This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer (raw, json) Hash identifier: 2qABrCEmeQ6zME1c4Xf/YfTh1N46SoqZbn7AWftR5BQ= Subject key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 77586961A5A455C17A7E3D80D36D3BA4D56CDF23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft caRepository: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Dec 2025 10:29:46 +0000 Certificate not after: Tue 22 Dec 2026 10:34:46 +0000 Subordinate resources: IP: 103.186.0.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:58:69:61:a5:a4:55:c1:7a:7e:3d:80:d3:6d:3b:a4:d5:6c:df:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 23 10:29:46 2025 GMT Not After : Dec 22 10:34:46 2026 GMT Subject: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:fc:aa:8e:3f:4e:1d:1b:fb:64:ae:86:e0: 5f:43:2b:c4:24:10:88:90:a1:9b:9d:8e:a1:49:1b: 0f:dc:74:ee:9f:a6:45:c1:bf:cd:1b:47:87:a8:0f: 8b:a3:2f:f6:27:fd:aa:c4:ab:95:05:29:dd:4f:82: 55:ae:fd:45:e0:9d:6a:dd:bc:27:5b:2a:0a:90:a2: d0:e9:47:ea:17:72:bf:db:86:c1:38:ba:e3:a4:a2: 07:5b:1c:9a:4f:6c:9a:5c:db:e2:7e:2e:b6:c7:bc: 19:8d:54:46:58:b8:ab:c6:cf:55:fb:9f:01:8a:0a: b3:5f:0c:cf:cd:58:14:16:11:f8:ab:97:2d:9e:c4: 13:fb:9d:13:96:ff:8c:da:2c:23:c3:18:0d:0a:a9: 7c:47:3d:77:90:d7:94:e4:fb:2e:76:4b:e9:07:42: 1b:f1:10:12:a5:9c:aa:0d:55:ef:fb:b4:d0:59:ac: 34:64:06:55:23:f1:65:d0:b3:72:39:db:6b:f9:32: 3c:ce:46:49:73:02:9a:ab:9a:c1:1f:b5:80:59:2f: 8e:0f:37:45:bc:fc:78:ed:59:64:7d:95:52:fe:03: 15:0f:ef:3d:a8:ad:a9:af:02:72:56:2c:88:1b:69: d3:ab:11:a1:03:b0:77:b8:ae:18:38:4c:d8:8c:25: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.0.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:08:9d:ab:ce:0f:9e:e0:f8:ab:8d:4c:b9:f5:b5:aa:16:e3: 21:3d:ea:3d:6d:44:11:45:86:db:1c:4d:4c:95:b3:27:dd:b9: 2c:e4:9c:3d:02:73:de:9b:97:41:45:d2:27:db:a8:37:02:cd: 86:ad:a6:df:0a:f3:81:b2:fb:77:df:d8:ae:49:f4:53:55:ce: ac:2b:ae:21:97:d8:65:0b:b8:93:b7:0b:de:1e:42:f7:24:3d: 44:40:fa:2b:c7:e1:e4:86:96:c3:18:9d:b0:6a:76:fc:14:fc: 74:ee:60:b1:86:0b:0b:42:ce:e7:9c:c6:93:ec:12:58:0c:cc: 46:c0:46:90:f3:c8:73:36:eb:19:4f:c3:33:0a:2d:88:09:e7: 3c:fe:f6:3b:68:c4:95:ae:e6:24:a1:2d:8d:d5:ae:93:3c:e4: d4:a8:2e:b4:a8:13:3c:8c:06:da:1e:33:ec:e0:bc:18:9b:98: e0:14:87:f6:0f:45:f4:ae:9f:9e:d2:2d:f5:f3:5d:7d:bc:23: c9:d4:c8:5f:4a:50:37:97:40:d5:c9:e4:93:94:bf:5b:a3:8c: a7:f0:2e:9b:ee:28:71:38:3c:1f:6f:d2:7d:57:81:36:5c:db: 78:28:0d:64:1b:54:db:e4:4b:4a:b6:50:d1:0a:89:82:00:fc: 8b:a8:16:06 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUd1hpYaWkVcF6fj2A0207pNVs3yMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyMzEwMjk0NloX DTI2MTIyMjEwMzQ0NlowMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2 MzhGQ0YxODM0N0ExQURBNUQ3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4z/KqOP04dG/tkrobgX0MrxCQQiJChm52OoUkbD9x07p+mRcG/zRtHh6gP i6Mv9if9qsSrlQUp3U+CVa79ReCdat28J1sqCpCi0OlH6hdyv9uGwTi646SiB1sc mk9smlzb4n4utse8GY1URli4q8bPVfufAYoKs18Mz81YFBYR+KuXLZ7EE/udE5b/ jNosI8MYDQqpfEc9d5DXlOT7LnZL6QdCG/EQEqWcqg1V7/u00FmsNGQGVSPxZdCz cjnba/kyPM5GSXMCmquawR+1gFkvjg83Rbz8eO1ZZH2VUv4DFQ/vPaitqa8CclYs iBtp06sRoQOwd7iuGDhM2IwleUUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOCWdUnvMtien/Fjj88YNHoa2l1wMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzN2E2ZGQ4 LWE4NDMtNDY5OC1hNWYzLTNlZWM0NjhkMTRhNC8wL0UwOTY3NTQ5RUYzMkQ4OUU5 RkYxNjM4RkNGMTgzNDdBMUFEQTVENzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnugAwDQYJKoZIhvcNAQELBQADggEBAJsInavOD57g+KuNTLn1taoW4yE96j1t RBFFhtscTUyVsyfduSzknD0Cc96bl0FF0ifbqDcCzYatpt8K84Gy+3ff2K5J9FNV zqwrriGX2GULuJO3C94eQvckPURA+ivH4eSGlsMYnbBqdvwU/HTuYLGGCwtCzuec xpPsElgMzEbARpDzyHM26xlPwzMKLYgJ5zz+9jtoxJWu5iShLY3VrpM85NSoLrSo EzyMBtoeM+zgvBibmOAUh/YPRfSun57SLfXzXX28I8nUyF9KUDeXQNXJ5JOUv1uj jKfwLpvuKHE4PB9v0n1XgTZc23goDWQbVNvkS0q2UNEKiYIA/IuoFgY= -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:02 2025 by rpki-client