This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.cer (raw, json) Hash identifier: ZHmrj/8SykxU4haJ/X0Js5xLBx8uYEJX6nGTydkDBso= Subject key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7CE7108A7140FDB95A965EA366EE3D2DAD1E996E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft caRepository: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 10 Dec 2025 04:36:50 +0000 Certificate not after: Wed 09 Dec 2026 04:41:50 +0000 Subordinate resources: IP: 103.167.156.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e7:10:8a:71:40:fd:b9:5a:96:5e:a3:66:ee:3d:2d:ad:1e:99:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:36:50 2025 GMT Not After : Dec 9 04:41:50 2026 GMT Subject: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:50:7c:7c:dc:a7:33:4b:9e:3c:9a:55:2e: 62:66:04:b0:dd:e2:01:9c:cf:28:11:04:4f:e9:b6: d3:9f:c7:fd:37:f6:c2:56:2c:27:2c:f1:b5:ab:8f: d8:c4:8a:ae:e8:ee:e2:5b:a5:ad:a8:41:f4:0b:f7: 05:d2:0e:47:5d:fa:73:08:30:e7:63:e7:00:ed:c8: 0c:f5:53:1f:93:f0:01:97:4a:d0:30:5c:af:96:e1: 74:59:e1:3a:2f:ac:ff:10:4f:e1:77:16:ef:be:d0: 94:58:7f:dd:9c:8a:8d:ac:c7:4a:4f:e7:0e:d7:6a: 28:fb:29:9f:1d:bc:34:32:96:55:8e:41:6e:f1:83: b3:c5:1e:6a:42:dc:8a:72:81:5a:c3:7f:04:7e:a9: 8a:3a:79:16:8a:cb:12:c3:aa:fc:e1:6c:5a:76:17: 71:fe:dd:95:cc:f2:72:b8:d4:9e:78:f8:e4:ac:3a: ca:63:51:3b:67:b8:d5:39:99:e6:04:51:95:88:63: 30:30:a8:48:2c:63:74:fb:c1:b6:e7:07:6f:ea:fc: 5e:2d:1a:9a:ce:a1:7f:a3:2e:33:29:a7:89:0e:ae: 61:ba:9e:8b:9b:aa:f1:fd:fa:52:f4:07:d9:af:42: 4a:96:c7:80:52:1b:8d:46:7d:bc:8b:c5:61:17:34: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.156.0/24 Signature Algorithm: sha256WithRSAEncryption 52:0f:a3:b5:67:6d:da:33:6c:1f:e4:b9:fd:23:cd:f2:f2:c0: 29:d2:74:dc:6d:13:b6:ed:7f:53:5c:25:d2:b4:d5:46:2a:49: 22:a3:a1:d6:ea:19:63:52:7d:db:eb:43:49:f4:c1:b3:53:1e: 23:4b:2c:b2:1c:0a:85:64:fb:db:85:31:7a:13:41:23:64:37: be:39:c3:84:7d:52:6e:6b:f2:7a:b2:4c:8b:1e:22:83:15:9f: 8c:97:a5:b2:4a:d7:91:f7:52:24:cb:a8:26:8c:23:06:af:ff: 95:8e:60:0f:2b:ca:30:d3:ad:95:20:4b:8a:4c:04:99:41:b2: 10:ad:7a:62:f8:80:86:6b:b8:50:01:b4:a2:ad:a2:70:da:e6: f2:9a:79:3b:4d:bc:6a:fc:fc:e1:f5:82:de:95:55:0b:71:81: 37:34:bd:8c:c0:0b:eb:50:6b:ed:55:2f:81:89:54:02:91:86: 25:ec:4d:cf:19:6e:84:33:9b:e4:e4:9f:c7:93:97:98:82:ee: 31:2a:91:12:72:f1:10:bb:61:fc:97:1f:0d:88:1b:67:8e:8b: 52:02:2d:6f:a3:33:cf:9b:dd:03:34:e3:ef:cb:2d:f0:3e:e4: ed:03:e7:4e:b1:03:75:16:62:e6:42:71:26:be:f2:9a:40:d7: 71:69:70:58 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfOcQinFA/blall6jZu49La0emW4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMDA0MzY1MFoX DTI2MTIwOTA0NDE1MFowMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4 Mjg0QjI2NTJFMDJBMjAxN0U5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvHUHx83KczS548mlUuYmYEsN3iAZzPKBEET+m205/H/Tf2wlYsJyzxtauP 2MSKruju4lulrahB9Av3BdIOR136cwgw52PnAO3IDPVTH5PwAZdK0DBcr5bhdFnh Oi+s/xBP4XcW777QlFh/3ZyKjazHSk/nDtdqKPspnx28NDKWVY5BbvGDs8UeakLc inKBWsN/BH6pijp5ForLEsOq/OFsWnYXcf7dlczycrjUnnj45Kw6ymNRO2e41TmZ 5gRRlYhjMDCoSCxjdPvBtucHb+r8Xi0ams6hf6MuMymniQ6uYbqei5uq8f36UvQH 2a9CSpbHgFIbjUZ9vIvFYRc0TSsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG2Viq69iUbkfJaChLJlLgKiAX6eMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxODAzMTI1 LWQ3NzctNDA1Ni04NDRkLThkMWJlZmQwMTYzZC8wLzZEOTU4QUFFQkQ4OTQ2RTQ3 Qzk2ODI4NEIyNjUyRTAyQTIwMTdFOUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnp5wwDQYJKoZIhvcNAQELBQADggEBAFIPo7VnbdozbB/kuf0jzfLywCnSdNxt E7btf1NcJdK01UYqSSKjodbqGWNSfdvrQ0n0wbNTHiNLLLIcCoVk+9uFMXoTQSNk N745w4R9Um5r8nqyTIseIoMVn4yXpbJK15H3UiTLqCaMIwav/5WOYA8ryjDTrZUg S4pMBJlBshCtemL4gIZruFABtKKtonDa5vKaeTtNvGr8/OH1gt6VVQtxgTc0vYzA C+tQa+1VL4GJVAKRhiXsTc8ZboQzm+Tkn8eTl5iC7jEqkRJy8RC7YfyXHw2IG2eO i1ICLW+jM8+b3QM04+/LLfA+5O0D506xA3UWYuZCcSa+8ppA13FpcFg= -----END CERTIFICATE-----Generated at Wed Dec 24 18:34:25 2025 by rpki-client