This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer (raw, json)
Hash identifier: jQgNE0YCRW8fERPLJpJzYbNfApQ/ulLGlE/1dPZHkJM=
Subject key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 79227FAE0A7F98958B0A0A3DA006A2ADD7665EEE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
caRepository: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 17 Jun 2025 20:54:08 +0000
Certificate not after: Tue 16 Jun 2026 20:59:08 +0000
Subordinate resources: IP: 160.19.206.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:22:7f:ae:0a:7f:98:95:8b:0a:0a:3d:a0:06:a2:ad:d7:66:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jun 17 20:54:08 2025 GMT
Not After : Jun 16 20:59:08 2026 GMT
Subject: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:c2:0c:58:8d:b8:88:3a:b5:71:42:ad:cc:
9d:68:b0:17:a0:ba:de:f9:46:28:35:4d:5a:a7:ca:
e7:f0:0f:70:6a:ad:67:2e:ce:51:62:7a:33:be:f8:
38:28:23:f0:70:c8:b1:6d:bb:19:cf:c2:4b:df:4c:
23:21:a2:c1:e3:fa:59:f3:2b:76:4c:a9:0e:1c:61:
99:34:43:9e:8a:80:e6:d8:c4:dd:5d:8d:06:24:21:
60:08:28:d5:1b:05:65:b2:a2:30:ec:25:86:4e:e4:
99:99:4d:97:6b:8e:ca:59:0f:dd:c3:d7:a4:f1:9b:
3d:0f:3c:83:e8:29:67:37:07:83:35:f2:ba:25:6b:
2e:e9:34:c8:fc:98:56:6e:28:62:ad:cd:f2:7b:27:
13:3c:d0:ed:a2:8e:24:eb:4c:0d:12:58:db:f2:3b:
37:35:de:68:5b:ff:0a:0a:b5:80:21:b0:55:f4:fa:
dc:b1:0e:48:75:b5:42:47:3c:95:c9:98:95:fd:f1:
d8:17:99:ad:76:e9:9b:32:00:eb:5a:d8:e3:a3:d7:
83:50:ab:42:8c:c9:33:fe:5f:70:94:77:8a:6b:7e:
04:b5:b5:95:28:b7:55:eb:f3:2b:b7:3a:6b:02:22:
51:33:1f:87:60:e6:49:c9:54:37:a8:e2:2f:6f:ff:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.206.0/23
Signature Algorithm: sha256WithRSAEncryption
06:e0:5e:18:1d:fd:57:39:c0:e9:2f:3c:9a:84:6e:1d:b8:18:
d4:1c:4d:19:54:42:e0:2a:d8:a1:30:6d:3a:aa:c1:b0:20:30:
4f:3a:8e:0d:a7:fe:59:e0:9e:3e:65:c4:95:17:14:c4:32:62:
91:37:ff:8d:04:76:ed:af:7d:63:a8:05:8e:d6:9a:f0:0b:f1:
3e:3c:49:c8:cf:91:b9:10:85:b5:2b:bb:35:c6:b2:89:1d:e6:
ba:71:20:dc:ea:12:83:43:f8:c3:c3:1b:af:b4:ee:c1:24:da:
14:c0:0a:a5:58:af:78:06:44:36:7b:47:84:57:4d:19:8d:60:
b6:62:69:e1:d7:15:89:05:e8:5a:99:c0:26:23:15:90:6f:48:
15:25:31:6c:e8:b2:fb:57:7d:f1:12:00:2f:33:a0:7a:d0:e9:
a0:7e:3a:35:e5:af:d1:44:61:68:80:36:3e:94:17:6f:49:86:
ae:17:1f:72:bf:67:2d:ad:6c:19:92:9b:a9:85:e3:e4:c5:e6:
a3:e4:13:e5:c0:db:6a:4a:47:32:29:a9:7d:ab:14:4d:70:43:
db:8d:46:c8:b3:55:4b:86:80:ef:3f:7d:ea:20:a5:17:39:76:
30:21:2d:05:86:e4:8b:58:c1:7a:26:61:2f:5a:8f:00:71:63:
f2:4d:b8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:20:48 2025 by rpki-client