This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer (raw, json) Hash identifier: XKfi+mtCX5o9DuwSFZ+u3DJXwefN0Z3aFxeKXyh+icM= Subject key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 673546CDE43316183A31EF74ED3C0B81C5975DB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft caRepository: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Dec 2025 15:11:52 +0000 Certificate not after: Fri 11 Dec 2026 15:16:52 +0000 Subordinate resources: IP: 117.54.0.0/16 IP: 180.233.152.0/21 IP: 202.53.224.0/19 IP: 202.153.224.0/19 IP: 202.159.0.0/18 IP: 202.159.96.0/19 IP: 2402:ac00::/32 IP: 2404:170::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:35:46:cd:e4:33:16:18:3a:31:ef:74:ed:3c:0b:81:c5:97:5d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 12 15:11:52 2025 GMT Not After : Dec 11 15:16:52 2026 GMT Subject: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:56:69:47:01:ca:e8:30:c6:06:05:39:3d: 0d:4f:83:39:8d:00:44:34:51:0e:b2:35:21:7e:4c: 71:c1:ad:67:f2:ef:dc:1f:92:60:e4:4e:4a:c3:68: 52:09:ca:8e:3c:64:5f:1f:15:93:d1:b6:fe:9c:69: 15:70:e0:86:39:41:49:fb:fd:c8:50:89:29:66:27: 03:9f:81:d2:72:ce:ec:1e:10:dd:c8:a2:9e:c5:e9: f6:e7:29:95:73:5d:cc:ed:ab:92:85:02:09:29:d0: 99:7c:ee:95:b4:36:be:6e:6d:67:19:7b:c3:98:c6: 67:b4:b3:98:69:b0:63:2d:92:39:25:2a:15:3b:81: c3:cb:be:a7:3c:35:62:7a:06:5f:26:c4:07:a7:6c: cb:fd:41:ae:eb:6b:39:c9:69:42:37:3c:10:17:37: 25:10:fc:1b:58:af:4a:2c:06:7e:7c:a2:1c:cb:0c: 3c:8f:22:5b:f4:f3:b3:7b:53:79:e8:7d:26:90:96: a7:a2:11:c1:8c:76:88:21:6e:93:d4:cd:12:b0:b2: 1f:ac:7c:f9:f2:39:9c:73:35:1e:ce:6b:eb:22:35: fb:df:66:c0:69:5f:3c:c5:ea:61:ea:c6:1e:26:03: 88:4e:fc:b3:23:17:0f:f0:62:0c:aa:59:3f:85:b3: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.54.0.0/16 180.233.152.0/21 202.53.224.0/19 202.153.224.0/19 202.159.0.0/18 202.159.96.0/19 IPv6: 2402:ac00::/32 2404:170::/32 Signature Algorithm: sha256WithRSAEncryption 61:7c:b6:e7:9f:d1:3c:55:e7:07:7c:fe:45:7a:f2:24:07:80: d9:83:22:3c:e0:52:5e:d7:f1:f5:3c:54:41:42:1a:ae:75:95: ed:08:0d:84:a8:78:3e:41:d9:6a:1a:d8:45:34:65:e3:bc:0f: 5f:67:2d:0d:e9:2d:74:82:67:d8:4b:e3:8e:44:28:ee:bb:01: 5c:f2:31:45:cb:6c:34:3b:30:11:f3:24:5c:4c:ca:b6:26:d4: 51:f1:a9:ca:65:52:5a:ed:f6:f0:bb:30:ed:c0:62:e9:ef:94: 75:c2:11:07:21:85:68:0e:3e:10:dc:9e:ca:23:bf:aa:49:bf: 6a:2f:57:b8:ae:5d:72:8e:27:52:60:5e:77:59:0f:9e:74:3c: a9:8a:fa:46:74:79:52:46:34:32:9e:b3:74:df:ad:35:0e:5e: f9:5f:23:b2:3b:66:2a:12:5e:28:68:23:ed:cb:aa:92:57:e9: 4f:f8:44:f4:e5:6a:e1:98:b7:33:36:ca:a9:90:79:0d:7c:ac: 30:96:d6:70:cc:83:7d:0c:38:69:45:4c:a6:ba:7a:39:0d:2e: 5d:59:c6:02:d0:c8:e6:76:70:12:06:d2:01:e1:0f:7a:31:2b: 0e:4a:90:48:99:f4:03:55:e8:84:62:ad:5e:d6:95:70:ca:df: 14:95:f0:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZzVGzeQzFhg6Me907TwLgcWXXbcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMjE1MTE1MloX DTI2MTIxMTE1MTY1MlowMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVF Mzg3QzdEOUE1RDk0RDRGODMwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlTVmlHAcroMMYGBTk9DU+DOY0ARDRRDrI1IX5MccGtZ/Lv3B+SYOROSsNo UgnKjjxkXx8Vk9G2/pxpFXDghjlBSfv9yFCJKWYnA5+B0nLO7B4Q3ciinsXp9ucp lXNdzO2rkoUCCSnQmXzulbQ2vm5tZxl7w5jGZ7SzmGmwYy2SOSUqFTuBw8u+pzw1 YnoGXybEB6dsy/1BrutrOclpQjc8EBc3JRD8G1ivSiwGfnyiHMsMPI8iW/Tzs3tT eeh9JpCWp6IRwYx2iCFuk9TNErCyH6x8+fI5nHM1Hs5r6yI1+99mwGlfPMXqYerG HiYDiE78syMXD/BiDKpZP4Wz6GUCAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLjCorGyEWSvjq7jh8fZpdlNT4MIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YjFlNTdl LWEwZjEtNDY3Zi1hNDZmLTU1YTMxNTdiMGQ2NS8wL0I4QzJBMkIxQjIxMTY0QUY4 RUFFRTM4N0M3RDlBNUQ5NEQ0RjgzMDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMCkEAgABMCMD AwB1NgMEA7TpmAMEBco14AMEBcqZ4AMEBsqfAAMEBcqfYDAUBAIAAjAOAwUAJAKs AAMFACQEAXAwDQYJKoZIhvcNAQELBQADggEBAGF8tuef0TxV5wd8/kV68iQHgNmD IjzgUl7X8fU8VEFCGq51le0IDYSoeD5B2Woa2EU0ZeO8D19nLQ3pLXSCZ9hL445E KO67AVzyMUXLbDQ7MBHzJFxMyrYm1FHxqcplUlrt9vC7MO3AYunvlHXCEQchhWgO PhDcnsojv6pJv2ovV7iuXXKOJ1JgXndZD550PKmK+kZ0eVJGNDKes3TfrTUOXvlf I7I7ZioSXihoI+3LqpJX6U/4RPTlauGYtzM2yqmQeQ18rDCW1nDMg30MOGlFTKa6 ejkNLl1ZxgLQyOZ2cBIG0gHhD3oxKw5KkEiZ9ANV6IRirV7WlXDK3xSV8GM= -----END CERTIFICATE-----Generated at Mon Dec 22 03:57:41 2025 by rpki-client