This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
File: 8137472FE4C7D48501352601D84D624E0EC41C19.cer (raw, json)
Hash identifier: DWbXyBu4TuAZE/N0stSA8U8KfwbfKKdGGLKOFXDR5aY=
Subject key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 271D2AB63A293574AA844E630659ADEB2981F228
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
caRepository: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 13 Aug 2025 10:26:35 +0000
Certificate not after: Wed 12 Aug 2026 10:31:35 +0000
Subordinate resources: IP: 160.20.76.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:1d:2a:b6:3a:29:35:74:aa:84:4e:63:06:59:ad:eb:29:81:f2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Aug 13 10:26:35 2025 GMT
Not After : Aug 12 10:31:35 2026 GMT
Subject: CN=8137472FE4C7D48501352601D84D624E0EC41C19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:31:57:13:04:53:27:56:c5:54:08:e0:42:
5a:5c:f7:e8:61:d9:9c:9b:2a:b0:53:67:c2:e3:0e:
55:5a:24:73:70:0a:48:f0:fe:0e:d8:78:ea:61:11:
01:21:ee:e5:f3:79:58:bf:00:1e:6b:4d:3a:73:3d:
bf:76:cc:9c:97:62:b9:fe:59:91:93:b9:bc:a6:b9:
17:3f:d5:74:d2:e4:c9:0b:be:b3:bf:a6:73:ab:f0:
c9:40:17:82:99:44:5c:bf:e0:b5:97:a9:55:f1:f7:
e6:76:5e:cf:f8:71:bf:88:56:f0:e8:94:90:39:e1:
84:63:e3:d2:f8:97:a2:7f:04:d2:2e:d8:bf:3d:6f:
06:f5:54:66:0e:5a:f9:63:39:01:2d:1a:42:c0:49:
78:a4:f2:99:e8:e7:fe:2d:91:00:2a:33:7d:38:6c:
d0:35:de:46:c1:ac:ef:8b:42:7b:a6:98:46:b8:b7:
01:d1:51:ce:7b:1f:56:11:61:78:d0:8b:4b:4f:fc:
45:4f:81:6f:73:10:79:24:97:fc:39:09:0b:3e:57:
43:ca:07:ef:6a:76:f5:89:e7:55:81:e6:98:4d:db:
47:3a:d5:08:91:03:4c:36:72:a1:a6:77:83:61:1d:
a4:4c:8b:66:b9:6b:99:ad:a6:1b:15:68:20:bf:eb:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.76.0/23
Signature Algorithm: sha256WithRSAEncryption
74:60:51:04:71:03:04:f4:cb:a7:e5:12:a4:4e:f9:69:22:3e:
1b:8c:62:3a:a6:40:4e:37:36:57:51:49:cc:b3:f3:4f:37:b7:
b6:93:82:48:97:6b:da:92:d9:2b:e2:c2:0e:3e:99:2d:02:68:
ad:d2:4d:8e:0d:35:83:bf:48:52:74:4a:50:86:69:91:39:3b:
bc:12:75:01:be:ef:08:30:bc:a3:07:59:67:13:13:74:33:44:
ba:64:9b:be:d2:17:7b:57:a4:e4:3c:e3:31:96:c6:62:e4:a9:
fe:15:1e:8b:7a:72:00:9e:e3:c4:92:a4:ce:53:24:21:ed:59:
6d:3c:0e:a6:ca:8d:4a:34:7d:de:01:bd:f4:32:85:c9:d3:8c:
c7:5a:be:0d:44:01:b0:6a:df:eb:08:43:32:60:99:70:d4:a1:
9d:75:ff:a4:23:ff:ba:f7:98:04:19:9f:0c:b5:ff:1f:39:81:
2b:dc:ce:30:a0:d5:87:86:f5:78:05:53:71:83:fa:bb:dc:d8:
1c:13:38:e6:73:01:15:0a:57:99:00:43:84:57:cb:24:dc:20:
32:e8:58:2b:10:9f:7b:19:c8:f0:56:7a:3f:6f:88:1f:cd:0a:
6f:f3:bf:71:9a:6d:08:53:2a:16:9e:cd:61:c2:73:5d:73:37:
3c:67:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:15:03 2025 by rpki-client