This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer (raw, json) Hash identifier: vVXwpfW16zwAdgdL5whY8VCnTxaPx3Qk6uyM2KvvvuI= Subject key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2129A90E2AF35CA9EDDD70D262473930A95269D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft caRepository: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 23:32:55 +0000 Certificate not after: Tue 02 Jun 2026 23:37:55 +0000 Subordinate resources: IP: 160.19.156.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:29:a9:0e:2a:f3:5c:a9:ed:dd:70:d2:62:47:39:30:a9:52:69:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jun 3 23:32:55 2025 GMT Not After : Jun 2 23:37:55 2026 GMT Subject: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:17:ed:0d:de:31:2d:8c:58:60:b3:89:ee:33: 91:a7:ff:2d:91:57:64:78:f1:26:21:5e:31:8f:9a: 84:82:10:50:f9:9a:45:35:b6:32:8b:66:84:57:42: a2:cb:0d:f1:ef:23:a7:ef:1b:f6:03:ab:92:99:73: 2c:30:9f:c9:32:25:6d:8e:4d:c2:6b:83:13:78:bc: 0b:22:b6:36:18:32:7e:55:c1:24:cc:51:c3:07:70: ac:cc:42:d9:13:ea:e7:42:4b:0a:ad:69:98:bb:3f: 31:21:6b:bb:06:37:fa:e2:bc:f8:76:ad:0f:19:4d: 01:48:27:8b:1b:3b:d3:dd:64:37:af:fe:c5:f5:9f: 33:29:4b:99:22:f8:9c:db:d5:8a:64:f3:f6:d2:53: 7f:0d:1c:10:33:f2:79:5c:ee:67:fb:7c:65:0f:a8: 9e:bb:64:8b:5b:aa:04:10:6a:b3:dd:1d:fb:47:a8: 99:89:24:cf:f4:6e:c1:49:98:ef:7f:3b:ee:39:66: 7e:62:43:d6:99:af:78:b0:18:de:5c:0e:ed:5d:66: f8:a1:22:ec:2c:3d:6d:ca:9d:d6:d1:27:34:0e:6b: 83:0f:be:97:8a:c0:3c:71:83:6e:e9:c2:69:60:66: df:26:bf:d1:07:62:c5:51:95:c9:12:cc:5f:55:6d: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.156.0/23 Signature Algorithm: sha256WithRSAEncryption 87:73:48:56:e9:76:33:ea:9a:46:1e:9c:72:74:10:4c:00:ff: 4e:41:9f:ec:d2:f3:48:b8:da:8d:96:cb:1b:c6:bf:90:66:e2: c7:e1:f0:37:75:b5:5f:17:3b:86:1f:ee:15:56:64:67:92:8b: cf:22:da:00:36:f8:40:77:70:df:0e:e9:77:45:c9:62:a3:18: 07:69:6c:bb:c3:ce:8c:4f:87:7e:2a:2b:e9:23:ba:60:d0:bd: 23:5f:5b:c4:f1:b7:12:42:8c:98:e5:d4:a0:e5:69:2d:8d:00: 71:3e:50:58:fb:ef:c4:7d:0e:98:5b:e6:a0:58:32:68:cd:6d: 5a:17:f9:44:91:00:05:2e:30:49:b3:7a:df:1f:d8:97:f1:86: 75:cd:d6:57:a7:71:79:3a:af:5d:7c:77:88:cc:0b:27:08:f6: ae:76:0a:a0:bb:15:34:5f:cf:ff:99:99:a7:2c:73:1d:c9:3a: 6d:6e:4d:cf:f9:47:ec:18:e9:a2:32:ac:1a:8d:67:4e:73:4f: cf:67:0b:a8:5b:f2:e6:53:c5:ab:33:e3:8d:38:7b:b8:67:83: e7:00:a2:83:7c:75:96:1c:dc:f0:ab:43:c0:48:66:41:b4:80: ba:11:4f:7f:2e:43:3a:b8:49:80:35:2c:9c:76:d4:76:b9:a6: bb:3b:5a:11 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUISmpDirzXKnt3XDSYkc5MKlSadQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYwMzIzMzI1NVoX DTI2MDYwMjIzMzc1NVowMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VF NTNBRUFFNjNFRTMwMTA5MTBFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPMX7Q3eMS2MWGCzie4zkaf/LZFXZHjxJiFeMY+ahIIQUPmaRTW2MotmhFdC ossN8e8jp+8b9gOrkplzLDCfyTIlbY5NwmuDE3i8CyK2NhgyflXBJMxRwwdwrMxC 2RPq50JLCq1pmLs/MSFruwY3+uK8+HatDxlNAUgnixs7091kN6/+xfWfMylLmSL4 nNvVimTz9tJTfw0cEDPyeVzuZ/t8ZQ+onrtki1uqBBBqs90d+0eomYkkz/RuwUmY 73877jlmfmJD1pmveLAY3lwO7V1m+KEi7Cw9bcqd1tEnNA5rgw++l4rAPHGDbunC aWBm3ya/0QdixVGVyRLMX1VtCtcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAGiNJslwYvBVs7lOurmPuMBCRDiMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyZjgwOGE0 LTlkYjMtNDY5OC1hMDdiLTQ3NjlkY2UxOGVjNy8wLzAxQTIzNDlCMjVDMThCQzE1 NkNFRTUzQUVBRTYzRUUzMDEwOTEwRTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE5wwDQYJKoZIhvcNAQELBQADggEBAIdzSFbpdjPqmkYenHJ0EEwA/05Bn+zS 80i42o2WyxvGv5Bm4sfh8Dd1tV8XO4Yf7hVWZGeSi88i2gA2+EB3cN8O6XdFyWKj GAdpbLvDzoxPh34qK+kjumDQvSNfW8TxtxJCjJjl1KDlaS2NAHE+UFj778R9Dphb 5qBYMmjNbVoX+USRAAUuMEmzet8f2JfxhnXN1lencXk6r118d4jMCycI9q52CqC7 FTRfz/+Zmacscx3JOm1uTc/5R+wY6aIyrBqNZ05zT89nC6hb8uZTxasz4404e7hn g+cAooN8dZYc3PCrQ8BIZkG0gLoRT38uQzq4SYA1LJx21Ha5prs7WhE= -----END CERTIFICATE-----Generated at Sat Dec 6 15:11:59 2025 by rpki-client