This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer File: 871B4235DFC56C482416E7BBA192562092FFE055.cer (raw, json) Hash identifier: e6FRJkz/oFX9QehJ6fkV4HL3B0BvTyPMCPm9UKQ1BvA= Subject key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4BA3C7B07C1522BC1120A864C4FB5CEF5C4EA52F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft caRepository: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 20 Jan 2026 12:30:54 +0000 Certificate not after: Tue 19 Jan 2027 12:35:54 +0000 Subordinate resources: IP: 157.20.92.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 21:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a3:c7:b0:7c:15:22:bc:11:20:a8:64:c4:fb:5c:ef:5c:4e:a5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 20 12:30:54 2026 GMT Not After : Jan 19 12:35:54 2027 GMT Subject: CN=871B4235DFC56C482416E7BBA192562092FFE055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:60:e8:27:ac:2a:94:fc:6b:2f:84:a4:43:50: 49:df:35:d9:36:42:31:5a:93:c1:f2:1b:36:cf:20: 54:89:b3:ce:43:dc:26:d0:67:40:1e:c1:c5:ec:e1: 8e:d1:26:e2:85:7b:5c:7b:f1:24:60:fb:bb:87:0f: f5:82:7e:af:1e:8b:e0:19:6c:56:c6:f7:b7:81:97: 22:20:2a:38:eb:52:79:e2:38:6b:da:53:69:9f:ef: 2c:4b:0b:8f:68:6b:3a:40:36:00:ff:a3:9a:4a:06: 57:de:ae:6f:eb:10:3a:44:1a:33:88:a5:cb:ab:a1: 0c:77:b6:a7:a6:36:e5:31:62:d0:dc:00:52:b6:09: 03:dc:9a:2d:8b:80:cc:30:e3:f6:97:3c:84:a1:69: 45:4c:f1:41:16:00:7a:21:58:be:93:f3:1e:65:63: d6:57:68:5c:44:80:70:a7:2f:ae:64:cf:51:62:75: b2:1c:07:4a:63:3b:f6:fa:7a:61:f4:15:a3:82:6b: 1c:2b:59:0b:d4:9f:98:2f:0c:82:1b:fd:30:5d:25: 69:69:b2:ae:74:43:b9:13:38:b7:11:92:61:7a:09: e8:84:2c:29:2c:bb:ac:df:2b:10:92:52:eb:0c:36: df:0a:dd:46:f1:04:2f:0a:3a:01:e0:32:35:2b:e1: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.92.0/23 Signature Algorithm: sha256WithRSAEncryption 23:03:76:dc:93:0c:b9:53:a8:c0:87:6f:c2:15:66:26:40:88: bd:3c:05:d7:38:52:a8:6c:c7:39:59:8d:18:9c:1d:a9:1f:06: eb:86:05:66:1c:cc:c2:67:e9:98:77:74:87:89:52:50:1d:3d: e1:bd:4b:90:c6:25:c3:45:95:89:06:2f:5b:bd:f6:dd:ac:d8: a0:fc:6c:38:c6:ac:18:b6:3e:4e:9c:40:69:18:82:0e:59:37: 26:30:8a:d9:36:89:13:e5:fc:d8:49:24:a1:17:c5:c9:0e:2d: 6d:48:89:79:18:fb:56:37:a0:36:5b:11:18:d4:7f:21:69:27: 3b:bb:84:b5:c5:cb:68:6f:a8:0b:9f:4b:e3:c3:1f:81:6d:32: ee:50:92:b4:d7:ad:44:75:e9:be:0b:ff:df:ee:a7:d2:df:4a: 80:ef:88:fb:c5:e6:c6:20:0f:12:e7:31:20:a3:54:98:3f:5b: 2f:03:68:40:7f:04:71:ea:72:bf:d2:ca:2b:ff:da:ec:ba:38: 0b:af:cc:6c:96:e4:6a:d0:f7:69:2c:6a:5f:88:78:48:65:1f: 2b:f5:ee:ad:c6:ca:06:ac:87:7a:68:a0:84:a4:f4:a0:1e:91: 53:dc:f7:77:f0:28:ab:98:26:09:91:6b:12:77:2c:66:5d:07: af:81:60:af -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUS6PHsHwVIrwRIKhkxPtc71xOpS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEyMDEyMzA1NFoX DTI3MDExOTEyMzU1NFowMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZF N0JCQTE5MjU2MjA5MkZGRTA1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPpg6CesKpT8ay+EpENQSd812TZCMVqTwfIbNs8gVImzzkPcJtBnQB7Bxezh jtEm4oV7XHvxJGD7u4cP9YJ+rx6L4BlsVsb3t4GXIiAqOOtSeeI4a9pTaZ/vLEsL j2hrOkA2AP+jmkoGV96ub+sQOkQaM4ily6uhDHe2p6Y25TFi0NwAUrYJA9yaLYuA zDDj9pc8hKFpRUzxQRYAeiFYvpPzHmVj1ldoXESAcKcvrmTPUWJ1shwHSmM79vp6 YfQVo4JrHCtZC9SfmC8Mghv9MF0laWmyrnRDuRM4txGSYXoJ6IQsKSy7rN8rEJJS 6ww23wrdRvEELwo6AeAyNSvhvhECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIcbQjXfxWxIJBbnu6GSViCS/+BVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhODk2ZmRj LTU2MzgtNDFkMi04YTk5LTY4Y2U4MTZiZDNjZi8wLzg3MUI0MjM1REZDNTZDNDgy NDE2RTdCQkExOTI1NjIwOTJGRkUwNTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFFwwDQYJKoZIhvcNAQELBQADggEBACMDdtyTDLlTqMCHb8IVZiZAiL08Bdc4 UqhsxzlZjRicHakfBuuGBWYczMJn6Zh3dIeJUlAdPeG9S5DGJcNFlYkGL1u99t2s 2KD8bDjGrBi2Pk6cQGkYgg5ZNyYwitk2iRPl/NhJJKEXxckOLW1IiXkY+1Y3oDZb ERjUfyFpJzu7hLXFy2hvqAufS+PDH4FtMu5QkrTXrUR16b4L/9/up9LfSoDviPvF 5sYgDxLnMSCjVJg/Wy8DaEB/BHHqcr/Syiv/2uy6OAuvzGyW5GrQ92ksal+IeEhl Hyv17q3Gygash3pooISk9KAekVPc93fwKKuYJgmRaxJ3LGZdB6+BYK8= -----END CERTIFICATE-----Generated at Mon Jan 26 04:58:12 2026 by rpki-client