This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer
File:                     779E25B9DB276068183F9078FE6306678EBE79BE.cer (raw, json)
Hash identifier:          uqVyuzkPU16wB38Vfyu1ii2eZAyszJgO04oEO7ESrlo=
Subject key identifier:   77:9E:25:B9:DB:27:60:68:18:3F:90:78:FE:63:06:67:8E:BE:79:BE
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       0A92E9ABDFCBCB3CE1DC5AD0162A6823C6585108
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Nov 2025 06:54:31 +0000
Certificate not after:    Wed 18 Nov 2026 06:59:31 +0000
Subordinate resources:    IP: 157.10.254.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:92:e9:ab:df:cb:cb:3c:e1:dc:5a:d0:16:2a:68:23:c6:58:51:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Nov 19 06:54:31 2025 GMT
            Not After : Nov 18 06:59:31 2026 GMT
        Subject: CN=779E25B9DB276068183F9078FE6306678EBE79BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:46:77:52:ce:7e:18:18:88:f2:66:41:c6:
                    26:69:33:4f:85:33:80:83:a5:ef:ee:eb:98:04:9a:
                    83:55:f3:23:5e:60:54:81:0e:1b:09:f4:40:de:87:
                    7d:99:a7:43:22:50:15:bb:cb:02:5f:08:c7:0f:d5:
                    f0:11:28:09:de:1a:96:e1:e8:e1:41:85:7b:76:dd:
                    e3:af:d1:d5:44:a3:57:72:b7:49:3a:6d:dd:6e:81:
                    5d:b5:f4:92:17:bb:b9:73:54:2f:ae:83:66:69:c5:
                    7a:84:b0:2c:64:8a:c8:00:2d:21:8d:40:94:62:6b:
                    97:38:26:29:8b:fe:a9:a9:5f:c3:7e:77:1e:3c:01:
                    e7:3b:7a:6b:0b:f9:d3:67:1c:4e:61:ea:cb:c4:aa:
                    a3:ed:be:9c:fa:d7:d3:54:28:01:6d:73:4d:ae:09:
                    6b:1e:74:02:14:fd:b5:36:bd:27:7d:c5:3c:0f:5c:
                    63:7d:0e:62:57:72:f6:3a:cd:56:6e:71:ed:4e:34:
                    81:bd:0a:7a:b9:69:72:75:f3:4a:fa:61:5e:af:32:
                    52:cb:4f:31:88:f1:e5:37:7c:37:6c:8d:ac:f5:ff:
                    46:b8:72:6f:75:2a:35:a8:96:78:68:65:d1:9d:41:
                    a1:4a:81:a0:97:34:c3:b0:98:be:30:71:b6:78:d8:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:9E:25:B9:DB:27:60:68:18:3F:90:78:FE:63:06:67:8E:BE:79:BE
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:6a:02:81:74:4a:57:1b:e0:91:20:54:60:1c:ff:89:b2:12:
         24:ff:fc:ba:4b:65:1a:8a:e2:f5:55:35:c3:4d:68:a0:c2:71:
         32:96:89:a5:5d:22:53:14:de:5f:5a:a2:88:2b:9f:14:a0:9c:
         60:ac:12:00:1d:cf:99:8f:af:ec:81:41:5b:fc:02:e1:b5:a0:
         bd:d6:e6:69:47:d3:84:dd:3e:62:bd:fb:15:01:45:bb:a6:25:
         ce:5e:83:c4:0d:bc:16:94:7e:c5:0a:0f:91:67:23:86:8c:9b:
         02:c6:31:b2:cb:28:f4:b5:34:78:06:0d:9b:82:84:25:58:53:
         ad:88:e9:3c:fc:c4:0b:93:a7:25:17:fd:58:2f:2a:9c:05:5d:
         d8:15:71:80:5c:e9:3a:c5:f5:c0:e3:e4:d2:7a:66:a2:d6:ab:
         c3:1d:be:d8:eb:c7:12:d0:9e:3b:28:06:05:2f:3b:5c:a2:37:
         8f:f6:96:b5:1c:92:35:74:e6:db:6c:c6:cf:9a:7b:24:28:ac:
         27:f9:c4:7e:50:d4:04:7f:84:92:95:c5:af:8f:aa:04:1d:b0:
         b5:44:b3:99:ed:87:d5:b2:04:ac:cf:d3:b6:b2:0d:49:5e:86:
         3b:bb:ee:0a:d2:ee:63:6b:d4:a5:30:b2:30:63:56:df:19:77:
         51:37:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:52 2025 by rpki-client