This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer (raw, json) Hash identifier: x5XdFmTNUdWzlqlZ71PD0gTDPuI08FgfqkPR8egiz8M= Subject key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 7C9B66E4D6EAE1B0417F79D0D5BE61555835B42E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft caRepository: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Nov 2025 03:29:21 +0000 Certificate not after: Fri 06 Nov 2026 03:34:21 +0000 Subordinate resources: IP: 160.187.196.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9b:66:e4:d6:ea:e1:b0:41:7f:79:d0:d5:be:61:55:58:35:b4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 7 03:29:21 2025 GMT Not After : Nov 6 03:34:21 2026 GMT Subject: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:ae:fa:e4:26:3e:c0:f1:da:bb:f9:d2:67: 71:89:29:9e:4a:df:90:c4:b4:54:77:7d:87:d7:d4: 31:2e:89:17:58:60:31:b3:fb:c2:9a:67:d0:dd:97: 91:ff:a4:43:92:fc:86:b4:61:56:9a:f6:94:a1:4d: 96:01:59:b4:7a:a5:78:cb:ee:db:1c:d4:4f:2c:dd: e2:6b:90:f6:02:ee:6d:9f:07:bc:40:5d:c9:15:2c: 16:11:04:80:ba:97:dc:c7:b3:4e:b7:7e:75:46:0a: 22:c8:6d:76:0b:3a:78:6b:48:c6:2a:83:a9:df:69: 5d:82:a7:1e:31:75:37:53:72:f9:41:b0:73:d3:b9: 79:6e:bf:85:2c:f9:df:bb:a2:3c:85:7d:59:1f:ee: 74:0b:0d:28:cf:7f:63:f5:a9:a1:87:c7:56:b6:62: f5:14:6f:fd:47:9b:7f:09:81:a4:ab:ac:75:66:b5: e6:46:21:3a:40:1d:d6:3c:bc:36:75:2b:9f:de:84: 3e:70:a9:08:3a:6e:83:52:b2:a6:61:aa:25:b5:59: da:a7:78:6c:13:c8:af:ca:9f:8a:4e:cb:8f:41:a2: d1:b1:ef:b9:d2:6d:81:2c:a5:36:d7:98:5e:12:52: fb:e5:89:35:b9:09:ae:ed:ad:87:0b:9c:a4:8c:72: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.196.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:2e:22:10:f2:a2:20:74:6d:d1:f4:90:bd:58:98:15:74:c5: 27:f2:45:da:51:48:5b:bf:e9:65:3e:2e:da:25:63:18:d3:37: 39:50:c7:9a:0a:1d:fb:1c:a6:82:98:75:2b:4f:43:c2:2f:bd: a2:9f:7c:6c:fa:44:33:b9:43:a7:ee:9b:1f:d1:6c:61:5a:b7: 3d:31:cc:03:f2:72:b7:ae:76:83:69:0d:20:3e:8a:a4:6f:c0: 6a:81:ef:8f:76:68:7f:3d:4c:c0:56:c2:14:1c:54:e4:00:2f: 1d:7f:bd:e0:2f:74:ed:64:23:a8:83:6a:5d:15:35:f3:da:59: 83:c9:47:ca:b3:1d:31:b9:ab:1a:db:e8:d6:29:3a:fc:78:47: 62:07:42:fb:c4:73:fe:59:4e:e8:20:d8:f7:df:95:89:cb:c8: c9:fe:89:6c:80:a2:aa:bf:48:97:ac:cf:d8:3c:14:fd:f0:21: fe:fb:af:f7:60:74:bc:cb:13:bb:2f:a4:77:db:e2:47:6d:79: 27:d7:02:3f:cf:0f:e0:e5:62:80:a7:2f:80:a9:82:3c:12:34: 13:b3:c6:14:65:68:94:7a:32:9d:36:67:42:9c:cd:b5:3d:ae: 7f:a3:15:52:2d:b1:80:af:81:4d:31:b8:c7:4d:78:0f:c2:c0: 54:0d:cf:ad -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfJtm5Nbq4bBBf3nQ1b5hVVg1tC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTEwNzAzMjkyMVoX DTI2MTEwNjAzMzQyMVowMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5 RjZCNzNCMDIzOUNBMkJENDU2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYQrvrkJj7A8dq7+dJncYkpnkrfkMS0VHd9h9fUMS6JF1hgMbP7wppn0N2X kf+kQ5L8hrRhVpr2lKFNlgFZtHqleMvu2xzUTyzd4muQ9gLubZ8HvEBdyRUsFhEE gLqX3MezTrd+dUYKIshtdgs6eGtIxiqDqd9pXYKnHjF1N1Ny+UGwc9O5eW6/hSz5 37uiPIV9WR/udAsNKM9/Y/WpoYfHVrZi9RRv/UebfwmBpKusdWa15kYhOkAd1jy8 NnUrn96EPnCpCDpug1KypmGqJbVZ2qd4bBPIr8qfik7Lj0Gi0bHvudJtgSylNteY XhJS++WJNbkJru2thwucpIxyGo8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGvUXNkS1Bkrzeufa3OwI5yivUVnMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjNThmYjdj LTY3YjgtNGJjZS05NmQ5LWJlOTEyZTNmNzNkZC8wLzZCRDQ1Q0Q5MTJENDE5MkJD REVCOUY2QjczQjAyMzlDQTJCRDQ1NjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgu8QwDQYJKoZIhvcNAQELBQADggEBAB4uIhDyoiB0bdH0kL1YmBV0xSfyRdpR SFu/6WU+LtolYxjTNzlQx5oKHfscpoKYdStPQ8IvvaKffGz6RDO5Q6fumx/RbGFa tz0xzAPycreudoNpDSA+iqRvwGqB7492aH89TMBWwhQcVOQALx1/veAvdO1kI6iD al0VNfPaWYPJR8qzHTG5qxrb6NYpOvx4R2IHQvvEc/5ZTugg2PfflYnLyMn+iWyA oqq/SJesz9g8FP3wIf77r/dgdLzLE7svpHfb4kdteSfXAj/PD+DlYoCnL4CpgjwS NBOzxhRlaJR6Mp02Z0KczbU9rn+jFVItsYCvgU0xuMdNeA/CwFQNz60= -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:30 2025 by rpki-client