This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
File:                     03F45A130990D1072FE172E1EF64AAFAEC347834.cer (raw, json)
Hash identifier:          znjKfb/84B7OA+LvQDV8YYcdmX7d/vcsUa1x8ZJ5qvc=
Subject key identifier:   03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       318E65BD2B27D62BA783D7BBF89E42FA95C2D5B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Dec 2025 03:12:51 +0000
Certificate not after:    Tue 15 Dec 2026 03:17:51 +0000
Subordinate resources:    IP: 103.143.4.0/23
                          IP: 2405:4640::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8e:65:bd:2b:27:d6:2b:a7:83:d7:bb:f8:9e:42:fa:95:c2:d5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 16 03:12:51 2025 GMT
            Not After : Dec 15 03:17:51 2026 GMT
        Subject: CN=03F45A130990D1072FE172E1EF64AAFAEC347834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:16:3c:03:d7:bd:be:7b:6c:39:66:1f:5a:
                    37:ca:8d:03:e6:fd:f2:ff:7d:20:ea:65:30:74:6a:
                    fd:48:27:52:9b:b4:b7:30:3d:35:b9:c2:4a:c6:05:
                    28:61:61:ed:4b:1a:6e:f0:72:4c:40:25:1f:2c:70:
                    f3:49:21:77:3d:06:30:d0:76:93:8e:1c:ef:fe:19:
                    22:29:e6:dc:b6:62:fa:e4:04:d5:13:b6:7a:96:3f:
                    4d:53:be:a0:51:73:e6:ad:21:70:67:ae:83:ce:8a:
                    67:9c:9b:82:63:19:6a:25:28:b5:84:16:c4:07:25:
                    74:54:1c:9d:e1:d0:65:79:a9:ba:74:0b:07:d9:59:
                    43:6c:03:df:96:9c:21:55:85:8f:5b:75:57:92:11:
                    dd:2a:86:a9:52:fe:13:f2:b0:cd:2a:d2:b9:94:6f:
                    c1:4e:38:25:d5:c8:8e:f0:ec:4e:ff:cd:62:37:3b:
                    01:ee:38:69:6b:c2:8b:73:8f:35:0d:5e:38:c7:79:
                    57:ab:cf:a3:64:35:a1:c7:27:1d:aa:d8:f9:2e:bf:
                    74:fe:0e:25:46:3a:e8:09:e3:cd:0e:7d:e9:4e:c9:
                    ea:e3:8e:17:8b:d4:26:df:5a:91:84:92:67:84:50:
                    7e:19:39:39:0a:d6:40:4a:4c:70:43:f5:2e:7c:04:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.4.0/23
                IPv6:
                  2405:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:7e:2c:e2:c1:4f:27:50:37:64:09:fa:16:ac:62:f4:cb:
         f4:49:51:a1:e0:cc:1c:9a:d2:8a:7d:f3:78:5f:40:eb:38:4b:
         26:12:83:9c:38:2a:40:7b:a0:31:78:db:9c:ee:f0:91:b4:82:
         54:15:eb:88:7d:6a:a5:b7:ae:54:8e:f0:2d:36:7b:87:10:19:
         c7:c0:73:de:26:c4:d5:20:99:ad:f7:27:0d:fd:08:66:76:93:
         17:56:5b:3c:0a:ac:81:04:eb:ff:03:76:3c:3d:25:0f:ad:48:
         31:2b:15:b2:ca:e7:a7:65:2e:e8:20:87:6b:ce:3b:b6:09:34:
         ed:f1:68:01:d3:07:f9:89:6d:27:84:b6:a9:a8:a5:71:03:d0:
         13:5c:50:02:f9:cb:11:bd:f6:16:db:db:ee:b6:c0:94:f8:c7:
         74:c1:40:6c:52:b2:86:0f:c6:cf:04:68:2a:75:38:02:f4:f2:
         51:44:35:ae:f2:20:b1:41:6c:c9:d4:dd:06:47:a4:3b:62:b8:
         cb:f5:d2:74:93:42:67:80:02:9e:34:a5:35:04:86:44:8f:63:
         36:6f:1b:45:bd:61:a8:ce:c8:02:1e:cd:77:5c:97:b9:cb:8a:
         a4:95:e8:e5:db:99:04:e4:e6:dd:80:38:0a:47:53:40:f7:5e:
         43:39:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----