This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer
File:                     96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer (raw, json)
Hash identifier:          RzZljdi8Oxw3Q89qOsC8yjNdnFQ5y/5qk/0vlVreGV0=
Subject key identifier:   96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       536DEBC271C4C37A49F9177C06E4C97D1541EE39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Nov 2025 09:46:47 +0000
Certificate not after:    Wed 18 Nov 2026 09:51:47 +0000
Subordinate resources:    IP: 160.25.176.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6d:eb:c2:71:c4:c3:7a:49:f9:17:7c:06:e4:c9:7d:15:41:ee:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Nov 19 09:46:47 2025 GMT
            Not After : Nov 18 09:51:47 2026 GMT
        Subject: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:ab:ec:97:ce:eb:1b:74:f3:40:4d:09:eb:
                    3d:df:3e:60:ea:4f:e4:e6:8e:b3:19:17:ed:a1:fb:
                    9b:ca:16:f5:49:ca:94:d6:00:dc:0e:cb:8c:a3:c5:
                    9b:bd:da:87:6a:69:74:62:d8:ff:53:11:49:52:50:
                    e4:f4:71:35:1a:41:b3:bd:11:82:07:67:40:dc:c9:
                    9c:1d:f1:ef:50:cb:cf:f9:02:a4:25:4b:92:8f:20:
                    e9:62:de:38:95:1d:11:ab:a3:a0:59:b6:cf:c7:e8:
                    c3:08:38:76:38:15:dd:b8:05:bf:69:29:78:4b:20:
                    b9:cf:70:cf:ef:6a:cb:0b:d9:13:28:de:b5:a3:84:
                    9a:08:ea:db:e1:c7:ab:29:f4:39:24:f0:b4:42:9c:
                    ee:bc:b2:63:dc:f9:58:38:97:0c:59:82:3d:8c:ad:
                    6d:4c:5b:16:86:e8:8e:e5:62:8b:be:f2:ce:bd:4f:
                    23:72:d0:dd:d5:09:08:10:5e:79:3b:31:9b:59:88:
                    63:3d:fd:ff:9c:15:10:d9:8d:b7:2c:f4:93:8d:15:
                    38:be:4c:99:d9:43:c8:ee:aa:1c:18:f2:23:51:95:
                    6b:55:56:39:e9:83:50:56:39:12:11:f7:e4:c9:33:
                    54:fd:80:27:19:54:a1:60:27:fc:ed:64:c1:5b:53:
                    48:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:8d:62:a7:e5:a6:9b:94:9a:22:ff:dc:12:23:5e:f8:19:
         77:2a:24:c8:9d:6a:1b:b2:ce:a1:10:e1:70:eb:cb:33:7a:f6:
         83:26:36:73:de:4e:3a:b2:8b:47:5f:5b:70:8d:2c:5c:61:3e:
         a3:87:50:a5:a2:a2:b4:13:11:1a:76:c8:a6:2d:0e:50:f4:fd:
         04:cf:45:86:3b:18:c1:fd:53:ec:58:3a:c1:6d:2a:7b:53:2f:
         5d:30:79:2f:2e:c0:f4:55:16:47:5d:2e:13:df:0c:c5:e3:4a:
         79:78:ac:b2:52:a6:e7:2e:ad:78:9d:cf:24:ba:6c:32:3b:e0:
         b6:5f:94:13:98:0a:50:bf:1f:ca:67:6f:24:7c:d6:49:3c:e4:
         c0:1e:b4:b8:52:50:f8:ba:92:9f:fb:72:29:49:51:5d:99:91:
         23:a8:bd:7b:b1:10:9e:4d:70:06:86:c5:60:59:b9:31:04:df:
         c5:ae:8f:b4:8f:a0:19:e9:7e:00:02:59:9b:15:ca:76:b8:70:
         ac:7c:2a:e6:62:b9:e0:71:3a:d0:8b:e5:9f:ee:c6:01:6c:a2:
         7b:bd:16:51:ce:2e:e6:6e:94:92:ac:30:19:db:aa:e3:5c:d4:
         51:e3:07:f1:fe:dc:9c:13:ea:e0:99:0c:22:eb:69:7a:45:f5:
         86:89:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:00:59 2025 by rpki-client