This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
File:                     8C888E996588527BC5EF8ABD293676C3463A1A22.cer (raw, json)
Hash identifier:          OK3GcNM4BO3a/0t7p8crLW2E8oC3MPiVJ6CsPFGs7iw=
Subject key identifier:   8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5CF00EC0AEE38231207B950712909B889DD52BC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 05:41:39 +0000
Certificate not after:    Fri 11 Dec 2026 05:46:39 +0000
Subordinate resources:    IP: 103.97.4.0/22
                          IP: 2401:8040::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 13:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f0:0e:c0:ae:e3:82:31:20:7b:95:07:12:90:9b:88:9d:d5:2b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 12 05:41:39 2025 GMT
            Not After : Dec 11 05:46:39 2026 GMT
        Subject: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:72:db:c0:2b:4d:5d:cd:33:e8:41:00:24:
                    57:da:f2:29:63:e8:11:74:9a:65:67:09:6b:5f:25:
                    70:14:64:6e:64:bc:aa:b8:5f:64:0d:e5:68:c9:ce:
                    67:44:11:16:33:06:16:49:4a:d5:bb:f9:8f:02:79:
                    76:d1:fe:46:79:a9:d2:3a:60:97:ee:32:ef:9f:41:
                    fd:2f:27:2b:d0:88:7f:a5:8b:70:ea:db:68:00:40:
                    b0:b4:33:d1:0e:e3:08:17:b8:e9:f8:a8:ab:9a:01:
                    b5:21:b8:3a:06:28:1f:23:0a:95:8c:57:de:ca:42:
                    4b:c8:cf:3e:1a:39:75:78:25:e6:68:f1:45:0a:f2:
                    13:b0:c3:20:19:f9:49:4e:51:6a:37:1f:d7:00:b4:
                    11:62:ea:b0:a9:ca:aa:c2:de:f9:8e:4d:75:7d:ab:
                    4d:b9:69:16:fc:21:11:01:15:9d:f5:46:9c:1d:76:
                    f9:73:9c:e9:e2:5e:33:ec:e6:94:a0:b3:39:6f:ff:
                    15:04:43:ec:5a:01:21:86:5f:8d:36:51:48:41:76:
                    b6:e6:b1:00:03:4f:53:a8:6b:85:73:fa:89:42:5f:
                    b8:55:12:95:dc:ba:08:eb:47:b7:35:cc:fc:24:1c:
                    19:5a:c0:1c:43:60:d5:fb:7e:d3:80:b5:88:a3:25:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.4.0/22
                IPv6:
                  2401:8040::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:43:0d:1d:a8:dd:24:94:98:ab:d6:97:18:5d:c0:30:ca:2d:
         cd:02:d2:bb:80:b4:60:2b:26:10:5e:c7:fa:07:f1:13:75:6a:
         34:62:3f:ad:5e:8f:b7:1e:59:73:22:63:e5:9b:b9:37:f6:a7:
         cb:9a:44:7f:44:20:d9:94:eb:c8:26:e7:72:11:4f:af:78:77:
         a2:51:11:01:fd:9d:15:ca:e1:2f:a9:10:de:cd:17:29:fd:13:
         d9:19:0e:57:ec:a6:ba:dc:db:1a:e8:8f:4b:5f:02:a0:12:c0:
         8a:56:17:60:de:12:2b:52:d4:2a:fa:ac:55:de:e5:1f:72:be:
         2f:ab:17:54:4e:fe:ca:54:47:17:e2:40:a0:db:49:f2:98:41:
         56:ea:5c:00:a5:c9:9d:45:c4:d6:51:f5:1f:84:d0:cb:59:1c:
         44:99:59:e6:e1:e0:98:4f:f9:fa:25:fd:c6:5c:02:ad:86:bd:
         d7:03:1e:73:99:64:e9:34:4e:3f:29:34:5a:39:62:f4:76:88:
         8d:24:d6:41:d1:4b:09:58:46:2c:4f:46:78:0b:a9:de:4f:f8:
         d3:c4:66:cb:3f:e9:04:89:78:80:ae:89:85:e0:65:32:e7:dd:
         c8:16:d9:ec:72:99:dc:e6:d2:c1:9b:a1:4a:79:4e:02:9e:40:
         86:dc:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----