This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer File: F5908629C575E46230F87489BF209EE6FBCF3860.cer (raw, json) Hash identifier: DgQ4h54SeKrUdDieq78jYMfEuW6KGIpJq+pIPOQUvrQ= Subject key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B84B17BF4F95F0C4A9ACC2E1A33BB9B10778078 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft caRepository: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 18 Dec 2025 03:19:26 +0000 Certificate not after: Thu 17 Dec 2026 03:24:26 +0000 Subordinate resources: IP: 103.87.148.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:84:b1:7b:f4:f9:5f:0c:4a:9a:cc:2e:1a:33:bb:9b:10:77:80:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 18 03:19:26 2025 GMT Not After : Dec 17 03:24:26 2026 GMT Subject: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:1e:92:48:de:fb:e6:a0:f5:60:2a:c6:d7: 87:29:4d:53:3e:b7:6d:4e:f6:67:6a:d9:1d:cb:d8: ba:e2:29:f3:77:eb:e1:4d:38:43:8a:0e:35:0b:90: 90:9f:70:5f:2e:2e:be:34:53:b7:99:8b:55:d8:72: 75:c8:a7:fb:f2:50:a7:ef:a7:95:25:00:89:63:20: 9c:db:c4:68:a9:a1:a1:cf:1d:73:1a:01:26:93:24: d4:14:03:20:78:38:73:cb:78:d8:9b:d5:47:03:49: 03:ab:a3:58:94:93:1c:41:b4:e7:89:a7:88:10:3e: 3a:7e:19:44:91:e3:0b:0f:bf:47:9a:a2:fd:a7:6a: 7d:cb:87:19:2e:e7:a6:16:bb:d1:06:f6:30:f7:bd: 82:9f:aa:6f:32:f3:0f:24:cd:7e:c4:ad:55:c2:b1: b6:9c:c5:cd:44:91:af:70:86:93:36:48:51:2f:7f: fb:43:f4:cf:cd:ca:aa:75:dc:7c:d2:d3:f5:81:f1: 8f:f6:99:41:bb:f5:ad:88:a6:cb:ba:02:f4:bf:cd: 30:b3:c5:17:5c:6a:ac:38:aa:bc:c2:07:dd:1a:1f: 88:c0:ac:c0:8f:b4:d1:e1:4f:91:b8:26:97:fa:35: f9:b1:31:6f:c1:0c:e7:17:08:ce:7f:bc:53:42:64: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.148.0/23 Signature Algorithm: sha256WithRSAEncryption 98:22:15:93:26:5e:b5:8e:6c:6b:f5:97:49:42:a2:df:48:86: 6f:82:78:5c:2e:24:66:5d:fc:91:f8:0a:08:ee:db:79:77:51: 43:6b:a9:c4:24:48:b6:7d:cd:ec:7d:c7:40:59:f1:1a:a5:06: 64:3d:08:98:6d:bf:4f:59:06:cb:34:d3:62:44:1e:5e:3d:08: 0c:08:63:41:88:20:63:05:1f:b0:f5:22:99:c8:22:73:b7:18: 64:6b:e2:07:23:ee:ce:6e:74:c2:25:ce:f1:1d:5e:46:30:6f: 5a:56:15:8e:74:32:21:86:32:b6:ca:fb:34:ec:83:52:60:88: d3:a3:b0:73:2f:5e:84:97:e1:d2:55:a8:a8:eb:17:9c:75:8f: 99:56:3e:2c:26:53:e2:ce:0f:48:4c:c3:3c:1a:78:66:99:ee: 3b:66:5b:c6:93:05:3d:3a:3a:ba:9f:4d:b1:f3:9b:0d:f7:46: 43:3d:df:15:44:ec:f8:fa:05:7b:56:ee:08:4a:74:32:9d:ec: e0:d2:56:4b:2b:53:b3:c1:f7:fb:f7:80:b6:ba:68:e5:48:f4: 8a:20:eb:5b:e5:ff:ab:ec:00:70:4a:de:e8:46:98:19:f5:a5: 8a:e7:41:e3:7c:91:64:86:b5:2c:64:fc:c7:98:f2:f0:9b:39: 25:4c:a2:32 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUO4Sxe/T5XwxKmswuGjO7mxB3gHgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxODAzMTkyNloX DTI2MTIxNzAzMjQyNlowMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3 NDg5QkYyMDlFRTZGQkNGMzg2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL26HpJI3vvmoPVgKsbXhylNUz63bU72Z2rZHcvYuuIp83fr4U04Q4oONQuQ kJ9wXy4uvjRTt5mLVdhydcin+/JQp++nlSUAiWMgnNvEaKmhoc8dcxoBJpMk1BQD IHg4c8t42JvVRwNJA6ujWJSTHEG054mniBA+On4ZRJHjCw+/R5qi/adqfcuHGS7n pha70Qb2MPe9gp+qbzLzDyTNfsStVcKxtpzFzUSRr3CGkzZIUS9/+0P0z83KqnXc fNLT9YHxj/aZQbv1rYimy7oC9L/NMLPFF1xqrDiqvMIH3RofiMCswI+00eFPkbgm l/o1+bExb8EM5xcIzn+8U0JkKy0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPWQhinFdeRiMPh0ib8gnub7zzhgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzZGRiNzlm LTJjMzctNDdhZi1iOTVkLTE1MzExNDYzYjM0My8wL0Y1OTA4NjI5QzU3NUU0NjIz MEY4NzQ4OUJGMjA5RUU2RkJDRjM4NjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnV5QwDQYJKoZIhvcNAQELBQADggEBAJgiFZMmXrWObGv1l0lCot9Ihm+CeFwu JGZd/JH4Cgju23l3UUNrqcQkSLZ9zex9x0BZ8RqlBmQ9CJhtv09ZBss002JEHl49 CAwIY0GIIGMFH7D1IpnIInO3GGRr4gcj7s5udMIlzvEdXkYwb1pWFY50MiGGMrbK +zTsg1JgiNOjsHMvXoSX4dJVqKjrF5x1j5lWPiwmU+LOD0hMwzwaeGaZ7jtmW8aT BT06OrqfTbHzmw33RkM93xVE7Pj6BXtW7ghKdDKd7ODSVksrU7PB9/v3gLa6aOVI 9Iog61vl/6vsAHBK3uhGmBn1pYrnQeN8kWSGtSxk/MeY8vCbOSVMojI= -----END CERTIFICATE-----Generated at Fri Dec 19 01:25:37 2025 by rpki-client