This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer (raw, json) Hash identifier: Z3D/WP5yinGSMpb0gWMYjXgZf32S2XNGVRjVcvg04/I= Subject key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 408040E02C878DAB732AE15402A048145449A52E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft caRepository: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Dec 2025 19:33:35 +0000 Certificate not after: Tue 15 Dec 2026 19:38:35 +0000 Subordinate resources: IP: 2001:df5:eb00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:80:40:e0:2c:87:8d:ab:73:2a:e1:54:02:a0:48:14:54:49:a5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 16 19:33:35 2025 GMT Not After : Dec 15 19:38:35 2026 GMT Subject: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:3b:f7:f3:14:1c:84:0c:2b:d3:8c:d0:60: 5a:51:ce:9f:bd:af:4f:58:56:7f:13:0e:9a:13:8b: 8e:6c:e2:8b:16:e1:97:89:6a:bc:9d:a1:12:1c:4a: ff:96:5b:4b:8a:e7:de:5d:aa:91:f2:d3:2f:00:6d: f5:ac:cb:74:c3:eb:23:dd:69:c7:e2:67:ab:05:69: f1:65:bb:29:f1:f6:41:40:f3:02:f3:c7:8b:a8:1c: c5:10:87:0f:93:b4:48:83:d9:81:53:1b:e6:36:df: 77:e2:9c:09:48:84:88:fb:66:70:c3:2a:25:d4:48: 29:6d:2c:a4:1a:e4:e5:15:06:23:c9:b4:6a:82:13: be:1e:60:56:7c:cd:a1:31:e3:e2:4d:08:69:97:4c: c0:b1:18:c9:3f:30:2a:fc:3d:09:1c:b0:e6:c1:da: 01:b9:20:a1:8d:5a:94:dc:94:58:2e:ec:fa:f5:b1: 8b:2c:31:d3:38:5d:59:2a:8b:ec:b4:a8:18:09:e1: a8:09:63:19:3b:bf:84:a4:27:54:53:53:2c:d5:92: 65:33:75:38:e7:b8:42:7d:50:56:d4:b5:43:69:4d: 22:e5:e4:50:68:7b:af:ab:a5:7a:df:49:54:d0:c8: 49:b3:69:78:52:19:a7:44:a8:6a:cb:4b:76:fb:26: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:eb00::/48 Signature Algorithm: sha256WithRSAEncryption 72:4b:76:4b:d0:39:28:e9:42:30:c9:6f:df:10:6e:e3:9f:55: b1:e9:92:fa:8d:80:f7:64:f0:5d:77:a2:5d:3b:95:00:fb:ae: 8e:69:b0:3b:6b:97:8a:a4:92:c1:42:8c:34:63:ee:2b:a4:7c: 24:ce:b7:cc:dc:b4:ea:16:84:48:cb:68:db:82:b6:7a:af:94: 37:86:21:e5:ca:92:1a:8a:c6:39:c2:c1:b7:38:93:1e:80:81: 48:15:9a:18:e4:02:1b:4d:3f:04:f3:ba:1f:77:a0:47:ee:6f: e8:99:58:83:f7:36:d4:64:03:06:64:c1:28:1d:1e:56:b3:da: a8:10:e6:f5:3d:e0:89:f4:7c:6d:6b:ed:6a:36:d3:1d:00:84: ad:fc:98:34:f0:50:12:93:3b:17:97:70:bc:08:59:5b:9e:94: 56:3b:b6:9f:c1:0f:f3:78:0e:3a:1e:bb:c8:91:60:a8:77:2b: 55:8d:84:86:02:e4:46:ac:2c:32:c2:6a:07:6a:18:31:4b:e8: c5:80:d0:4f:0e:a9:a3:b3:0c:d5:c4:40:16:57:45:45:6f:01: 02:7f:88:59:b2:ed:49:39:b4:df:b8:4b:23:da:bc:17:72:ae: 99:1a:95:af:e4:c4:32:1e:66:c6:5a:ab:72:ca:8a:3b:f0:d7: dc:89:ae:db -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUQIBA4CyHjatzKuFUAqBIFFRJpS4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxNjE5MzMzNVoX DTI2MTIxNTE5MzgzNVowMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3 QTZFNDJEODgyRkNCN0U0NjBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQoO/fzFByEDCvTjNBgWlHOn72vT1hWfxMOmhOLjmziixbhl4lqvJ2hEhxK /5ZbS4rn3l2qkfLTLwBt9azLdMPrI91px+JnqwVp8WW7KfH2QUDzAvPHi6gcxRCH D5O0SIPZgVMb5jbfd+KcCUiEiPtmcMMqJdRIKW0spBrk5RUGI8m0aoITvh5gVnzN oTHj4k0IaZdMwLEYyT8wKvw9CRyw5sHaAbkgoY1alNyUWC7s+vWxiywx0zhdWSqL 7LSoGAnhqAljGTu/hKQnVFNTLNWSZTN1OOe4Qn1QVtS1Q2lNIuXkUGh7r6ulet9J VNDISbNpeFIZp0SoastLdvsmle0CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB/VfUxCJpYM4Ct6bkLYgvy35GDuMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMzRiYjQ4 LThhNjUtNDI4Yi05NGYxLTk5NWFlZDcyZWNiNS8wLzFGRDU3RDRDNDIyNjk2MENF MDJCN0E2RTQyRDg4MkZDQjdFNDYwRUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ316wAwDQYJKoZIhvcNAQELBQADggEBAHJLdkvQOSjpQjDJb98QbuOfVbHp kvqNgPdk8F13ol07lQD7ro5psDtrl4qkksFCjDRj7iukfCTOt8zctOoWhEjLaNuC tnqvlDeGIeXKkhqKxjnCwbc4kx6AgUgVmhjkAhtNPwTzuh93oEfub+iZWIP3NtRk AwZkwSgdHlaz2qgQ5vU94In0fG1r7Wo20x0AhK38mDTwUBKTOxeXcLwIWVuelFY7 tp/BD/N4Djoeu8iRYKh3K1WNhIYC5EasLDLCagdqGDFL6MWA0E8OqaOzDNXEQBZX RUVvAQJ/iFmy7Uk5tN+4SyPavBdyrpkala/kxDIeZsZaq3LKijvw19yJrts= -----END CERTIFICATE-----Generated at Fri Dec 19 01:21:06 2025 by rpki-client