:bd:fa:b6:22:0c:a1:fc:25:af:3f:9f:5d: 0b:4c:3c:bd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKAmb4jB3C3KMK/4+BKq3tLxGIREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIwOTE4MjgwOVoX DTI2MTIwODE4MzMwOVowMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhB NDJFNUM0NzNEMTkxOTIzOEMyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh0608xWhvWzC9I9FAAOuyWD4IUD7qydv3kHlVJGD8nMK6VK45ok3COtiu6 0qi6fjyVRZBTAkkDFTT4+jsIxQ+xU8HKcPaNWrDXNEw5JWlxz3b2R801tDxg8jBl W0DI7QoUCniwfWlM4xMLmagJ5rIOApl9ZLAX/4LzURSd8vSKcoD7GwfjtXSSIWNa frFgqJdDgzv9cTjxnVL6i1IeV2hMg9HJsMDArWSgfpdeaJ6yc7WlixQXhiFkJs3g h7tBoihgrhFLkL+iWkvwDymXbEaAJAK6cn8gVHL+NTXx2U3lRjh9XnL8Qgrctg1X RGanee1nH49LbRfWJObA7P8Qc2kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNjYLnl4c8iHeYikLlxHPRkZI4wqMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1ZGU3MWFj LTdmOWYtNDdkNC05NTMzLTlkZjgyYWZjNTk3My8wL0Q4RDgyRTc5Nzg3M0M4ODc3 OTg4QTQyRTVDNDczRDE5MTkyMzhDMkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdDyowDQYJKoZIhvcNAQELBQADggEBAIC0IVPpv8BdEwQvJ3TVRCShtLVuKnDw XpyKODgRQq4hQeQRIDFWUGWFfC/z/qHay8gV/ZGvyqVLc9nP5dTNs4f/X6wI1nD4 uULpwBwMl77/IWt4jQs6tzc3Hq94XNOml+G0N9NosQUFfaF0VFjjP8ULjsFS0v7a dxkyJd0Gu4HgyFm4q/8d0/A9R9wnPtVuWZwcANfod/w3u+P2nRGh+dGLeb7xFEtj +YP4a4ShiRTJ1krwIgWstS16qteJp9wwmITTM9HXQ71ud5Und5BaTJ3nGK9dKG9j iZg4My2L4tgVOxDZNLEOyH/9iu+UUF9oZb36tiIMofwlrz+fXQtMPL0= -----END CERTIFICATE-----Generated at Fri Dec 19 18:33:04 2025 by rpki-client