This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer (raw, json) Hash identifier: rbDuAbEb4yEsPfVAl/jqJyzlZTQCi1IqXI8/xK1d6FM= Subject key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B998120D3C26E0B02E60EA34C77786D7C1C1453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft caRepository: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 14 Dec 2025 02:31:21 +0000 Certificate not after: Sun 13 Dec 2026 02:36:21 +0000 Subordinate resources: IP: 103.26.128.0/22 IP: 2401:1340::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:99:81:20:d3:c2:6e:0b:02:e6:0e:a3:4c:77:78:6d:7c:1c:14:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 14 02:31:21 2025 GMT Not After : Dec 13 02:36:21 2026 GMT Subject: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:bd:ea:99:47:ed:86:f5:47:43:99:8c:a2: ed:7a:59:ea:6c:a4:1b:dd:22:93:24:af:cd:75:cf: cb:a9:72:9e:ba:ad:c3:ee:43:33:9f:60:b8:b8:68: 29:29:09:29:f2:ee:24:cd:a5:6a:b6:c9:fd:92:45: 03:23:1d:df:ea:f9:ec:97:78:1d:07:59:24:42:df: bb:b5:ef:3c:19:ad:a7:46:62:f0:2c:72:ad:3c:cd: 63:f4:d4:6b:b5:c4:07:f9:d2:c0:fd:68:b3:40:f3: 25:6c:29:c1:50:21:66:a4:92:cd:e6:1b:f4:ca:78: 00:d4:73:2b:d0:17:cf:5b:e2:57:2a:18:e3:f6:5e: 1f:94:39:14:03:13:36:e6:1c:e6:70:7e:9e:f0:c3: fd:49:f1:24:20:55:8e:02:f2:42:0c:32:10:a9:d6: 0a:52:83:0c:d4:93:fe:69:8a:0a:d7:b8:3d:77:ce: b7:7e:14:36:09:4b:53:82:66:54:52:75:08:f8:fd: be:17:5c:b6:cc:70:72:4f:8b:3f:8b:ba:ba:43:53: 2f:f8:d1:63:31:ce:b7:bb:a0:28:c0:8d:48:d6:b3: 96:eb:38:8d:d1:9d:4a:e8:bb:37:9f:0b:58:94:1a: a2:4d:ae:4b:00:f6:09:e7:de:79:5a:af:1c:72:59: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.128.0/22 IPv6: 2401:1340::/32 Signature Algorithm: sha256WithRSAEncryption 46:76:db:bc:40:2a:d4:12:91:98:8f:27:7f:73:14:3d:d0:8c: 7f:d8:40:7d:d5:e4:64:36:a6:62:9a:a2:da:63:54:12:36:a4: cc:45:27:cd:40:09:fd:43:5b:92:15:86:c5:da:bd:79:7f:e3: 88:9c:1f:dc:e0:b2:0a:52:48:e5:8d:fe:19:13:24:38:9a:ba: 93:b5:ee:2d:2b:0f:36:a2:ab:bd:bf:32:42:84:30:aa:7a:d6: 68:03:10:1d:be:98:95:a3:af:6d:98:10:c3:2c:a8:b9:11:87: 77:4d:19:f0:91:ca:33:76:1a:83:86:c5:cd:eb:b0:33:d3:f1: 36:72:7d:f0:46:ac:08:02:cc:35:29:a3:91:73:f8:91:5e:06: dc:33:a3:a8:2e:09:86:3a:3e:68:67:9c:1b:94:0f:65:7b:1f: 15:e6:28:47:6d:9a:dc:af:e7:0f:81:68:c2:09:1d:23:e4:82: 77:54:68:58:27:72:22:1c:25:7e:03:60:1d:14:2a:c7:79:e2: 71:be:60:09:9f:87:43:ec:60:58:04:14:3a:b5:23:91:e4:31: 19:45:fe:2d:81:e8:54:e5:64:fa:de:d7:e6:62:fc:d6:a9:dd: 9b:2e:5e:2b:ef:36:86:ed:ab:75:fa:cd:5c:a8:db:80:a3:41: 54:dd:40:89 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUG5mBINPCbgsC5g6jTHd4bXwcFFMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxNDAyMzEyMVoX DTI2MTIxMzAyMzYyMVowMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4 MkM3RjUwM0I5NUZGQjY0QTRERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUYveqZR+2G9UdDmYyi7XpZ6mykG90ikySvzXXPy6lynrqtw+5DM59guLho KSkJKfLuJM2larbJ/ZJFAyMd3+r57Jd4HQdZJELfu7XvPBmtp0Zi8CxyrTzNY/TU a7XEB/nSwP1os0DzJWwpwVAhZqSSzeYb9Mp4ANRzK9AXz1viVyoY4/ZeH5Q5FAMT NuYc5nB+nvDD/UnxJCBVjgLyQgwyEKnWClKDDNST/mmKCte4PXfOt34UNglLU4Jm VFJ1CPj9vhdctsxwck+LP4u6ukNTL/jRYzHOt7ugKMCNSNazlus4jdGdSui7N58L WJQaok2uSwD2CefeeVqvHHJZppkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJpjXUInQ6qMMcqCx/UDuV/7ZKTfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkYTMyOTY3 LWQ1NTgtNGEzNC1iZThlLTY0ZWY0Y2ZjMDRlMy8wLzlBNjM1RDQyMjc0M0FBOEMz MUNBODJDN0Y1MDNCOTVGRkI2NEE0REYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnGoAwDQQCAAIwBwMFACQBE0AwDQYJKoZIhvcNAQELBQADggEBAEZ227xAKtQS kZiPJ39zFD3QjH/YQH3V5GQ2pmKaotpjVBI2pMxFJ81ACf1DW5IVhsXavXl/44ic H9zgsgpSSOWN/hkTJDiaupO17i0rDzaiq72/MkKEMKp61mgDEB2+mJWjr22YEMMs qLkRh3dNGfCRyjN2GoOGxc3rsDPT8TZyffBGrAgCzDUpo5Fz+JFeBtwzo6guCYY6 PmhnnBuUD2V7HxXmKEdtmtyv5w+BaMIJHSPkgndUaFgnciIcJX4DYB0UKsd54nG+ YAmfh0PsYFgEFDq1I5HkMRlF/i2B6FTlZPre1+Zi/Nap3ZsuXivvNobtq3X6zVyo 24CjQVTdQIk= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:22 2025 by rpki-client