This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer File: 585D79944E315672D413B937BFC042F7C0AAB990.cer (raw, json) Hash identifier: t4LHGiaTWKYzcAlc4owzYse6U4s5YUvdoSFACPtfIaE= Subject key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A8F43F6D863D5BBF34AF906E40DF771752E7174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft caRepository: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 09 Dec 2025 20:30:26 +0000 Certificate not after: Tue 08 Dec 2026 20:35:26 +0000 Subordinate resources: IP: 103.100.85.0/24 IP: 2001:df2:7500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8f:43:f6:d8:63:d5:bb:f3:4a:f9:06:e4:0d:f7:71:75:2e:71:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 9 20:30:26 2025 GMT Not After : Dec 8 20:35:26 2026 GMT Subject: CN=585D79944E315672D413B937BFC042F7C0AAB990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:82:7c:66:d0:29:e9:2c:34:77:34:2d:be: 03:f3:3b:ce:55:b0:5a:ac:a1:82:0e:9a:cf:8e:33: 4f:6a:de:6c:c4:0c:ef:e3:80:1a:fc:80:2e:ab:23: a8:ab:78:2c:8b:6d:23:1e:28:00:c9:fd:e2:65:67: 77:9f:2b:44:a7:93:52:5a:7a:a5:11:af:9c:27:7d: 8e:68:eb:0c:8f:a8:cb:83:f3:14:06:d9:d2:db:1f: 96:5b:4e:19:07:27:f5:96:02:d1:ac:76:6d:27:8f: 4c:01:73:08:84:cc:93:e2:6d:86:70:bd:05:27:12: 21:db:e5:7a:36:42:d8:4a:a3:c4:2a:74:22:12:47: fd:bc:f7:ab:ff:90:2f:7e:2d:81:84:98:82:6f:e2: 0f:70:3b:e6:b7:16:96:d2:4a:93:82:29:f6:49:77: c0:37:eb:17:e2:34:2c:20:b7:69:8a:c2:b2:5f:14: 49:24:6d:14:2d:fb:e9:35:8b:8e:b5:62:5e:57:bd: c1:ea:0e:67:d4:68:d9:32:a4:34:2f:cc:fa:d0:f4: b7:d0:ee:f4:ee:48:16:b7:53:67:79:fd:9b:a5:92: ed:d5:d2:cc:8a:96:2d:fb:53:c9:de:ca:2e:67:93: 5a:54:24:e1:2d:8e:34:4f:03:ce:a3:cf:bd:d5:6d: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.85.0/24 IPv6: 2001:df2:7500::/48 Signature Algorithm: sha256WithRSAEncryption 3f:a7:7c:61:78:e3:07:ea:dd:b7:65:93:34:75:04:a3:d9:d5: 23:5d:7a:e6:00:5c:4d:11:d3:3b:c4:26:80:72:91:24:94:75: df:a4:44:7b:0b:73:e0:b5:46:8f:5a:f5:15:71:af:0e:33:2e: 60:e9:eb:a7:73:ec:bb:c3:15:ed:06:f7:86:70:bb:a4:f9:38: 7f:8b:84:72:cf:08:97:bc:4f:fe:42:b2:af:04:ab:6e:2d:98: 89:29:55:6a:d1:44:a0:a0:03:b3:67:5f:fa:7a:ef:b9:a9:a2: 38:7e:e7:d2:9b:97:72:bc:1c:6f:6d:4c:17:97:14:ec:e3:24: d6:fc:93:0d:1c:7b:65:fa:e8:8b:78:6a:40:a1:14:3f:9b:c8: ff:2a:b9:75:c8:fe:76:74:f1:be:c8:1d:44:e9:66:8f:18:7d: 5f:25:3d:8e:66:0c:e6:c8:18:af:a1:58:5c:5b:b8:b5:d8:16: a9:93:16:1c:68:a5:dc:9f:78:b5:de:e6:1c:02:14:79:55:0d: 9a:32:c1:8e:a5:2c:ed:bb:85:81:76:a7:48:96:b1:7b:f1:cf: f1:63:e4:99:3f:99:97:34:69:e4:d0:69:65:76:c0:4f:45:99: e1:85:3b:c4:c4:81:e4:c0:a3:d3:18:65:31:e5:7e:8c:12:19: 64:c6:8e:bd -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUKo9D9thj1bvzSvkG5A33cXUucXQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwOTIwMzAyNloX DTI2MTIwODIwMzUyNlowMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNC OTM3QkZDMDQyRjdDMEFBQjk5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsggnxm0CnpLDR3NC2+A/M7zlWwWqyhgg6az44zT2rebMQM7+OAGvyALqsj qKt4LIttIx4oAMn94mVnd58rRKeTUlp6pRGvnCd9jmjrDI+oy4PzFAbZ0tsflltO GQcn9ZYC0ax2bSePTAFzCITMk+JthnC9BScSIdvlejZC2EqjxCp0IhJH/bz3q/+Q L34tgYSYgm/iD3A75rcWltJKk4Ip9kl3wDfrF+I0LCC3aYrCsl8USSRtFC376TWL jrViXle9weoOZ9Ro2TKkNC/M+tD0t9Du9O5IFrdTZ3n9m6WS7dXSzIqWLftTyd7K LmeTWlQk4S2ONE8DzqPPvdVtlbsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFhdeZROMVZy1BO5N7/AQvfAqrmQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3MzJmMTkx LWUzODAtNDAxMy1iY2U1LTQyMTVhNDkzYTcxZC8wLzU4NUQ3OTk0NEUzMTU2NzJE NDEzQjkzN0JGQzA0MkY3QzBBQUI5OTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnZFUwDwQCAAIwCQMHACABDfJ1ADANBgkqhkiG9w0BAQsFAAOCAQEAP6d8YXjj B+rdt2WTNHUEo9nVI1165gBcTRHTO8QmgHKRJJR136REewtz4LVGj1r1FXGvDjMu YOnrp3Psu8MV7Qb3hnC7pPk4f4uEcs8Il7xP/kKyrwSrbi2YiSlVatFEoKADs2df +nrvuamiOH7n0puXcrwcb21MF5cU7OMk1vyTDRx7Zfroi3hqQKEUP5vI/yq5dcj+ dnTxvsgdROlmjxh9XyU9jmYM5sgYr6FYXFu4tdgWqZMWHGil3J94td7mHAIUeVUN mjLBjqUs7buFgXanSJaxe/HP8WPkmT+ZlzRp5NBpZXbAT0WZ4YU7xMSB5MCj0xhl MeV+jBIZZMaOvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:32 2025 by rpki-client