This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer (raw, json) Hash identifier: PbEog8dq4PYgxZInDcqUrxlf8+r9XeC34ETRophyH9g= Subject key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3D2515DA41307E7ED461C528DAAE42A1B3FE76E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft caRepository: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Dec 2025 23:11:02 +0000 Certificate not after: Fri 11 Dec 2026 23:16:02 +0000 Subordinate resources: IP: 103.184.128.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:25:15:da:41:30:7e:7e:d4:61:c5:28:da:ae:42:a1:b3:fe:76:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 12 23:11:02 2025 GMT Not After : Dec 11 23:16:02 2026 GMT Subject: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:9a:02:30:1b:82:bd:e7:d0:2a:a5:04:b6: 37:2d:9b:85:e2:62:0a:ec:d4:8a:fb:46:fc:8c:fe: 51:17:0d:01:d6:96:96:47:50:66:bb:14:6e:53:50: ad:a0:70:dc:de:fc:e5:9f:f2:a6:cb:65:57:f0:06: 06:88:27:21:a1:37:36:f4:83:a4:05:a0:b2:31:52: 1c:c0:ba:6e:d3:a4:a4:47:51:2a:13:2a:14:99:20: 26:aa:ce:d4:10:c4:5e:94:93:78:03:31:c1:7d:aa: 21:9a:71:f7:be:60:90:3b:b9:a1:6b:43:67:96:5e: e2:0e:4d:b9:40:d8:a7:bd:4f:ba:10:57:ad:13:c6: 17:51:15:8c:3c:e6:a6:d2:10:16:00:58:79:12:c0: 0d:da:0f:4a:2b:27:21:a4:62:1a:f1:62:97:d0:9b: 63:be:2d:63:26:d5:73:85:05:6d:4b:93:eb:33:c3: 5c:84:9e:8c:4f:4d:17:02:93:59:00:56:6a:30:c9: 18:34:06:a2:2d:ae:28:21:46:a2:9e:df:49:3c:50: 0b:ec:40:06:f0:71:e2:3e:62:83:09:e3:2b:8b:df: 70:1e:35:7d:56:04:27:f1:ab:e2:1b:a4:39:1c:50: ba:93:96:88:8b:02:41:97:13:2e:be:d8:8f:0b:d2: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.128.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:3a:e7:17:b1:96:64:87:0d:69:f7:44:e7:42:3f:4e:ce:ae: 43:d9:a7:57:5e:3a:5e:88:16:47:7e:64:eb:f8:9a:00:d3:be: 39:50:36:e7:ff:e2:e0:53:84:ec:0f:c2:31:a3:c6:7c:a5:bf: 27:45:86:19:c6:ba:a1:55:66:2e:48:03:0b:a8:e2:4c:e2:3a: 00:af:ce:e6:37:5f:e6:2b:d3:39:d5:02:20:68:df:b3:31:29: 7d:a1:57:c4:06:fe:19:00:cb:8a:cb:c0:4c:bb:80:9b:c6:e6: 3a:e7:e1:db:f4:a5:f7:bf:e6:f2:bf:6f:d2:b9:00:37:2c:45: 33:e9:9e:6c:54:b7:7e:5c:a0:70:4f:fd:19:be:32:1c:93:a3: f5:36:d2:90:30:81:5e:bd:b6:e5:66:52:bd:34:27:49:bf:0f: e9:ef:27:77:18:2e:6e:e7:70:33:0c:41:5d:e0:9c:20:da:b5: 5b:f7:1e:6a:90:73:df:49:da:bf:22:20:de:ec:9a:ec:40:21: 0b:a4:00:bd:b1:b3:7a:72:c4:cd:d5:58:9f:4b:3a:64:84:c2: 82:0c:48:f1:8f:e4:f2:3c:4f:f7:39:0c:99:a4:50:fa:dc:3e: 45:18:34:29:70:46:61:8b:d8:2e:a2:82:af:88:99:98:d0:e1: f7:ba:83:59 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPSUV2kEwfn7UYcUo2q5CobP+duIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMjIzMTEwMloX DTI2MTIxMTIzMTYwMlowMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMz QzJFM0VGODAyRUExRTVDRDc5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL24mgIwG4K959AqpQS2Ny2bheJiCuzUivtG/Iz+URcNAdaWlkdQZrsUblNQ raBw3N785Z/ypstlV/AGBognIaE3NvSDpAWgsjFSHMC6btOkpEdRKhMqFJkgJqrO 1BDEXpSTeAMxwX2qIZpx975gkDu5oWtDZ5Ze4g5NuUDYp71PuhBXrRPGF1EVjDzm ptIQFgBYeRLADdoPSisnIaRiGvFil9CbY74tYybVc4UFbUuT6zPDXISejE9NFwKT WQBWajDJGDQGoi2uKCFGop7fSTxQC+xABvBx4j5igwnjK4vfcB41fVYEJ/Gr4huk ORxQupOWiIsCQZcTLr7YjwvS5l8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKM/90llqWCNnlw8Lj74AuoeXNeUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5M2UzZDI2 LTRhYWYtNGU5Ni1hZDQ5LTUyNzNmMGE0ZTZlZC8wL0EzM0ZGNzQ5NjVBOTYwOEQ5 RTVDM0MyRTNFRjgwMkVBMUU1Q0Q3OTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnuIAwDQYJKoZIhvcNAQELBQADggEBAB465xexlmSHDWn3ROdCP07OrkPZp1de Ol6IFkd+ZOv4mgDTvjlQNuf/4uBThOwPwjGjxnylvydFhhnGuqFVZi5IAwuo4kzi OgCvzuY3X+Yr0znVAiBo37MxKX2hV8QG/hkAy4rLwEy7gJvG5jrn4dv0pfe/5vK/ b9K5ADcsRTPpnmxUt35coHBP/Rm+MhyTo/U20pAwgV69tuVmUr00J0m/D+nvJ3cY Lm7ncDMMQV3gnCDatVv3HmqQc99J2r8iIN7smuxAIQukAL2xs3pyxM3VWJ9LOmSE woIMSPGP5PI8T/c5DJmkUPrcPkUYNClwRmGL2C6igq+ImZjQ4fe6g1k= -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:36 2025 by rpki-client