This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer File: 843FDF32A52D11795BBFB0918ABF926E0A210870.cer (raw, json) Hash identifier: T3Lp6uQsvvnGGqlzbwroNvbWcrcBMzrdTEmmnYYmnhM= Subject key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 207A7F8DDCF5B678CABA808E2CA61443EFB1A161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft caRepository: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Dec 2025 17:19:13 +0000 Certificate not after: Fri 18 Dec 2026 17:24:13 +0000 Subordinate resources: IP: 210.87.124.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7a:7f:8d:dc:f5:b6:78:ca:ba:80:8e:2c:a6:14:43:ef:b1:a1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 19 17:19:13 2025 GMT Not After : Dec 18 17:24:13 2026 GMT Subject: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:0d:03:d7:d5:b4:e5:21:4a:22:0d:b2:08: be:70:ec:33:4d:19:6d:03:ae:5f:d5:ce:1a:f5:c8: c3:1c:89:56:64:32:45:f3:79:e2:d4:62:4e:4a:c7: a2:e4:9d:e2:db:3f:0b:49:20:69:ff:15:b8:7c:1c: b3:05:af:a2:4a:f5:27:33:26:b7:5b:a0:d5:ae:3a: 4c:35:59:9e:9d:5f:b4:59:db:4a:9c:fc:c8:36:48: 66:30:00:bc:60:3d:ff:40:dc:d4:e6:7d:b1:13:dd: f0:a2:76:c1:12:1c:2e:d6:e9:ac:fc:ae:56:b8:e4: 57:e9:29:fe:29:ba:9b:1a:d0:47:53:ee:ec:67:b2: 49:07:c8:d2:fa:71:5b:f7:13:b9:da:97:00:66:87: a7:58:dc:b7:05:03:36:33:98:d2:69:95:ca:fb:32: d8:71:1e:2f:11:82:00:57:1f:3a:4e:41:ae:cd:67: 45:c3:15:a5:e2:0d:3e:be:c0:10:e9:65:03:cd:e1: 25:fd:80:d0:21:50:6c:c7:de:db:af:68:26:92:f7: 21:39:f0:67:a1:ff:15:4c:d4:db:a2:ff:6d:7d:50: 76:3b:59:da:e9:06:02:cf:8d:c9:e8:5c:29:e0:c6: c4:bb:8b:2e:a6:8c:fd:66:c9:96:3f:e4:e6:26:e5: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.124.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:2b:cd:90:d7:67:d5:77:1e:20:ae:34:37:d6:7e:64:49:63: d0:d5:0c:ce:41:42:a7:98:1a:14:a3:b5:61:a9:7b:73:97:03: 31:bc:48:4d:01:81:46:00:b6:92:53:18:ce:30:7d:1d:30:dd: 85:bd:8a:30:36:50:6e:a4:98:57:1f:27:5e:57:7d:0b:5a:8e: 5a:8a:4d:23:d9:85:61:72:c1:42:5e:2f:7e:35:11:d8:04:8f: a5:90:84:c3:84:f5:c4:3d:b5:d3:f0:4b:e9:a1:a6:48:72:1c: 19:cd:0f:cc:45:7f:44:0e:3f:5d:12:c6:81:05:12:6f:f6:c9: 0e:5f:87:ed:74:80:e4:9d:d7:32:10:b2:70:bf:47:77:cb:8e: b2:63:1d:72:b6:bc:0b:d8:7f:8b:0f:80:35:32:43:10:9c:14: 69:b3:38:66:e8:88:a4:c1:dd:0a:12:bf:5b:aa:05:5a:50:66: 10:d2:77:e8:85:3d:cf:74:08:67:1e:c7:9b:bd:ab:4e:1a:e5: b5:65:57:aa:a1:cf:dd:e8:8e:8c:48:00:8f:69:93:5c:1e:4d: c5:16:12:8b:92:b3:10:fc:65:72:8f:15:6e:d6:d2:f0:20:05: 93:00:01:5c:be:7c:5f:f4:40:fb:7c:95:89:58:45:2e:00:f0: e5:0a:4c:42 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIHp/jdz1tnjKuoCOLKYUQ++xoWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxOTE3MTkxM1oX DTI2MTIxODE3MjQxM1owMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZC MDkxOEFCRjkyNkUwQTIxMDg3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8CDQPX1bTlIUoiDbIIvnDsM00ZbQOuX9XOGvXIwxyJVmQyRfN54tRiTkrH ouSd4ts/C0kgaf8VuHwcswWvokr1JzMmt1ug1a46TDVZnp1ftFnbSpz8yDZIZjAA vGA9/0Dc1OZ9sRPd8KJ2wRIcLtbprPyuVrjkV+kp/im6mxrQR1Pu7GeySQfI0vpx W/cTudqXAGaHp1jctwUDNjOY0mmVyvsy2HEeLxGCAFcfOk5Brs1nRcMVpeINPr7A EOllA83hJf2A0CFQbMfe269oJpL3ITnwZ6H/FUzU26L/bX1QdjtZ2ukGAs+Nyehc KeDGxLuLLqaM/WbJlj/k5iblZ3MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIQ/3zKlLRF5W7+wkYq/km4KIQhwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3YmU4Yjdj LTIzMmYtNDdlOC05Y2RkLTg4MTdkMzliNzBlYS8wLzg0M0ZERjMyQTUyRDExNzk1 QkJGQjA5MThBQkY5MjZFMEEyMTA4NzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHSV3wwDQYJKoZIhvcNAQELBQADggEBAGwrzZDXZ9V3HiCuNDfWfmRJY9DVDM5B QqeYGhSjtWGpe3OXAzG8SE0BgUYAtpJTGM4wfR0w3YW9ijA2UG6kmFcfJ15XfQta jlqKTSPZhWFywUJeL341EdgEj6WQhMOE9cQ9tdPwS+mhpkhyHBnND8xFf0QOP10S xoEFEm/2yQ5fh+10gOSd1zIQsnC/R3fLjrJjHXK2vAvYf4sPgDUyQxCcFGmzOGbo iKTB3QoSv1uqBVpQZhDSd+iFPc90CGcex5u9q04a5bVlV6qhz93ojoxIAI9pk1we TcUWEouSsxD8ZXKPFW7W0vAgBZMAAVy+fF/0QPt8lYlYRS4A8OUKTEI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:03 2025 by rpki-client