This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer (raw, json) Hash identifier: OysHpWxhvlJab0Pq9M/ybhW6LNgdo/G9wK5CypwQlVs= Subject key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2EE1F50C0B3F1C6A04D43EAD2FE86413EF268896 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft caRepository: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Nov 2025 05:20:36 +0000 Certificate not after: Wed 04 Nov 2026 05:25:36 +0000 Subordinate resources: IP: 139.0.0.0/16 IP: 139.192.0.0/14 IP: 139.228.0.0/16 IP: 139.255.0.0 -- 140.0.255.255 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e1:f5:0c:0b:3f:1c:6a:04:d4:3e:ad:2f:e8:64:13:ef:26:88:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 5 05:20:36 2025 GMT Not After : Nov 4 05:25:36 2026 GMT Subject: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:b3:df:c9:24:56:64:40:e8:29:7a:73:f4: fd:18:ec:60:62:0a:fc:3c:df:ad:c0:c6:fe:71:f2: a3:3b:fa:44:50:0c:c8:15:33:ab:9f:30:6f:db:66: fe:06:e6:54:e9:05:40:fc:67:a2:19:9e:c0:2b:f8: 05:6e:3d:13:60:07:ee:bf:3d:e6:50:c1:0a:d5:57: 8b:64:43:39:65:43:7f:f4:7a:37:38:e1:73:3c:0d: f9:09:07:f2:64:a4:8c:c8:d4:4c:8e:a2:e4:b9:a9: d1:e0:be:b1:91:26:2e:43:d5:5f:e0:8f:86:fa:db: a2:f2:fc:cf:a3:57:38:e9:25:63:36:da:a0:81:90: 32:db:f2:3b:b3:cb:b3:64:c4:89:33:2f:4b:6f:d0: 0a:c9:9f:ab:b1:8f:60:99:cb:71:a1:46:fa:5f:7d: 47:d3:75:33:65:ea:f4:bd:fc:be:b7:4a:ab:df:f9: ee:a9:01:7c:38:ee:48:ba:91:b6:ee:ec:d2:21:3c: 84:8d:94:6b:c9:2b:e1:db:de:68:9d:9a:e2:00:44: 9e:ba:b2:a5:dd:50:68:b4:0f:74:e1:b7:96:58:8b: c8:ea:ff:c2:a7:f2:28:4a:ff:36:73:ed:f9:fe:74: de:89:8e:da:83:fe:88:3e:59:09:5d:85:71:b3:15: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.0.0.0/16 139.192.0.0/14 139.228.0.0/16 139.255.0.0-140.0.255.255 Signature Algorithm: sha256WithRSAEncryption 94:4c:32:19:34:2e:42:91:c7:ad:59:e4:36:3c:67:14:47:b4: 68:03:36:e8:45:2f:65:0d:ed:ee:20:69:f0:68:8b:5f:ec:30: b3:3e:07:29:9f:f0:9f:da:2d:2e:70:40:ba:d7:27:fb:1e:33: b3:bf:8e:01:97:7e:ba:b3:4e:48:74:7d:5b:1c:d9:5c:8a:fe: cd:40:a8:38:3f:57:c2:85:3d:1c:7d:09:85:31:44:8b:6e:15: 44:cc:a1:b4:cd:08:a8:1f:ac:e5:ca:93:88:0c:27:7e:9d:0a: 1e:a0:fd:dd:4a:4e:11:bb:57:83:7a:07:bf:09:b2:20:52:1b: 43:c6:ce:8d:b8:6e:66:06:bd:82:77:ec:95:9a:a7:fe:d5:fd: c3:14:11:bf:65:28:7c:3e:c8:0a:6c:59:c1:2c:ec:1e:46:dd: 2b:89:f2:f7:bb:f0:0e:2e:be:3d:e0:71:65:cb:95:1d:9a:0d: 00:33:ea:a9:02:77:77:63:ca:4d:c3:a5:db:0f:46:c9:f6:06: 8e:46:1d:42:13:30:d8:ae:b9:6c:16:c3:0a:cb:1d:89:47:ac: 94:ff:96:c9:ee:d3:91:e4:30:d6:0b:71:7b:49:55:cb:b0:0b: 1a:5c:eb:b4:9a:e4:e3:70:e8:a9:a6:ca:34:f3:96:14:69:8b: fb:18:d2:3e -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIULuH1DAs/HGoE1D6tL+hkE+8miJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTEwNTA1MjAzNloX DTI2MTEwNDA1MjUzNlowMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVE NTI5QzMwMTVGOUZFNTFCMjgwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcWs9/JJFZkQOgpenP0/RjsYGIK/DzfrcDG/nHyozv6RFAMyBUzq58wb9tm /gbmVOkFQPxnohmewCv4BW49E2AH7r895lDBCtVXi2RDOWVDf/R6NzjhczwN+QkH 8mSkjMjUTI6i5Lmp0eC+sZEmLkPVX+CPhvrbovL8z6NXOOklYzbaoIGQMtvyO7PL s2TEiTMvS2/QCsmfq7GPYJnLcaFG+l99R9N1M2Xq9L38vrdKq9/57qkBfDjuSLqR tu7s0iE8hI2Ua8kr4dveaJ2a4gBEnrqypd1QaLQPdOG3lliLyOr/wqfyKEr/NnPt +f503omO2oP+iD5ZCV2FcbMVei0CAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA9EvyWNdfLRxEXVKcMBX5/lGygPMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExM2RlM2Vj LTRkM2MtNDQwMi1hN2I4LThhMWI5NjIyNmU3NS8wLzBGNDRCRjI1OEQ3NUYyRDFD NDQ1RDUyOUMzMDE1RjlGRTUxQjI4MEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMCEEAgABMBsD AwCLAAMDAovAAwMAi+QwCgMDAIv/AwMAjAAwDQYJKoZIhvcNAQELBQADggEBAJRM Mhk0LkKRx61Z5DY8ZxRHtGgDNuhFL2UN7e4gafBoi1/sMLM+Bymf8J/aLS5wQLrX J/seM7O/jgGXfrqzTkh0fVsc2VyK/s1AqDg/V8KFPRx9CYUxRItuFUTMobTNCKgf rOXKk4gMJ36dCh6g/d1KThG7V4N6B78JsiBSG0PGzo24bmYGvYJ37JWap/7V/cMU Eb9lKHw+yApsWcEs7B5G3SuJ8ve78A4uvj3gcWXLlR2aDQAz6qkCd3djyk3DpdsP Rsn2Bo5GHUITMNiuuWwWwwrLHYlHrJT/lsnu05HkMNYLcXtJVcuwCxpc67Sa5ONw 6KmmyjTzlhRpi/sY0j4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:20 2025 by rpki-client