This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer File: 735D87BA86773AC70137CF53116358A1F3B19766.cer (raw, json) Hash identifier: 9FBudjUaXqoRpm7dCoPY2zMnMcyqd4gBWrw3/aRpBPw= Subject key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BFA8C1EB6A6DBD59F5B479BC8F871E414CC02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft caRepository: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Dec 2025 02:49:10 +0000 Certificate not after: Fri 11 Dec 2026 02:54:10 +0000 Subordinate resources: IP: 103.3.208.0/22 IP: 103.234.120.0/22 IP: 114.79.0.0/18 IP: 115.178.160.0 -- 115.178.255.255 IP: 202.70.48.0/20 IP: 202.73.224.0/21 IP: 2407:a600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fa:8c:1e:b6:a6:db:d5:9f:5b:47:9b:c8:f8:71:e4:14:cc:02:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 12 02:49:10 2025 GMT Not After : Dec 11 02:54:10 2026 GMT Subject: CN=735D87BA86773AC70137CF53116358A1F3B19766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:61:35:cb:2b:b3:44:5e:ea:04:01:b4:82: c9:fe:9d:2e:f6:e7:1b:6f:ac:57:75:7f:fc:23:d7: d4:d4:4d:c6:37:51:fb:4d:60:84:10:c1:af:f0:35: 6e:98:de:39:03:8e:8f:2f:29:59:7e:23:70:ee:9f: 89:71:de:eb:30:b5:60:49:f0:9a:70:6c:1f:52:db: 63:d1:70:63:15:ed:13:c5:c4:df:f6:57:c3:30:f3: 3b:ae:33:a1:d6:e1:7a:ec:c6:45:ac:41:5d:23:5e: ad:d4:dc:11:c4:70:d8:10:4f:7b:4a:2a:ba:51:ae: e2:4a:94:b0:62:22:8c:20:e6:7e:f4:75:37:ff:d1: 9b:82:1f:c6:71:fe:64:cf:7a:f4:43:d8:6f:16:b7: a8:37:fa:55:24:6a:f2:eb:a1:cd:77:97:b3:b1:35: 46:0f:88:e4:33:78:2a:0e:6e:69:99:c9:f4:b6:58: af:f0:3a:75:c3:9d:52:84:f2:9e:d5:0e:90:55:8c: 70:65:a0:f6:17:1a:23:c7:1e:10:23:82:34:9a:73: 70:ec:46:f6:cd:0f:8b:a9:b3:a3:2a:7f:aa:d9:bc: 72:23:06:3e:7c:29:7d:eb:6e:c6:e7:cc:00:ca:6a: e2:ac:a3:9a:dd:59:c9:9a:d0:87:26:03:cb:fb:ca: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.208.0/22 103.234.120.0/22 114.79.0.0/18 115.178.160.0-115.178.255.255 202.70.48.0/20 202.73.224.0/21 IPv6: 2407:a600::/32 Signature Algorithm: sha256WithRSAEncryption 73:2a:36:fb:93:44:e4:a6:dc:aa:0b:40:e7:ba:99:68:a3:da: 87:b0:ac:0d:13:66:1b:5a:83:e6:90:72:10:de:22:e4:54:fb: 42:00:e3:19:c1:b0:11:21:38:f1:0e:94:c0:c1:af:b0:1f:25: 62:e7:cd:5b:e8:a7:64:82:28:ea:e4:5d:15:64:f8:a7:ac:c5: 45:51:c9:f8:5b:54:91:35:fd:70:75:f3:f0:4b:3a:39:82:f2: e3:ab:42:8a:36:ff:25:97:66:bc:0b:0d:79:20:90:10:bf:4b: f7:70:17:fc:1d:af:96:18:3c:34:67:87:a8:9c:d9:17:13:7d: 32:7a:89:bb:10:93:c8:57:76:6c:9b:b0:68:d4:6c:79:43:fa: 56:89:6a:23:3f:8b:af:6d:9f:f4:f7:19:07:bf:1b:9a:4f:55: d9:be:60:25:5b:a1:50:60:bb:f9:04:8a:4c:77:6f:85:a1:24: c6:bd:d8:ca:f6:e1:01:51:92:7a:f1:c9:f6:08:8c:81:d9:d2: 31:70:39:63:6c:2c:ae:46:70:70:63:5d:ae:34:21:f8:35:5d: 18:a6:aa:f0:5b:9b:7f:e7:e6:87:46:9c:f7:e1:53:8b:f2:e3: 51:41:6c:da:93:a7:3b:ed:e0:6b:54:be:1a:f6:ed:bd:53:25: 5b:64:03:5b -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUO/qMHram29WfW0ebyPhx5BTMAsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMjAyNDkxMFoX DTI2MTIxMTAyNTQxMFowMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdD RjUzMTE2MzU4QTFGM0IxOTc2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoYYTXLK7NEXuoEAbSCyf6dLvbnG2+sV3V//CPX1NRNxjdR+01ghBDBr/A1 bpjeOQOOjy8pWX4jcO6fiXHe6zC1YEnwmnBsH1LbY9FwYxXtE8XE3/ZXwzDzO64z odbheuzGRaxBXSNerdTcEcRw2BBPe0oqulGu4kqUsGIijCDmfvR1N//Rm4IfxnH+ ZM969EPYbxa3qDf6VSRq8uuhzXeXs7E1Rg+I5DN4Kg5uaZnJ9LZYr/A6dcOdUoTy ntUOkFWMcGWg9hcaI8ceECOCNJpzcOxG9s0Pi6mzoyp/qtm8ciMGPnwpfetuxufM AMpq4qyjmt1ZyZrQhyYDy/vK/bcCAwEAAaOCAuwwggLoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHNdh7qGdzrHATfPUxFjWKHzsZdmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRh LWRhMGItNDU0MC05MzQ5LTU5MzBiZDcyNWNlMy8wLzczNUQ4N0JBODY3NzNBQzcw MTM3Q0Y1MzExNjM1OEExRjNCMTk3NjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYIKwYBBQUHAQcBAf8ERDBCMDEEAgABMCsD BAJnA9ADBAJn6ngDBAZyTwAwCwMEBXOyoAMDAHOyAwQEykYwAwQDykngMA0EAgAC MAcDBQAkB6YAMA0GCSqGSIb3DQEBCwUAA4IBAQBzKjb7k0TkptyqC0Dnuploo9qH sKwNE2YbWoPmkHIQ3iLkVPtCAOMZwbARITjxDpTAwa+wHyVi581b6Kdkgijq5F0V ZPinrMVFUcn4W1SRNf1wdfPwSzo5gvLjq0KKNv8ll2a8Cw15IJAQv0v3cBf8Ha+W GDw0Z4eonNkXE30yeom7EJPIV3Zsm7Bo1Gx5Q/pWiWojP4uvbZ/09xkHvxuaT1XZ vmAlW6FQYLv5BIpMd2+FoSTGvdjK9uEBUZJ68cn2CIyB2dIxcDljbCyuRnBwY12u NCH4NV0YpqrwW5t/5+aHRpz34VOL8uNRQWzak6c77eBrVL4a9u29UyVbZANb -----END CERTIFICATE-----Generated at Sat Dec 20 15:14:03 2025 by rpki-client