This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer (raw, json) Hash identifier: uw9sDHSqDNYPvcxbSdXBcjtZnj6Axfd6olwC3up2IdU= Subject key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 392B961911A0F2AD522F98D92C74308D9D5995FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft caRepository: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Dec 2025 01:41:54 +0000 Certificate not after: Fri 18 Dec 2026 01:46:54 +0000 Subordinate resources: IP: 103.55.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2b:96:19:11:a0:f2:ad:52:2f:98:d9:2c:74:30:8d:9d:59:95:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 19 01:41:54 2025 GMT Not After : Dec 18 01:46:54 2026 GMT Subject: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:85:43:e0:ba:8f:4f:e5:2b:3a:2d:e0:47:f4: 53:37:d1:db:13:79:b1:e1:40:9c:ac:1d:e9:b0:8e: 93:86:73:12:20:a6:17:51:87:48:1c:a2:32:0b:8b: 9f:99:01:e2:09:2e:f0:fd:69:ee:8c:dd:6b:f1:06: 71:bb:c1:c4:32:b1:85:45:6d:a1:b7:dd:8c:e0:19: 7b:66:f5:30:65:76:3f:f9:e2:ce:0e:8c:6a:9b:54: eb:d6:50:88:98:4f:ae:49:66:7f:04:e7:90:a7:35: 6e:9e:48:f9:43:dc:e8:8f:7f:90:80:9f:1b:ed:45: df:b2:77:ff:ec:99:c7:ab:b3:59:06:44:44:83:16: 44:36:aa:b3:3d:19:18:1b:e0:d6:49:38:f6:6b:9a: 2b:f8:e9:94:42:22:d9:87:7d:6e:99:fb:dd:5d:a8: 96:75:c8:3c:47:63:36:f8:ce:e8:43:5f:e9:36:dc: e4:c5:83:b5:0e:02:14:33:30:28:2f:e5:71:31:72: 63:25:c8:3a:9c:b0:4d:81:de:7e:30:b4:1d:7d:d9: d2:94:e4:58:a1:59:25:35:6a:ce:e6:f8:36:1f:5b: 79:14:d3:b2:c1:3e:fa:4f:26:3d:ad:49:30:61:55: 92:14:8a:2e:cb:1e:a9:19:60:05:26:b7:9a:0e:fa: d1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.22.0/23 Signature Algorithm: sha256WithRSAEncryption 43:08:91:93:84:f2:b2:e8:6e:e3:b8:d2:c6:dc:ba:eb:02:68: 81:ba:8e:ad:b4:73:34:e2:36:78:c3:43:cf:81:0d:f4:79:df: 8b:75:04:38:1e:b6:40:a3:96:ca:f3:6d:fb:6b:f2:91:80:75: e2:ca:88:21:8d:17:3b:79:87:71:b2:d5:dc:7f:6e:e0:e0:ab: 50:53:02:da:c0:6d:0b:f6:3a:a4:5d:ab:40:67:66:db:d4:5d: b1:3d:b5:19:c0:d9:b1:f4:e2:fe:07:73:1f:c4:d3:85:bf:da: 09:7e:39:d6:3a:ca:f7:fa:b1:79:70:65:49:36:b4:85:c5:ca: 8e:c6:76:0e:ae:51:b5:bf:99:48:fa:d3:a8:b6:77:d0:b3:b1: 9e:d7:fb:52:b8:43:a9:e5:97:43:5c:17:c3:d5:71:45:4a:ac: 8d:83:d5:37:07:0b:84:c8:64:b9:4c:b8:0f:2d:bd:e0:0a:c9: 76:f7:ed:10:45:9a:36:9f:06:c7:4e:53:6b:8a:b4:4f:2c:f3: 5a:43:0e:bb:b5:71:46:5d:84:08:10:bb:32:01:00:1e:e8:6a: 69:4c:9e:8c:d7:aa:04:a0:0f:25:08:9f:31:80:7c:cc:25:01: fb:32:59:1c:0a:c3:11:b8:4d:53:84:a5:72:3c:9d:38:6a:8c: 63:e9:51:a2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOSuWGRGg8q1SL5jZLHQwjZ1ZlfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxOTAxNDE1NFoX DTI2MTIxODAxNDY1NFowMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5 MjdFNUFEM0M2M0M4MTk2MTUyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmFQ+C6j0/lKzot4Ef0UzfR2xN5seFAnKwd6bCOk4ZzEiCmF1GHSByiMguL n5kB4gku8P1p7ozda/EGcbvBxDKxhUVtobfdjOAZe2b1MGV2P/nizg6MaptU69ZQ iJhPrklmfwTnkKc1bp5I+UPc6I9/kICfG+1F37J3/+yZx6uzWQZERIMWRDaqsz0Z GBvg1kk49muaK/jplEIi2Yd9bpn73V2olnXIPEdjNvjO6ENf6Tbc5MWDtQ4CFDMw KC/lcTFyYyXIOpywTYHefjC0HX3Z0pTkWKFZJTVqzub4Nh9beRTTssE++k8mPa1J MGFVkhSKLsseqRlgBSa3mg760XsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLSkIZL4zb6TXOWSflrTxjyBlhUtMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3OTRkYTQw LWIzN2UtNGZlNi04ZjQwLTczYjNiMGJlMDE5Zi8wL0I0QTQyMTkyRjhDREJFOTM1 Q0U1OTI3RTVBRDNDNjNDODE5NjE1MkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnNxYwDQYJKoZIhvcNAQELBQADggEBAEMIkZOE8rLobuO40sbcuusCaIG6jq20 czTiNnjDQ8+BDfR534t1BDgetkCjlsrzbftr8pGAdeLKiCGNFzt5h3Gy1dx/buDg q1BTAtrAbQv2OqRdq0BnZtvUXbE9tRnA2bH04v4Hcx/E04W/2gl+OdY6yvf6sXlw ZUk2tIXFyo7Gdg6uUbW/mUj606i2d9CzsZ7X+1K4Q6nll0NcF8PVcUVKrI2D1TcH C4TIZLlMuA8tveAKyXb37RBFmjafBsdOU2uKtE8s81pDDru1cUZdhAgQuzIBAB7o amlMnozXqgSgDyUInzGAfMwlAfsyWRwKwxG4TVOEpXI8nThqjGPpUaI= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:19 2025 by rpki-client