This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer (raw, json) Hash identifier: 1CHPbzbO/ePY9FeLy/JPXKrh6FCYX3uQ30LbwYnZNFE= Subject key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 72F03B6E911AA47DF084FD156D0B664DB0ED6C8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft caRepository: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 13 Nov 2025 12:28:28 +0000 Certificate not after: Thu 12 Nov 2026 12:33:28 +0000 Subordinate resources: IP: 160.191.198.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f0:3b:6e:91:1a:a4:7d:f0:84:fd:15:6d:0b:66:4d:b0:ed:6c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 13 12:28:28 2025 GMT Not After : Nov 12 12:33:28 2026 GMT Subject: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:84:bf:b6:7d:8c:00:2f:4b:29:d1:9a:ff: 8b:63:4c:58:36:47:c6:c4:13:7b:df:69:da:f4:9c: 0a:0c:29:07:b8:e2:40:47:8f:d3:10:fd:34:ee:23: 50:54:c9:bb:19:cc:88:d3:f6:d2:35:62:ec:11:5f: c7:5d:a4:e6:6e:34:cb:1a:19:84:f7:37:2b:3a:96: 6f:ce:36:eb:0b:ef:b0:52:4a:28:18:94:3f:1e:ce: 32:55:33:c3:ed:db:66:0e:1e:54:50:9f:3b:d4:ff: 5b:21:23:e9:1f:b9:4b:0c:08:13:5a:28:eb:18:9f: 8a:79:83:9d:1d:4e:f2:97:11:97:dc:7d:2b:47:a0: 41:6e:11:35:bc:16:01:90:ba:66:f0:a9:e0:ae:c7: 3a:a2:dd:55:6b:dc:96:53:6f:23:c4:83:4d:b0:fd: fb:df:17:d9:14:24:67:fd:82:42:df:ad:56:49:be: 37:6e:ea:34:e1:46:77:18:1a:0f:4d:49:ac:64:8e: 07:1f:ba:fd:e2:02:be:11:1e:43:b5:b6:81:08:ed: 58:cb:38:d4:88:d9:47:0c:44:6b:4d:30:cc:0f:09: d2:35:70:0b:d5:2a:c9:dc:8e:60:10:51:6e:df:39: e3:d2:74:e9:6e:ff:a5:ad:14:5b:17:b6:2b:8a:30: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.198.0/23 Signature Algorithm: sha256WithRSAEncryption 00:6e:f7:ae:af:61:bf:de:f7:45:05:ba:75:4f:21:fc:50:3c: 37:11:0f:4b:b5:83:0b:3f:7b:c4:11:df:95:b9:97:d9:f5:7f: 4c:85:00:98:3e:4d:5d:21:32:e4:ba:c7:90:dd:52:ed:64:75: db:ad:18:37:6e:1a:3a:f6:13:4f:68:45:e1:80:95:4e:71:ec: 67:14:d0:1a:fb:65:15:fe:fc:f3:24:b6:3a:3f:a1:2e:d4:00: cc:42:30:25:37:7d:2f:de:77:4e:d9:7c:33:37:d3:b1:9c:b8: 18:29:81:73:78:51:9c:9b:9d:9a:dc:0c:d1:15:9b:85:fc:30: 6c:5b:f4:84:ba:e7:83:52:40:b0:c4:93:33:bb:4c:61:ba:c1: 2b:6b:e0:52:1f:4a:08:62:fd:91:ce:3a:03:80:f7:30:05:ec: f2:8d:32:ca:77:d2:10:05:53:2e:b5:cc:1b:5d:70:d4:ca:30: 8d:40:b3:3b:59:fd:a4:d2:d3:eb:c0:90:40:20:42:da:d8:70: a4:a6:b0:08:8a:70:b4:dd:4c:33:dd:2d:5f:bf:54:26:f4:ce: ec:dc:02:08:c3:fc:9f:a5:20:9a:01:20:62:97:ea:6b:c8:d6: b8:58:93:2c:a4:a4:f2:52:de:51:0b:27:86:ca:1b:c8:83:18: 79:22:1f:8e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcvA7bpEapH3whP0VbQtmTbDtbI8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTExMzEyMjgyOFoX DTI2MTExMjEyMzMyOFowMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0Mw RjgzRUNEQzlENTU0REY0MTQxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALk1hL+2fYwAL0sp0Zr/i2NMWDZHxsQTe99p2vScCgwpB7jiQEeP0xD9NO4j UFTJuxnMiNP20jVi7BFfx12k5m40yxoZhPc3KzqWb8426wvvsFJKKBiUPx7OMlUz w+3bZg4eVFCfO9T/WyEj6R+5SwwIE1oo6xifinmDnR1O8pcRl9x9K0egQW4RNbwW AZC6ZvCp4K7HOqLdVWvcllNvI8SDTbD9+98X2RQkZ/2CQt+tVkm+N27qNOFGdxga D01JrGSOBx+6/eICvhEeQ7W2gQjtWMs41IjZRwxEa00wzA8J0jVwC9UqydyOYBBR bt8549J06W7/pa0UWxe2K4owor8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHi3+qKIGr+8EXwPg+zcnVVN9BQUMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2OWY4YWE4 LTg5NzEtNGU1MS04YjUxLTgwM2I0OWIzMmE0Zi8wLzc4QjdGQUEyODgxQUJGQkMx MTdDMEY4M0VDREM5RDU1NERGNDE0MTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgv8YwDQYJKoZIhvcNAQELBQADggEBAABu966vYb/e90UFunVPIfxQPDcRD0u1 gws/e8QR35W5l9n1f0yFAJg+TV0hMuS6x5DdUu1kddutGDduGjr2E09oReGAlU5x 7GcU0Br7ZRX+/PMktjo/oS7UAMxCMCU3fS/ed07ZfDM307GcuBgpgXN4UZybnZrc DNEVm4X8MGxb9IS654NSQLDEkzO7TGG6wStr4FIfSghi/ZHOOgOA9zAF7PKNMsp3 0hAFUy61zBtdcNTKMI1AsztZ/aTS0+vAkEAgQtrYcKSmsAiKcLTdTDPdLV+/VCb0 zuzcAgjD/J+lIJoBIGKX6mvI1rhYkyykpPJS3lELJ4bKG8iDGHkiH44= -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:55 2025 by rpki-client