This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer (raw, json) Hash identifier: NrGw/rOUMU1GejzE7BYBJMFTAWSkjnalU6mmRMC8m7I= Subject key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3098B44B1BE33DBABF55CBC3894511735D43E2B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft caRepository: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Dec 2025 13:38:11 +0000 Certificate not after: Fri 11 Dec 2026 13:43:11 +0000 Subordinate resources: IP: 103.13.36.0/24 IP: 2001:df0:418::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:98:b4:4b:1b:e3:3d:ba:bf:55:cb:c3:89:45:11:73:5d:43:e2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 12 13:38:11 2025 GMT Not After : Dec 11 13:43:11 2026 GMT Subject: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:c3:0b:f7:e2:08:9b:d9:d9:74:76:4c:73: 82:3f:d2:4e:d8:2d:c3:0a:0d:ac:a0:36:8a:f9:d1: eb:12:c9:98:b8:70:cd:b7:d4:5b:11:12:37:c6:66: 5b:2c:cc:64:c9:4f:5f:30:77:51:23:e2:bd:77:19: 32:91:86:f7:c1:d1:26:01:9b:e0:55:b2:6d:3d:08: df:ce:fb:1d:ce:f4:bb:03:25:f3:53:d4:64:8d:87: 44:11:e8:37:5d:6e:5e:9d:9a:2e:3f:32:b7:fa:5c: 8a:88:93:9a:dd:41:1e:b1:b4:26:eb:49:b5:18:24: f2:ba:fe:74:03:e1:f3:a2:c2:20:16:33:de:1d:cb: a5:b2:d0:3a:ca:ec:68:13:a5:27:fd:8b:d7:d4:dc: ae:3e:b8:a9:b7:6b:f4:52:93:38:31:29:3c:79:eb: c1:a9:4d:6b:ea:8d:21:f7:3b:21:fe:5d:a6:34:2e: 06:1f:f0:66:1b:e3:8d:1a:6d:d0:0c:34:cb:47:28: c4:b3:af:e8:da:e3:ef:55:57:4e:ee:65:c8:42:c8: 10:73:e8:e3:76:81:75:7b:70:d2:7f:11:3c:4b:95: bd:a3:ff:7e:7d:0f:e3:11:d8:0c:60:90:14:1a:e3: d7:18:3f:b8:d7:01:23:0e:db:38:94:86:9a:bb:15: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.36.0/24 IPv6: 2001:df0:418::/48 Signature Algorithm: sha256WithRSAEncryption 53:33:7d:da:89:ea:18:81:e7:8e:a9:c2:67:17:3b:45:29:89: 61:fd:7a:3a:57:e0:bb:f4:32:cb:ad:54:d6:7e:fb:bb:6e:67: e3:0e:04:60:d6:3c:df:20:ab:cb:61:9c:57:9e:ae:36:c2:f0: 77:d0:fa:37:98:4d:ab:51:10:bb:11:db:b2:9c:9b:2d:c6:fe: b3:d4:cb:ae:54:89:d1:fc:ba:c0:27:90:da:db:a0:ad:11:3b: 9b:6f:27:9f:db:61:d7:7a:82:b3:b9:7c:9d:ed:dc:0b:97:fd: ed:6b:4a:c5:20:e0:07:5e:e1:2f:d1:72:f2:a1:03:3d:98:88: e1:80:09:0b:e4:47:02:f1:25:e5:24:72:a1:01:18:3b:99:66: c1:8f:ab:a1:9f:e6:31:55:4e:5a:94:1f:64:f2:ed:cd:c7:72: 27:c0:60:86:2a:66:3f:43:94:75:14:d7:f8:8d:b4:49:b2:ae: 97:38:ca:10:94:15:85:a7:f1:14:3c:15:be:0f:9a:56:3d:22: 15:9e:ad:28:ac:f3:55:d9:05:eb:4e:88:03:20:d6:20:c3:82: ae:cb:9d:6e:ec:28:07:a5:8a:5e:1a:98:59:53:6d:eb:7a:48: e0:3d:ff:30:a4:81:65:b2:dc:c5:8d:45:c2:b9:78:6a:14:60: 54:8c:b8:cb -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMJi0SxvjPbq/VcvDiUURc11D4rMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMjEzMzgxMVoX DTI2MTIxMTEzNDMxMVowMzExMC8GA1UEAxMoQTRBNEM0MjZBNEY0MkEyOTgyOTYz NkZCMzIyM0ZBN0Y1QzY4NTA5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMnwwv34gib2dl0dkxzgj/STtgtwwoNrKA2ivnR6xLJmLhwzbfUWxESN8Zm WyzMZMlPXzB3USPivXcZMpGG98HRJgGb4FWybT0I3877Hc70uwMl81PUZI2HRBHo N11uXp2aLj8yt/pcioiTmt1BHrG0JutJtRgk8rr+dAPh86LCIBYz3h3LpbLQOsrs aBOlJ/2L19Tcrj64qbdr9FKTODEpPHnrwalNa+qNIfc7If5dpjQuBh/wZhvjjRpt 0Aw0y0coxLOv6Nrj71VXTu5lyELIEHPo43aBdXtw0n8RPEuVvaP/fn0P4xHYDGCQ FBrj1xg/uNcBIw7bOJSGmrsV4D8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKSkxCak9CopgpY2+zIj+n9caFCaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YmFlYmZiMy1lMjliLTQ3YzQtYmQyMS00NTcxYzMwZjQ0MWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViYWViZmIz LWUyOWItNDdjNC1iZDIxLTQ1NzFjMzBmNDQxYi8wL0E0QTRDNDI2QTRGNDJBMjk4 Mjk2MzZGQjMyMjNGQTdGNUM2ODUwOUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnDSQwDwQCAAIwCQMHACABDfAEGDANBgkqhkiG9w0BAQsFAAOCAQEAUzN92onq GIHnjqnCZxc7RSmJYf16Olfgu/Qyy61U1n77u25n4w4EYNY83yCry2GcV56uNsLw d9D6N5hNq1EQuxHbspybLcb+s9TLrlSJ0fy6wCeQ2tugrRE7m28nn9th13qCs7l8 ne3cC5f97WtKxSDgB17hL9Fy8qEDPZiI4YAJC+RHAvEl5SRyoQEYO5lmwY+roZ/m MVVOWpQfZPLtzcdyJ8BghipmP0OUdRTX+I20SbKulzjKEJQVhafxFDwVvg+aVj0i FZ6tKKzzVdkF606IAyDWIMOCrsudbuwoB6WKXhqYWVNt63pI4D3/MKSBZbLcxY1F wrl4ahRgVIy4yw== -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:54 2025 by rpki-client