This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer (raw, json) Hash identifier: xRrmHEwMJmicJiqSSk4AxtgClqFHKkojzr5KKrGCfLI= Subject key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3149B661C38738D72A15F7ED28D2C4CE0A1E9D65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft caRepository: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 22 Dec 2025 12:53:43 +0000 Certificate not after: Mon 21 Dec 2026 12:58:43 +0000 Subordinate resources: IP: 157.15.66.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 13:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:49:b6:61:c3:87:38:d7:2a:15:f7:ed:28:d2:c4:ce:0a:1e:9d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 22 12:53:43 2025 GMT Not After : Dec 21 12:58:43 2026 GMT Subject: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:40:51:59:c9:db:9e:5b:8c:d7:25:84:57:be: 74:df:e1:51:c4:ae:19:94:8b:0f:d3:17:60:e9:54: d6:41:fa:c5:67:fd:e1:38:32:34:cb:98:90:ef:d2: 0d:8a:b3:b7:e2:30:13:04:1f:0b:4b:7a:57:3d:52: 50:b6:96:3d:f3:c7:87:ef:5d:58:ac:ad:14:5d:43: ce:31:49:df:69:d0:5f:1b:43:15:4f:d3:b8:47:99: a3:2a:9f:89:47:08:b7:02:3e:da:e1:89:19:bb:f4: 60:c9:f7:c6:d6:a5:72:9b:8a:a0:50:90:8e:93:2e: 85:b8:b4:1d:00:a0:cd:26:e5:90:56:55:15:a5:7e: de:7c:d7:1c:e3:16:f9:ed:7a:ba:4b:ec:00:93:32: 6d:50:af:3c:e0:94:c0:73:57:c3:45:1f:59:9c:1c: 71:2a:be:46:76:18:a5:0c:5e:71:c5:d1:75:82:e0: a2:de:54:73:79:78:c6:2c:f7:3e:5e:24:ee:fb:32: fa:b3:c3:ac:0d:dd:91:e8:17:45:47:aa:32:6b:82: 68:ed:2c:5d:b4:fe:a2:df:bb:d4:ce:fc:02:53:0d: a9:26:d9:42:6f:77:4d:80:86:a4:c9:36:61:e2:bb: e0:3d:2c:3b:00:8c:fc:6f:b0:6e:ed:e4:25:38:c2: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.66.0/23 Signature Algorithm: sha256WithRSAEncryption 43:1d:ef:f0:5a:59:75:b6:45:42:c4:23:17:19:f2:3f:ab:79: dd:de:75:8b:2d:23:1d:65:9f:cd:9e:a0:2e:af:85:d8:af:f5: c2:bd:30:a5:a8:65:ff:c7:bf:37:15:c2:a1:49:bd:8b:d2:b9: a1:92:21:91:a3:c2:d5:3c:71:f7:e0:22:92:4b:c8:03:9d:b8: 9a:b5:8c:4c:34:5a:32:9e:06:7c:a3:60:b6:0a:9a:09:ad:bf: ad:f7:f4:0c:d8:6a:1f:31:67:65:7c:b4:91:a9:60:17:d8:fe: 42:d0:fa:47:05:5d:a1:0b:11:db:a1:f3:0f:71:16:db:ca:48: c7:1e:83:44:d0:72:32:b2:8f:b7:2d:ae:c8:4c:11:a9:c5:eb: 93:77:e1:d0:a0:24:60:e3:26:c8:bc:d7:89:23:e1:74:ab:ec: 1c:e5:21:30:82:82:36:a9:1f:1b:c4:21:0a:4f:46:6f:bd:fd: 2b:d7:a2:cb:fa:65:38:16:fb:c1:b1:7c:2e:7d:85:87:6c:fd: a3:13:48:e0:c5:79:1f:1c:6e:0f:20:99:a3:88:ab:2b:22:0d: 91:40:8f:17:90:a9:43:39:d7:2a:3a:66:cd:42:f7:4d:6d:2c: 8f:a6:32:8c:1f:18:68:08:62:80:67:06:e4:1a:42:b7:39:0b: eb:74:b6:66 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMUm2YcOHONcqFfftKNLEzgoenWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIyMjEyNTM0M1oX DTI2MTIyMTEyNTg0M1owMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUz QUM2MEVFMkJBQTUxNTYzRjY3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5AUVnJ255bjNclhFe+dN/hUcSuGZSLD9MXYOlU1kH6xWf94TgyNMuYkO/S DYqzt+IwEwQfC0t6Vz1SULaWPfPHh+9dWKytFF1DzjFJ32nQXxtDFU/TuEeZoyqf iUcItwI+2uGJGbv0YMn3xtalcpuKoFCQjpMuhbi0HQCgzSblkFZVFaV+3nzXHOMW +e16ukvsAJMybVCvPOCUwHNXw0UfWZwccSq+RnYYpQxeccXRdYLgot5Uc3l4xiz3 Pl4k7vsy+rPDrA3dkegXRUeqMmuCaO0sXbT+ot+71M78AlMNqSbZQm93TYCGpMk2 YeK74D0sOwCM/G+wbu3kJTjCEyECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDULrobKe1TxueU6xg7iuqUVY/Z7MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NGU4Nzlm LTNhNTYtNGQ4ZC04M2U4LTBlOWNjNjU3NzBlYS8wLzM1MEJBRTg2Q0E3QjU0RjFC OUU1M0FDNjBFRTJCQUE1MTU2M0Y2N0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdD0IwDQYJKoZIhvcNAQELBQADggEBAEMd7/BaWXW2RULEIxcZ8j+red3edYst Ix1ln82eoC6vhdiv9cK9MKWoZf/HvzcVwqFJvYvSuaGSIZGjwtU8cffgIpJLyAOd uJq1jEw0WjKeBnyjYLYKmgmtv6339AzYah8xZ2V8tJGpYBfY/kLQ+kcFXaELEduh 8w9xFtvKSMceg0TQcjKyj7ctrshMEanF65N34dCgJGDjJsi814kj4XSr7BzlITCC gjapHxvEIQpPRm+9/SvXosv6ZTgW+8GxfC59hYds/aMTSODFeR8cbg8gmaOIqysi DZFAjxeQqUM51yo6Zs1C901tLI+mMowfGGgIYoBnBuQaQrc5C+t0tmY= -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:30 2026 by rpki-client