This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer File: 79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer (raw, json) Hash identifier: sHGID0kyIjyR1iYGVIJ/Zn3nPU8h71cLoZagt+i60dw= Subject key identifier: 79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F247D4A6CBE864509018CA6C4C9D6F19F09904A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft caRepository: rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 18 Dec 2025 03:48:59 +0000 Certificate not after: Thu 17 Dec 2026 03:53:59 +0000 Subordinate resources: IP: 103.41.169.0/24 IP: 202.4.186.0/24 IP: 2001:df0:b6::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:24:7d:4a:6c:be:86:45:09:01:8c:a6:c4:c9:d6:f1:9f:09:90:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 18 03:48:59 2025 GMT Not After : Dec 17 03:53:59 2026 GMT Subject: CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a1:6e:e4:51:5b:4b:af:c3:e9:86:a6:4a:a9: ff:7e:e4:75:e9:76:7d:95:d5:f2:7d:ed:9a:02:80: 3a:76:5c:81:c5:0c:65:95:a7:75:ea:d6:e0:b9:89: 66:a5:8d:d0:b9:4a:e7:0f:95:ad:a4:1a:a8:84:72: 2d:79:73:ab:85:82:6c:ae:dc:cd:d0:63:81:6a:3a: ab:a0:e8:c3:a4:38:9f:3a:32:0a:6e:7f:60:d9:ec: 78:1c:ff:b7:e4:98:0d:8e:4a:db:d4:96:39:0f:8a: 6d:3f:18:72:35:37:62:c4:4d:45:e0:7b:ae:21:8a: 87:9f:b8:b2:1e:f8:fa:43:3c:56:2a:eb:32:31:a4: ea:7c:91:ef:6b:5c:00:7f:e3:d7:a4:7d:6d:0f:3c: f4:b9:37:19:3e:62:39:74:85:5c:30:28:a0:dc:40: 8b:e2:8a:a1:e4:42:2d:5a:b8:57:4a:11:b0:3f:fa: cd:84:9e:a2:e1:0c:2b:64:8d:d0:f7:e9:21:54:4b: d3:bb:d9:1f:32:2a:45:8e:26:60:4f:13:a1:a2:d8: 50:23:ea:5f:f9:50:32:7c:0d:bd:70:66:f1:31:04: 3d:59:be:0a:bf:3b:2a:21:3c:4b:67:e8:04:e9:80: 04:a1:95:c3:87:ee:0d:9c:25:4f:0c:db:fe:e0:12: 6a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.169.0/24 202.4.186.0/24 IPv6: 2001:df0:b6::/48 Signature Algorithm: sha256WithRSAEncryption 76:f4:2b:53:ac:bc:96:89:dd:81:1f:80:1b:8b:16:d2:9e:a0: 89:f4:f5:d7:08:6e:df:14:d5:0b:a0:46:f2:c9:23:0d:9f:a9: 1f:da:bd:4b:72:58:c7:55:bf:04:3d:53:98:9a:b4:3b:d8:8f: d4:74:47:66:72:f5:7b:c4:66:9b:07:cd:2d:f1:db:be:f8:61: a3:78:d6:52:47:ec:e8:08:62:c4:f8:9f:bd:8b:24:59:e6:28: a4:6d:27:2e:9a:9d:3c:b1:ef:28:70:32:d0:fe:91:5d:59:dc: 6c:a0:21:ff:95:b2:85:13:f4:76:86:4e:6f:e3:5f:d6:71:39: 01:9a:f1:8a:2e:c0:c4:5b:e7:ce:96:01:e9:db:c4:d8:01:2b: c3:98:1b:ff:e9:a0:88:02:90:6c:6d:45:fc:01:26:72:7b:36: 45:91:bf:93:bd:6f:2e:0e:a6:9c:a9:2a:6f:3e:71:e0:36:99: 0c:4f:c2:7d:a4:d2:da:c8:73:ca:7f:c8:24:c5:d5:50:28:2f: 74:ca:fa:c2:95:97:12:45:e7:9f:4c:23:03:fb:4a:e5:09:e7: 2c:ce:32:23:5b:36:a3:b5:fe:f5:d8:f4:a0:9a:48:7f:e3:40: 06:cc:2f:2b:25:19:5b:c0:15:54:45:21:c9:f7:bc:8d:02:3c: fc:7e:02:39 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUXyR9Smy+hkUJAYymxMnW8Z8JkEowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxODAzNDg1OVoX DTI2MTIxNzAzNTM1OVowMzExMC8GA1UEAxMoNzlEMTU5NUIyMkM5MEFDMjc1QTQw OTBBRjNCRTBBRUY2NjVFQTgxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPOhbuRRW0uvw+mGpkqp/37kdel2fZXV8n3tmgKAOnZcgcUMZZWnderW4LmJ ZqWN0LlK5w+VraQaqIRyLXlzq4WCbK7czdBjgWo6q6Dow6Q4nzoyCm5/YNnseBz/ t+SYDY5K29SWOQ+KbT8YcjU3YsRNReB7riGKh5+4sh74+kM8VirrMjGk6nyR72tc AH/j16R9bQ889Lk3GT5iOXSFXDAooNxAi+KKoeRCLVq4V0oRsD/6zYSeouEMK2SN 0PfpIVRL07vZHzIqRY4mYE8ToaLYUCPqX/lQMnwNvXBm8TEEPVm+Cr87KiE8S2fo BOmABKGVw4fuDZwlTwzb/uASakkCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHnRWVsiyQrCdaQJCvO+Cu9mXqgbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NTg2OTE4MS1lYTU1LTQyMWQtYWJhOC02OTY4MzE0YzhkODAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ1ODY5MTgx LWVhNTUtNDIxZC1hYmE4LTY5NjgzMTRjOGQ4MC8wLzc5RDE1OTVCMjJDOTBBQzI3 NUE0MDkwQUYzQkUwQUVGNjY1RUE4MUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnKakDBADKBLowDwQCAAIwCQMHACABDfAAtjANBgkqhkiG9w0BAQsFAAOCAQEA dvQrU6y8londgR+AG4sW0p6gifT11whu3xTVC6BG8skjDZ+pH9q9S3JYx1W/BD1T mJq0O9iP1HRHZnL1e8RmmwfNLfHbvvhho3jWUkfs6AhixPifvYskWeYopG0nLpqd PLHvKHAy0P6RXVncbKAh/5WyhRP0doZOb+Nf1nE5AZrxii7AxFvnzpYB6dvE2AEr w5gb/+mgiAKQbG1F/AEmcns2RZG/k71vLg6mnKkqbz5x4DaZDE/CfaTS2shzyn/I JMXVUCgvdMr6wpWXEkXnn0wjA/tK5QnnLM4yI1s2o7X+9dj0oJpIf+NABswvKyUZ W8AVVEUhyfe8jQI8/H4COQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:19:13 2025 by rpki-client