This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer File: 560CF5B1622CB492E1C603F69D4FB9C11322520D.cer (raw, json) Hash identifier: G4Htd3K7OrGCEzVw3lY/34XG179DIRQ43tESM5H3HzU= Subject key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 355DCA4C13E32C749D8A9EFF61FC3F2398733FD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft caRepository: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 24 Dec 2025 16:34:40 +0000 Certificate not after: Wed 23 Dec 2026 16:39:40 +0000 Subordinate resources: IP: 103.112.190.0/24 IP: 103.112.192.0/23 IP: 103.210.193.0/24 IP: 2405:3740::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 11:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5d:ca:4c:13:e3:2c:74:9d:8a:9e:ff:61:fc:3f:23:98:73:3f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 24 16:34:40 2025 GMT Not After : Dec 23 16:39:40 2026 GMT Subject: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:35:b9:e3:3c:c0:5c:cf:a2:8c:39:e7:1c: 73:7e:da:40:67:b1:b6:5a:bf:23:c7:02:9e:66:ad: 9f:77:a2:89:a8:bc:4b:92:7b:02:db:65:b7:1b:34: 49:7c:7e:4c:a5:75:fb:1a:27:d5:65:46:14:44:88: 46:16:e4:7c:98:80:43:53:07:f3:7a:3a:9c:6b:7d: 84:39:6f:19:e8:72:e2:0f:a1:b4:a9:91:48:47:f3: 84:08:13:69:af:be:24:1f:7d:30:a9:1b:51:b6:b0: 50:1d:b5:9f:7e:24:02:3f:9e:38:82:ae:53:41:fb: b4:58:e8:52:15:02:29:cf:be:a4:bd:41:40:8d:4c: 8e:73:a1:e1:1e:c9:1f:38:a4:00:56:b3:7e:a6:45: 37:77:ac:1f:ee:1e:28:bd:da:86:4c:3c:55:75:d8: 3c:7f:76:60:d6:d7:04:66:d6:d7:9a:3b:49:10:57: 91:4f:5e:6d:aa:87:d6:b7:82:56:3a:92:3f:b8:20: a7:e2:c6:5e:8d:3a:d0:33:3a:ba:52:db:fc:e0:d1: e1:27:d4:66:32:f8:f6:36:1e:8d:34:95:70:46:83: be:b6:6d:14:68:2f:6f:ca:0e:59:ce:17:00:60:ba: 12:be:aa:7b:4a:5c:76:82:52:a5:bd:7e:a3:c6:6f: f3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.190.0/24 103.112.192.0/23 103.210.193.0/24 IPv6: 2405:3740::/32 Signature Algorithm: sha256WithRSAEncryption 35:75:24:73:f6:36:32:43:8e:8f:d6:ec:2a:b2:07:b2:27:8f: e1:b2:5e:8f:d6:a8:b2:b1:04:d5:59:47:32:60:48:30:e3:82: d4:36:2f:09:88:38:7d:87:c9:99:eb:4a:8c:30:de:3e:c7:97: 7c:b8:94:ab:48:99:4e:02:9a:89:e2:46:16:75:e5:6e:4e:b6: 2f:2a:76:65:e0:6a:f7:fa:83:cc:0a:1a:8c:c5:49:53:3e:fa: 50:8a:8f:be:7b:0f:83:80:bb:bc:18:c8:48:86:7f:f4:07:ba: 09:19:ef:a9:aa:a5:e8:df:ed:4d:d8:1e:f3:c4:26:8a:38:15: 74:e6:83:ad:92:68:63:9e:07:1e:9c:8d:a9:c4:41:ea:dd:3f: 6f:08:14:38:b0:37:f5:88:01:42:fb:08:e6:c5:9b:c3:98:30: d8:cb:3d:cc:63:e3:c5:18:39:9d:bd:9d:59:7a:7a:8c:16:4b: c0:57:63:c4:42:10:7b:ca:9c:94:bd:ee:e8:61:78:ee:18:16: a2:46:9f:bd:5d:3e:c2:ea:f4:6a:51:1f:6a:90:57:fa:0f:53: de:5f:36:24:0c:de:1a:11:ad:91:41:08:e8:3c:09:09:dd:d0: eb:2e:c4:51:88:75:de:2f:e7:b0:1c:22:57:98:81:bf:a9:86: ac:d2:46:63 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUNV3KTBPjLHSdip7/Yfw/I5hzP9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyNDE2MzQ0MFoX DTI2MTIyMzE2Mzk0MFowMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYw M0Y2OUQ0RkI5QzExMzIyNTIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBtNbnjPMBcz6KMOeccc37aQGextlq/I8cCnmatn3eiiai8S5J7Attltxs0 SXx+TKV1+xon1WVGFESIRhbkfJiAQ1MH83o6nGt9hDlvGehy4g+htKmRSEfzhAgT aa++JB99MKkbUbawUB21n34kAj+eOIKuU0H7tFjoUhUCKc++pL1BQI1MjnOh4R7J HzikAFazfqZFN3esH+4eKL3ahkw8VXXYPH92YNbXBGbW15o7SRBXkU9ebaqH1reC VjqSP7ggp+LGXo060DM6ulLb/ODR4SfUZjL49jYejTSVcEaDvrZtFGgvb8oOWc4X AGC6Er6qe0pcdoJSpb1+o8Zv8zkCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFYM9bFiLLSS4cYD9p1PucETIlINMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEw LTY3ZjQtNDFjMi04MDM0LTQ2NTI3MzNiOGRkMi8wLzU2MENGNUIxNjIyQ0I0OTJF MUM2MDNGNjlENEZCOUMxMTMyMjUyMEQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BABncL4DBAFncMADBABn0sEwDQQCAAIwBwMFACQFN0AwDQYJKoZIhvcNAQELBQAD ggEBADV1JHP2NjJDjo/W7CqyB7Inj+GyXo/WqLKxBNVZRzJgSDDjgtQ2LwmIOH2H yZnrSoww3j7Hl3y4lKtImU4CmoniRhZ15W5Oti8qdmXgavf6g8wKGozFSVM++lCK j757D4OAu7wYyEiGf/QHugkZ76mqpejf7U3YHvPEJoo4FXTmg62SaGOeBx6cjanE QerdP28IFDiwN/WIAUL7CObFm8OYMNjLPcxj48UYOZ29nVl6eowWS8BXY8RCEHvK nJS97uhheO4YFqJGn71dPsLq9GpRH2qQV/oPU95fNiQM3hoRrZFBCOg8CQnd0Osu xFGIdd4v57AcIleYgb+phqzSRmM= -----END CERTIFICATE-----Generated at Sat Jan 3 02:25:24 2026 by rpki-client