This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer
File: C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.cer (raw, json)
Hash identifier: ljtjf6iPypf4zNKC4m+BK/7ARDwDKBW2XY4UWkQJG6s=
Subject key identifier: C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Certificate issuer: /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial: 49658FD8F7684C87832BD980D8E91D915323E986
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Manifest: rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft
caRepository: rsync://rpki.sunoaki.net/repo/net186/0/
Notify URL: https://rpki.sunoaki.net/rrdp/notification.xml
Certificate not before: Sun 21 Dec 2025 01:28:54 +0000
Certificate not after: Sun 20 Dec 2026 01:33:54 +0000
Subordinate resources: IP: 2602:2a3::/40
Validation: OK
Signature path: rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 05:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:65:8f:d8:f7:68:4c:87:83:2b:d9:80:d8:e9:1d:91:53:23:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Validity
Not Before: Dec 21 01:28:54 2025 GMT
Not After : Dec 20 01:33:54 2026 GMT
Subject: CN=C21D158E625A33F62F0397A5B8D7D689EE2FC4B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:06:23:74:88:ab:22:d7:b7:3e:98:79:19:
a1:cf:3b:6d:30:7c:7e:8b:82:23:10:ef:60:75:a5:
3e:8b:92:74:89:ff:3b:a9:bf:29:7b:26:8c:87:75:
bb:e0:d5:8c:7d:30:5d:67:1f:81:8a:73:2d:ce:2e:
91:10:e3:0d:4c:4d:68:89:a5:3f:e9:00:3b:9a:a7:
54:73:12:96:7d:5f:80:85:76:54:2a:ef:90:2c:61:
32:11:4e:2a:4b:9c:bd:95:89:75:f0:03:7f:fd:c1:
d2:cf:e9:0d:1e:0a:8d:0a:00:9b:8f:55:6d:1e:01:
fb:f1:65:58:b5:f6:ef:97:2f:04:4f:66:eb:39:ad:
ec:5a:0d:cf:4a:5f:b1:f3:67:e8:0e:39:36:d7:1e:
b0:e3:53:e0:a1:72:b7:ee:37:f1:e6:86:cf:78:7f:
94:24:70:9f:6b:ea:5d:87:68:2d:5b:0e:42:09:1b:
ca:b2:a4:a4:41:93:af:57:5e:e2:1c:dd:72:df:f5:
ae:e0:f4:1a:da:87:d9:92:97:1f:90:07:9c:2d:44:
a5:0c:d2:08:b7:6e:64:c0:76:65:07:32:8b:31:91:
35:cf:7a:84:17:5a:5c:4a:4b:0b:77:03:ec:2b:90:
57:f5:49:a5:c6:bb:bb:de:fa:77:a8:df:47:74:4b:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C2:1D:15:8E:62:5A:33:F6:2F:03:97:A5:B8:D7:D6:89:EE:2F:C4:B6
X509v3 Authority Key Identifier:
keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.sunoaki.net/repo/net186/0/
RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/net186/0/C21D158E625A33F62F0397A5B8D7D689EE2FC4B6.mft
RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:2a3::/40
Signature Algorithm: sha256WithRSAEncryption
89:99:c6:cf:31:68:cb:21:c8:25:12:bc:b7:0b:b7:da:1f:fb:
2e:5e:ca:72:2b:3e:f9:dc:91:2f:7d:55:71:dd:37:12:59:f3:
54:86:0d:25:7f:63:94:c3:4d:5b:14:a6:3b:f6:f6:c2:4c:13:
0e:be:73:0f:f0:3c:c3:b4:8d:19:e7:b5:f9:2c:63:be:10:77:
01:a8:17:b8:f5:51:7d:cd:14:a4:ff:69:cc:73:f1:da:7e:f2:
f1:66:4b:51:1c:01:c2:c5:82:a1:53:ae:f7:ac:cd:40:8a:43:
cc:0c:40:59:17:25:fb:8a:ea:c9:96:74:0a:5e:91:f3:3f:42:
89:f2:32:f0:6b:c6:a3:3f:00:36:ee:64:f4:bb:ca:0b:6f:e5:
2a:0f:af:a8:b9:de:6c:ee:cf:3a:d3:9e:1a:c8:91:c3:d4:4d:
ef:f8:de:29:05:ad:10:4b:c0:61:c9:08:d1:66:e7:c1:1e:ff:
92:f0:06:3f:7a:b1:0a:2c:e7:df:85:3a:c7:70:0d:8a:cc:ca:
e9:5a:4c:ad:24:15:91:e8:46:71:b5:e7:ba:cc:ca:82:fa:a5:
a1:4b:b6:23:90:e6:55:ee:8d:aa:79:4b:84:e7:b3:9f:de:76:
c8:17:84:a7:44:4c:c5:6b:a8:4b:1a:14:db:f9:8b:38:a7:c9:
c1:9a:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:59:04 2025 by rpki-client