This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer File: 940E05E54E6B685EFBC6114D1E913804318364AB.cer (raw, json) Hash identifier: 6UGfy2lRw5Gp4UqFcg823tFRMuAxCH+1XafF9dUJxRI= Subject key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1E6A8A63AD037416C06F49ABFB3D52D1FBD93D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Dec 2025 19:26:47 +0000 Certificate not after: Fri 18 Dec 2026 19:31:47 +0000 Subordinate resources: IP: 103.166.160.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6a:8a:63:ad:03:74:16:c0:6f:49:ab:fb:3d:52:d1:fb:d9:3d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 19 19:26:47 2025 GMT Not After : Dec 18 19:31:47 2026 GMT Subject: CN=940E05E54E6B685EFBC6114D1E913804318364AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:bd:3d:0c:3e:44:9b:b5:0e:2a:17:7f:14: fe:41:d1:fb:ac:83:0a:54:77:ba:39:ab:ee:e1:bf: 69:c9:36:94:d8:d9:8e:3e:70:09:06:c4:b7:5d:f7: 12:5b:76:41:47:f8:08:af:bb:b8:6c:2a:44:16:5f: f8:17:72:ca:b6:35:20:d4:83:91:ed:d4:c4:c7:66: 34:81:9d:df:0c:46:0e:54:9f:7b:69:0d:c2:c4:8c: 4b:0a:8f:b0:78:fd:96:77:e3:32:80:bf:d4:73:2a: ca:2d:c6:5d:e8:c7:ed:fe:1a:89:c4:4e:54:55:27: bf:c5:56:0f:f5:73:62:2f:63:dd:b8:e4:26:59:eb: b4:e9:14:46:ce:4e:a9:28:02:71:63:47:87:c7:cb: 30:46:73:2e:2a:08:5f:24:e9:0f:43:bc:cc:9d:61: 9f:3b:0d:ff:23:08:91:dc:b2:36:2f:94:8f:5d:cb: 22:ad:e0:57:d0:e3:a5:32:ea:01:55:5a:c2:90:64: a1:42:e6:47:eb:58:50:7d:f1:ca:85:6f:02:2b:63: 51:93:c6:3f:ee:3c:cc:6f:00:70:d6:f2:e7:d8:f1: 31:c3:9e:8f:15:a3:e0:95:c8:d6:8b:1e:b2:c8:91: d6:ec:19:98:7a:57:73:a2:3e:9a:7a:5d:21:24:f9: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.160.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:b3:c2:47:4a:66:d1:e2:62:28:7a:1c:c0:76:b9:07:25:0d: 07:85:15:e7:66:f1:fa:67:09:0e:0a:0e:fe:13:65:11:8b:3a: cf:7f:12:18:9e:e0:06:ec:5e:2a:c3:da:42:ef:d1:8c:f7:27: 4e:12:b9:19:05:d0:92:6a:2f:a2:ab:75:31:7e:85:7e:bd:1e: 55:d0:8f:18:5f:06:b0:dd:d7:5b:46:d1:95:85:73:2b:a7:41: 6a:80:1c:f4:bf:a1:ba:a1:f3:88:74:6d:1f:47:7b:3d:73:33: f4:89:59:a0:8f:96:42:d8:ee:da:59:12:bb:da:9f:d5:ad:04: 68:47:2b:b3:f5:c3:4d:25:b7:0d:45:84:a1:0c:a5:7c:1f:31: 8b:7a:7f:9c:19:8c:6b:ee:25:f8:08:65:eb:15:0d:fb:7b:19: 96:67:df:7e:b6:d9:3c:55:35:8c:91:ca:4a:45:04:f0:4b:e1: 1d:a7:d1:2d:f8:df:ae:1c:b7:e7:a9:8d:3d:38:44:48:26:0f: ed:a3:79:08:22:9d:c7:7c:f1:f9:df:cb:24:64:2b:fc:eb:6a: 83:37:5f:07:cf:6f:85:e2:04:4f:1a:28:fc:dc:8a:2b:6a:5c: 70:c2:b1:43:34:9d:db:cb:45:d4:a4:1d:93:e8:c9:8f:9c:f8: 16:2f:f2:01 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHmqKY60DdBbAb0mr+z1S0fvZPUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxOTE5MjY0N1oX DTI2MTIxODE5MzE0N1owMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYx MTREMUU5MTM4MDQzMTgzNjRBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqyvT0MPkSbtQ4qF38U/kHR+6yDClR3ujmr7uG/ack2lNjZjj5wCQbEt133 Elt2QUf4CK+7uGwqRBZf+BdyyrY1INSDke3UxMdmNIGd3wxGDlSfe2kNwsSMSwqP sHj9lnfjMoC/1HMqyi3GXejH7f4aicROVFUnv8VWD/VzYi9j3bjkJlnrtOkURs5O qSgCcWNHh8fLMEZzLioIXyTpD0O8zJ1hnzsN/yMIkdyyNi+Uj13LIq3gV9DjpTLq AVVawpBkoULmR+tYUH3xyoVvAitjUZPGP+48zG8AcNby59jxMcOejxWj4JXI1ose ssiR1uwZmHpXc6I+mnpdIST5izsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJQOBeVOa2he+8YRTR6ROAQxg2SrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiMjA0MWYx LTRjZTYtNDliNC04M2E1LTMxNWYyMGU0ZTJjMy8wLzk0MEUwNUU1NEU2QjY4NUVG QkM2MTE0RDFFOTEzODA0MzE4MzY0QUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpqAwDQYJKoZIhvcNAQELBQADggEBAH6zwkdKZtHiYih6HMB2uQclDQeFFedm 8fpnCQ4KDv4TZRGLOs9/Ehie4AbsXirD2kLv0Yz3J04SuRkF0JJqL6KrdTF+hX69 HlXQjxhfBrDd11tG0ZWFcyunQWqAHPS/obqh84h0bR9Hez1zM/SJWaCPlkLY7tpZ Ervan9WtBGhHK7P1w00ltw1FhKEMpXwfMYt6f5wZjGvuJfgIZesVDft7GZZn3362 2TxVNYyRykpFBPBL4R2n0S34364ct+epjT04REgmD+2jeQgincd88fnfyyRkK/zr aoM3XwfPb4XiBE8aKPzciitqXHDCsUM0ndvLRdSkHZPoyY+c+BYv8gE= -----END CERTIFICATE-----Generated at Sat Dec 27 03:58:09 2025 by rpki-client