This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer (raw, json) Hash identifier: D0iOhqyPHczamDmyOtGa1Zz5nVC2BOlIfoRj/cRaiVQ= Subject key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0648D8863879091897C3A31EFD82C53B0F143F41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft caRepository: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Dec 2025 09:49:48 +0000 Certificate not after: Tue 22 Dec 2026 09:54:48 +0000 Subordinate resources: IP: 103.179.252.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 09:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:48:d8:86:38:79:09:18:97:c3:a3:1e:fd:82:c5:3b:0f:14:3f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 23 09:49:48 2025 GMT Not After : Dec 22 09:54:48 2026 GMT Subject: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:91:0c:c6:1c:df:f1:3e:28:99:76:bf:b1: ab:01:97:12:3f:63:e0:42:d6:96:d0:12:a6:4f:66: ba:22:b1:18:a3:d1:38:28:83:1c:3d:d9:e7:ae:11: b0:44:ee:5d:15:35:9c:71:b5:44:b7:e8:ab:f8:0e: 5a:43:ef:03:99:f9:4b:ee:37:05:2d:3e:95:ba:08: 25:85:0a:fc:35:d9:47:c5:4d:d1:16:e5:0c:95:19: d7:50:5a:ae:27:33:3c:4e:1c:b1:1f:e5:a4:ce:0d: 8d:9c:4f:bd:6a:22:87:c8:ba:60:d9:eb:56:9c:04: a6:ff:8a:41:e2:68:52:8c:51:ab:44:2d:98:6d:93: 3d:11:c5:6c:8c:e2:2c:95:fd:28:e5:01:59:8d:a2: ce:64:2f:f8:2a:5d:12:c9:e0:6d:10:9c:19:22:2a: d1:d5:e9:27:fe:45:ac:e5:84:0d:fd:e9:c2:20:55: 58:48:f9:db:f5:2b:55:d6:be:60:da:2a:68:57:8c: 83:43:69:18:63:b2:2a:4c:cf:2d:b2:c6:c3:d9:27: 44:11:fd:1a:7a:ec:37:73:0d:f0:f6:a7:93:59:43: d0:d7:51:14:fd:2d:c9:62:87:fb:ca:a0:dd:5a:a7: 18:0a:38:0a:9d:a1:f0:c9:ef:14:1e:2a:58:e4:f8: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.252.0/23 Signature Algorithm: sha256WithRSAEncryption 68:70:28:66:6d:8b:a0:00:42:f2:6c:62:09:0b:fe:3a:69:46: 1d:53:6b:1e:53:e0:64:0d:42:be:ac:bb:75:9f:87:b9:25:c7: 01:5d:72:5a:7e:84:8b:e1:19:98:c9:c0:cd:07:c9:4b:58:bf: 8f:c0:6d:f6:30:35:70:f1:2b:89:a0:ab:22:a4:e1:ce:b0:be: 40:1c:4a:75:c3:4d:f4:1e:b8:e8:7d:9d:16:91:09:21:e2:6d: 34:62:41:21:56:bf:e9:d7:38:6c:b8:72:7f:15:0f:ff:eb:f9: f8:da:d2:53:fb:2e:e9:6e:76:21:2b:54:48:26:0e:f8:51:98: 78:85:23:50:1c:c4:6b:74:28:23:3a:34:fb:be:5c:2b:72:31: 07:b1:2a:2a:85:a9:5e:61:16:6a:91:48:0e:d2:d3:61:ed:ae: df:85:cc:29:03:a0:f4:ee:74:90:10:e0:1f:08:72:d6:28:3d: cc:24:81:1c:ea:21:50:d8:d5:c7:4c:72:f8:64:10:d3:d3:17: 6d:34:6b:17:71:30:c9:ba:59:78:51:8e:c8:13:10:e9:15:64: 52:de:9b:a4:75:81:3b:a7:df:4b:94:f7:e5:99:57:b5:1f:99: b6:24:2c:7d:12:02:a3:f1:e5:74:34:8e:23:b2:ad:af:bb:df: d8:c6:12:86 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBkjYhjh5CRiXw6Me/YLFOw8UP0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyMzA5NDk0OFoX DTI2MTIyMjA5NTQ0OFowMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhC ODBEQTZBNUVENjZFNEI1Q0YyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIwkQzGHN/xPiiZdr+xqwGXEj9j4ELWltASpk9muiKxGKPROCiDHD3Z564R sETuXRU1nHG1RLfoq/gOWkPvA5n5S+43BS0+lboIJYUK/DXZR8VN0RblDJUZ11Ba riczPE4csR/lpM4NjZxPvWoih8i6YNnrVpwEpv+KQeJoUoxRq0QtmG2TPRHFbIzi LJX9KOUBWY2izmQv+CpdEsngbRCcGSIq0dXpJ/5FrOWEDf3pwiBVWEj52/UrVda+ YNoqaFeMg0NpGGOyKkzPLbLGw9knRBH9GnrsN3MN8Pank1lD0NdRFP0tyWKH+8qg 3VqnGAo4Cp2h8MnvFB4qWOT4T3sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIrLUgsOLeZs5Si4Daal7Wbktc8uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4NWJmZjQx LTI0MjAtNDJiMS05YjgzLWQ0MWMxODA0M2Q2NS8wLzhBQ0I1MjBCMEUyREU2NkNF NTI4QjgwREE2QTVFRDY2RTRCNUNGMkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFns/wwDQYJKoZIhvcNAQELBQADggEBAGhwKGZti6AAQvJsYgkL/jppRh1Tax5T 4GQNQr6su3Wfh7klxwFdclp+hIvhGZjJwM0HyUtYv4/AbfYwNXDxK4mgqyKk4c6w vkAcSnXDTfQeuOh9nRaRCSHibTRiQSFWv+nXOGy4cn8VD//r+fja0lP7LuludiEr VEgmDvhRmHiFI1AcxGt0KCM6NPu+XCtyMQexKiqFqV5hFmqRSA7S02Htrt+FzCkD oPTudJAQ4B8IctYoPcwkgRzqIVDY1cdMcvhkENPTF200axdxMMm6WXhRjsgTEOkV ZFLem6R1gTun30uU9+WZV7UfmbYkLH0SAqPx5XQ0jiOyra+739jGEoY= -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:53 2025 by rpki-client