This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer File: 7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer (raw, json) Hash identifier: QwEhCMg9CKw8rc/Mt+xVISQUE6U6A+8q3SnIoQl89so= Subject key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7321077369EA21B9BCE6E20B4231A8DB58083281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft caRepository: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 09 Dec 2025 00:02:14 +0000 Certificate not after: Tue 08 Dec 2026 00:07:14 +0000 Subordinate resources: IP: 45.249.220.0/22 IP: 103.236.148.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:21:07:73:69:ea:21:b9:bc:e6:e2:0b:42:31:a8:db:58:08:32:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 9 00:02:14 2025 GMT Not After : Dec 8 00:07:14 2026 GMT Subject: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:71:17:53:03:9b:fe:22:f5:48:de:22:30: 99:71:97:72:6a:7f:53:bd:19:16:4d:a7:eb:68:27: 29:23:52:7f:e8:ad:2c:bf:52:b6:78:83:af:49:f6: df:b2:48:ef:e0:a4:a8:00:1e:44:8e:b3:d5:ec:b3: 0d:cf:78:1a:36:d6:0b:91:aa:ed:7e:eb:a7:eb:bf: c7:25:5a:e6:dd:e0:63:44:94:48:ca:ae:74:46:38: ff:29:ea:91:2f:f4:47:bf:05:98:8a:d9:51:14:5b: e4:66:b3:53:ca:78:b7:f0:36:1e:2e:fd:8a:1f:b0: db:b4:71:5b:72:a6:d0:93:7e:f9:6a:9a:25:ae:12: 40:bf:f4:0b:2b:32:27:01:f3:d2:ce:c0:15:f5:ce: c2:ae:01:4c:e7:e4:4d:7c:dd:8e:c8:3f:06:8c:fe: 1b:f8:6e:b0:07:43:9c:a9:ef:c0:6e:a3:f2:98:23: af:3d:75:a9:64:64:8f:4e:1a:ae:00:2a:75:e3:68: b9:19:60:60:eb:d7:55:65:04:73:65:4b:96:49:1d: a2:a9:38:2f:c3:e1:e3:48:12:98:b2:d2:81:fd:5e: 5d:73:07:40:60:57:e3:3e:6d:9c:7f:7d:a4:84:44: dc:b1:7c:41:89:75:15:a6:12:1a:e7:c9:25:99:34: e9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.220.0/22 103.236.148.0/22 Signature Algorithm: sha256WithRSAEncryption 66:14:49:b2:28:92:41:13:d5:e4:8a:d6:5d:5f:14:21:77:a7: fa:dd:b6:65:f9:80:90:cd:72:58:89:2f:7a:bb:5e:52:80:74: 7d:f5:12:cd:81:16:2a:83:70:2e:be:3e:62:94:91:c3:51:a0: 90:1b:a4:ef:2b:3a:7e:d9:0b:97:2a:1f:23:9d:0d:04:48:ba: fa:26:50:35:91:2d:f5:1f:dd:61:2b:3c:ab:84:d6:55:fe:1e: 57:59:04:6e:26:78:14:2e:38:8e:f2:82:f9:4f:2e:15:2e:35: 8c:c4:04:67:a4:01:71:20:a9:bc:82:46:c4:42:11:b3:92:a4: ab:ce:84:56:e1:9d:83:ae:09:82:74:8d:88:2a:46:c9:d0:f8: b2:9a:bd:2f:7f:19:3b:74:ec:e8:43:1e:44:00:22:ee:45:b6: cc:7c:97:7a:9f:72:d9:4f:3b:99:f9:28:92:1c:b7:87:de:b9: 51:54:75:13:c7:a3:72:2f:98:d7:e7:69:8f:e9:cc:9d:01:0d: 98:5c:21:d4:9e:60:2d:8b:2c:48:b1:3f:00:ad:0d:9b:f1:d9: ad:73:65:cc:06:b6:1d:49:ee:4f:70:07:2b:3a:36:30:4b:ac: 13:71:5f:a4:28:b5:dd:b6:5c:a2:2d:b5:ea:4e:8a:45:70:98: 91:aa:bc:10 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUcyEHc2nqIbm85uILQjGo21gIMoEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwOTAwMDIxNFoX DTI2MTIwODAwMDcxNFowMzExMC8GA1UEAxMoNzkzMkUxQzkyQjQ1MUEyRkQ3QTVF ODVCNTQxMTM1RTI1QUQwNzRENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKccRdTA5v+IvVI3iIwmXGXcmp/U70ZFk2n62gnKSNSf+itLL9StniDr0n2 37JI7+CkqAAeRI6z1eyzDc94GjbWC5Gq7X7rp+u/xyVa5t3gY0SUSMqudEY4/ynq kS/0R78FmIrZURRb5GazU8p4t/A2Hi79ih+w27RxW3Km0JN++WqaJa4SQL/0Cysy JwHz0s7AFfXOwq4BTOfkTXzdjsg/Boz+G/husAdDnKnvwG6j8pgjrz11qWRkj04a rgAqdeNouRlgYOvXVWUEc2VLlkkdoqk4L8Ph40gSmLLSgf1eXXMHQGBX4z5tnH99 pIRE3LF8QYl1FaYSGufJJZk06XkCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHky4ckrRRov16XoW1QRNeJa0HTVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yOGE3OTc1NS0yMzhhLTQ2ZDItYjA1Mi0zMDU4N2JmOWVmZjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4YTc5NzU1 LTIzOGEtNDZkMi1iMDUyLTMwNTg3YmY5ZWZmNy8wLzc5MzJFMUM5MkI0NTFBMkZE N0E1RTg1QjU0MTEzNUUyNUFEMDc0RDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIt+dwDBAJn7JQwDQYJKoZIhvcNAQELBQADggEBAGYUSbIokkET1eSK1l1fFCF3 p/rdtmX5gJDNcliJL3q7XlKAdH31Es2BFiqDcC6+PmKUkcNRoJAbpO8rOn7ZC5cq HyOdDQRIuvomUDWRLfUf3WErPKuE1lX+HldZBG4meBQuOI7ygvlPLhUuNYzEBGek AXEgqbyCRsRCEbOSpKvOhFbhnYOuCYJ0jYgqRsnQ+LKavS9/GTt07OhDHkQAIu5F tsx8l3qfctlPO5n5KJIct4feuVFUdRPHo3IvmNfnaY/pzJ0BDZhcIdSeYC2LLEix PwCtDZvx2a1zZcwGth1J7k9wBys6NjBLrBNxX6Qotd22XKIttepOikVwmJGqvBA= -----END CERTIFICATE-----Generated at Fri Dec 19 01:19:16 2025 by rpki-client