This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer (raw, json) Hash identifier: 4xXcH21EGNYTDuNdSMICZliYpvhFCf0bS4ZbLNGvxXU= Subject key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 244C4EA17FA18BD208BBF809E8B5995F9237A202 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 17 Nov 2025 12:34:36 +0000 Certificate not after: Mon 16 Nov 2026 12:39:36 +0000 Subordinate resources: IP: 160.22.94.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4c:4e:a1:7f:a1:8b:d2:08:bb:f8:09:e8:b5:99:5f:92:37:a2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 17 12:34:36 2025 GMT Not After : Nov 16 12:39:36 2026 GMT Subject: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:08:0a:cf:cf:f8:ae:70:15:24:78:dc:a0:b6: 79:48:63:9c:31:50:4d:dc:3d:e3:db:33:14:2c:85: b2:25:ad:3c:98:08:bf:82:4e:de:b6:03:c6:34:0d: 0c:18:e6:20:d2:1d:56:5c:ed:2c:06:83:c7:2f:55: ea:27:a0:b2:6b:58:3e:05:21:ed:5d:58:e2:81:74: 9c:5e:32:4a:1b:9c:69:51:a1:37:9b:72:b7:dd:9f: da:af:b8:b2:55:54:b1:b3:41:af:e9:ee:b5:ab:ab: 99:95:c8:8f:c8:5e:e5:b1:c7:0d:ae:ac:ac:c4:64: 95:30:94:6c:94:af:ee:77:25:fb:09:e1:19:53:78: 99:2a:20:77:dc:df:ba:02:57:3d:c6:34:d6:47:3f: ff:8c:77:7c:48:bd:4a:ac:4c:ab:49:41:e7:f0:59: 1e:4d:9c:54:83:b6:65:e5:89:5e:55:eb:de:de:04: 9c:a6:79:7a:12:50:8d:2d:f6:8b:58:2d:21:00:2b: 4f:71:1c:f1:97:82:aa:a6:3f:e4:ca:5a:3c:44:99: 9c:17:f7:88:98:75:54:d3:c7:5e:b5:f9:60:c6:10: 8e:ed:b7:61:e4:d8:ca:8c:26:86:a8:5b:5e:5d:e5: 10:23:28:8b:d2:47:14:4d:b6:25:a7:e9:79:cd:6c: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.94.0/23 Signature Algorithm: sha256WithRSAEncryption 67:f8:65:bc:3f:71:b6:df:a6:74:6f:b2:8c:cf:5b:dc:6a:ed: a3:27:38:6e:03:d2:d9:80:96:6b:05:82:16:10:c6:e7:85:85: 56:8c:68:12:5d:68:25:0a:48:ff:3c:8c:55:b6:4d:01:ed:96: e8:ae:c5:0c:07:d0:9a:5e:7d:ac:ab:74:63:76:3d:84:79:23: 6f:5a:39:15:fc:5e:00:2b:60:d5:09:4e:3a:ef:cb:0c:59:a2: 0f:73:13:5a:a8:e7:4b:b3:7d:4f:99:7e:64:a6:bc:9d:bc:c2: 48:9a:04:8e:f6:a8:cc:21:7f:7b:2d:45:c7:c0:81:ed:b2:c4: c2:72:43:0b:02:54:54:90:d9:90:c9:83:b7:f7:fd:d2:e8:ee: 11:19:0f:54:41:70:95:8a:13:64:49:d1:d4:60:2d:2d:e7:35: 52:aa:da:95:db:70:a2:14:2c:58:d2:71:d9:34:95:85:6f:fd: 67:ee:99:be:73:a8:f9:56:bc:8f:30:2e:e5:53:b7:7d:20:73: e4:dc:e6:02:3b:4c:48:e0:24:6b:d9:84:e6:cc:ac:9e:6a:26: d2:ff:7b:e0:b9:3b:97:9d:5c:40:90:1a:9d:b5:a9:55:c5:a3: 28:3c:0e:cb:b0:d8:ef:c5:3d:67:a2:4c:d2:4d:a3:c6:03:69: 15:fd:46:69 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJExOoX+hi9IIu/gJ6LWZX5I3ogIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTExNzEyMzQzNloX DTI2MTExNjEyMzkzNlowMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0 ODA1M0IwRTEzQkZFNEJEMzUwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPAICs/P+K5wFSR43KC2eUhjnDFQTdw949szFCyFsiWtPJgIv4JO3rYDxjQN DBjmINIdVlztLAaDxy9V6iegsmtYPgUh7V1Y4oF0nF4yShucaVGhN5tyt92f2q+4 slVUsbNBr+nutaurmZXIj8he5bHHDa6srMRklTCUbJSv7ncl+wnhGVN4mSogd9zf ugJXPcY01kc//4x3fEi9SqxMq0lB5/BZHk2cVIO2ZeWJXlXr3t4EnKZ5ehJQjS32 i1gtIQArT3Ec8ZeCqqY/5MpaPESZnBf3iJh1VNPHXrX5YMYQju23YeTYyowmhqhb Xl3lECMoi9JHFE22Jafpec1s63cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCycjWrbQ6dfHfpIBTsOE7/kvTUKMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMDc3Mzg2 LTMwMWItNGZmMS04NzFiLTYyMzJiNWYzYmUwOS8wLzJDOUM4RDZBREI0M0E3NUYx REZBNDgwNTNCMEUxM0JGRTRCRDM1MEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFl4wDQYJKoZIhvcNAQELBQADggEBAGf4Zbw/cbbfpnRvsozPW9xq7aMnOG4D 0tmAlmsFghYQxueFhVaMaBJdaCUKSP88jFW2TQHtluiuxQwH0JpefayrdGN2PYR5 I29aORX8XgArYNUJTjrvywxZog9zE1qo50uzfU+ZfmSmvJ28wkiaBI72qMwhf3st RcfAge2yxMJyQwsCVFSQ2ZDJg7f3/dLo7hEZD1RBcJWKE2RJ0dRgLS3nNVKq2pXb cKIULFjScdk0lYVv/Wfumb5zqPlWvI8wLuVTt30gc+Tc5gI7TEjgJGvZhObMrJ5q JtL/e+C5O5edXECQGp21qVXFoyg8Dsuw2O/FPWeiTNJNo8YDaRX9Rmk= -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:02 2025 by rpki-client