This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer (raw, json) Hash identifier: 7Zv5Ar9WjO3xXkFDD8i+NXq/Rhf/fgmFHxn2MxUWI2E= Subject key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 30A635D76EA78F4FBACC7309C0673F6EC32959C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft caRepository: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 10 Dec 2025 07:41:48 +0000 Certificate not after: Wed 09 Dec 2026 07:46:48 +0000 Subordinate resources: IP: 103.147.10.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a6:35:d7:6e:a7:8f:4f:ba:cc:73:09:c0:67:3f:6e:c3:29:59:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 07:41:48 2025 GMT Not After : Dec 9 07:46:48 2026 GMT Subject: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:eb:16:5d:e7:93:58:35:b4:07:85:19:f8: 30:81:81:18:20:e1:e2:9f:df:13:d8:98:bb:66:6f: ac:83:19:cf:1d:c6:bd:f6:59:84:68:52:ba:54:4b: 96:77:59:d5:cc:89:98:f5:03:43:66:1d:2e:d3:f3: 62:58:ad:97:e1:46:ce:c3:1d:3d:34:14:a5:9a:30: 19:8b:75:fb:88:18:2e:d5:84:a7:08:91:e8:08:21: 21:fc:b5:22:8a:ad:0e:12:45:96:8c:28:d6:41:23: 6d:6e:41:22:cd:ea:c6:4f:10:4e:49:56:6e:1e:3f: 1d:e5:44:4a:d2:1d:21:4f:59:c1:01:7d:6d:95:51: 1c:5b:36:de:b8:7b:9d:4b:97:f2:de:16:ab:1b:50: fd:9d:9d:b5:32:93:a5:94:34:8c:f6:e9:ce:9f:f6: 80:39:eb:40:16:cd:3b:b9:3c:ad:c5:dd:c5:a3:d6: a9:87:fd:9d:29:35:5c:6d:1c:5c:96:31:27:7b:c4: 84:a0:16:af:5d:a1:a4:56:5b:99:4e:c8:7a:bf:1a: 0b:94:a0:16:ef:aa:12:7b:57:d8:8f:ec:82:1b:79: d3:01:6e:3c:39:ff:b5:55:42:d3:cf:9e:9b:20:05: cb:83:d3:3a:2e:36:10:4f:80:a0:98:22:14:16:8a: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.10.0/23 Signature Algorithm: sha256WithRSAEncryption 89:93:38:7f:c5:54:8c:59:e9:7e:eb:ed:f6:8a:46:a3:50:c8: bb:f0:74:7e:08:e9:27:2a:a9:c3:96:e8:af:1f:a0:b2:03:c8: dc:4e:21:72:c2:1e:46:64:35:02:41:78:20:21:54:f3:71:aa: e3:cc:37:e2:ed:06:5b:05:54:d0:b5:88:5f:2b:40:e0:66:29: 1b:d8:18:f9:7d:8b:42:ee:c0:aa:3c:33:af:78:ee:49:89:cf: b0:83:2e:ed:88:b3:27:f6:5c:1f:28:f2:a0:e2:81:a2:3f:a6: 65:f3:39:35:9e:42:07:bb:fa:d8:2c:ac:dd:10:d8:b0:11:a8: 21:a8:9c:25:4a:26:df:50:4d:d3:0f:a9:72:d5:07:ea:53:79: ce:56:de:18:61:80:60:b9:1a:13:32:20:cd:21:d9:b8:80:6a: 90:8f:0d:3a:f0:12:3c:6c:d3:cc:05:c4:9a:33:da:91:cd:bc: c0:02:36:b5:84:19:08:d8:86:36:7c:06:fb:4d:44:46:12:ed: 5b:e0:c1:59:85:52:1d:b2:dd:5a:af:6d:c3:b2:d9:04:6c:dc: 47:54:02:64:4f:73:03:fd:df:f8:25:e1:4e:13:aa:aa:fe:36: 73:57:79:76:fd:3f:02:75:d0:bf:26:62:49:89:fc:a4:86:78: fb:74:b1:d0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMKY1126nj0+6zHMJwGc/bsMpWccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMDA3NDE0OFoX DTI2MTIwOTA3NDY0OFowMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNF MUNBMzhBM0JGOTA5ODc5QzA1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUj6xZd55NYNbQHhRn4MIGBGCDh4p/fE9iYu2ZvrIMZzx3GvfZZhGhSulRL lndZ1cyJmPUDQ2YdLtPzYlitl+FGzsMdPTQUpZowGYt1+4gYLtWEpwiR6AghIfy1 IoqtDhJFlowo1kEjbW5BIs3qxk8QTklWbh4/HeVEStIdIU9ZwQF9bZVRHFs23rh7 nUuX8t4WqxtQ/Z2dtTKTpZQ0jPbpzp/2gDnrQBbNO7k8rcXdxaPWqYf9nSk1XG0c XJYxJ3vEhKAWr12hpFZbmU7Ier8aC5SgFu+qEntX2I/sght50wFuPDn/tVVC08+e myAFy4PTOi42EE+AoJgiFBaKPQ8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM8jYukhabx8W5Phyjijv5CYecBaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1NjJjZjNk LWQ5ZjctNDhhOS05MTU5LTlmMGQ3YTQ3Njc5MC8wL0NGMjM2MkU5MjE2OUJDN0M1 QjkzRTFDQTM4QTNCRjkwOTg3OUMwNUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnkwowDQYJKoZIhvcNAQELBQADggEBAImTOH/FVIxZ6X7r7faKRqNQyLvwdH4I 6ScqqcOW6K8foLIDyNxOIXLCHkZkNQJBeCAhVPNxquPMN+LtBlsFVNC1iF8rQOBm KRvYGPl9i0LuwKo8M6947kmJz7CDLu2Isyf2XB8o8qDigaI/pmXzOTWeQge7+tgs rN0Q2LARqCGonCVKJt9QTdMPqXLVB+pTec5W3hhhgGC5GhMyIM0h2biAapCPDTrw Ejxs08wFxJoz2pHNvMACNrWEGQjYhjZ8BvtNREYS7VvgwVmFUh2y3VqvbcOy2QRs 3EdUAmRPcwP93/gl4U4Tqqr+NnNXeXb9PwJ10L8mYkmJ/KSGePt0sdA= -----END CERTIFICATE-----Generated at Sun Dec 21 06:58:02 2025 by rpki-client