This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer (raw, json)
Hash identifier: brWkZMnbXWU6mlIrEhFK+fkR/M+7oY15F9iDVyCjHDc=
Subject key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 04E46459BBE4773B70F86362A9084B9FEB0B5944
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
caRepository: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 07 Jun 2025 06:17:12 +0000
Certificate not after: Sat 06 Jun 2026 06:22:12 +0000
Subordinate resources: IP: 160.22.66.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e4:64:59:bb:e4:77:3b:70:f8:63:62:a9:08:4b:9f:eb:0b:59:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jun 7 06:17:12 2025 GMT
Not After : Jun 6 06:22:12 2026 GMT
Subject: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:66:33:85:c0:59:09:13:b7:96:a0:34:2e:
53:2c:d6:1a:47:7e:62:f5:fd:5c:84:44:53:fc:b2:
e5:2c:35:e7:a5:e3:44:8f:4a:82:bd:49:3b:c6:51:
4d:18:7c:d9:d3:58:4f:67:53:f5:41:10:c7:a3:df:
23:ed:9a:0f:29:d9:a9:b0:1c:95:5a:b0:18:fb:41:
0d:e5:92:9c:b1:ad:3b:bf:b3:d0:36:ef:1c:40:f9:
d9:8d:5e:d7:1c:19:db:c8:5c:a3:fa:52:87:4e:90:
77:31:8a:ae:f3:82:d8:a2:b1:04:3a:55:3f:07:3c:
ba:06:bf:27:c2:60:33:c0:9f:65:de:9d:17:ab:fe:
1b:3b:c8:15:c2:42:1c:46:8c:6f:ac:ab:2e:45:21:
ff:1f:67:9a:3f:6f:96:2f:cf:f0:bf:bc:12:48:17:
aa:f8:a0:9c:35:fe:52:50:59:5c:1c:01:98:92:1d:
17:b2:d9:a9:95:1c:47:2c:eb:10:e2:29:66:83:9c:
5c:cb:ff:88:1a:9c:85:0d:f9:44:db:6e:df:5f:2b:
30:08:45:f0:3a:e2:e0:b5:13:5a:aa:11:90:d0:c2:
68:d1:19:ae:72:69:da:53:58:00:8f:97:29:98:ea:
75:7a:b0:70:34:4d:69:97:6c:e6:23:72:74:60:c0:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.66.0/23
Signature Algorithm: sha256WithRSAEncryption
50:09:1a:e8:96:8a:8d:f7:cf:bd:6f:cb:43:6c:11:a6:82:e5:
67:68:f1:cc:ec:fb:61:62:fe:67:be:0e:12:3c:3c:b7:21:a2:
f6:13:7d:06:ca:96:d1:16:75:1b:0a:b0:d2:05:3e:26:5a:80:
13:1c:d4:e4:26:7b:e0:47:42:db:f4:a3:74:46:ad:18:b1:05:
c1:e0:ac:2e:72:d8:bb:02:3f:5f:b0:55:6c:96:f7:29:a8:eb:
fa:64:f0:cd:19:c4:23:33:20:4e:28:45:3d:56:c7:f5:b3:2e:
39:9c:bb:a5:76:28:82:e5:3a:20:e3:46:61:cb:13:f0:8d:73:
48:e4:19:dd:4d:e1:6e:f8:76:e8:fa:d6:dc:f9:f8:79:60:24:
e4:bb:9b:e4:47:1e:10:9c:36:d6:f9:c3:b7:14:86:17:ea:6f:
c1:e5:0d:08:ee:54:5a:9d:75:7a:35:49:f7:a5:3a:eb:87:80:
4f:e2:3f:a9:3b:92:ba:00:37:32:9a:12:f1:5d:f8:6b:8f:bb:
63:94:a3:04:a4:ee:33:22:6b:2e:49:6e:19:97:56:44:71:67:
28:4d:8f:01:9b:08:5b:77:ab:36:b6:2c:00:12:5e:98:46:a0:
72:75:4d:50:75:a9:f4:6e:be:84:9f:62:27:7c:95:9e:34:a2:
e3:61:2d:85
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUBORkWbvkdztw+GNiqQhLn+sLWUQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDYwNzA2MTcxMloX
DTI2MDYwNjA2MjIxMlowMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0Qy
N0JEMTZGQkYzM0RDMDlDRjY1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANEKZjOFwFkJE7eWoDQuUyzWGkd+YvX9XIREU/yy5Sw156XjRI9Kgr1JO8ZR
TRh82dNYT2dT9UEQx6PfI+2aDynZqbAclVqwGPtBDeWSnLGtO7+z0DbvHED52Y1e
1xwZ28hco/pSh06QdzGKrvOC2KKxBDpVPwc8uga/J8JgM8CfZd6dF6v+GzvIFcJC
HEaMb6yrLkUh/x9nmj9vli/P8L+8EkgXqvignDX+UlBZXBwBmJIdF7LZqZUcRyzr
EOIpZoOcXMv/iBqchQ35RNtu318rMAhF8Dri4LUTWqoRkNDCaNEZrnJp2lNYAI+X
KZjqdXqwcDRNaZds5iNydGDAgSMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJ7p6HFd56mVJz0nvRb78z3AnPZSMB8GA1UdIwQYMBaAFGD4
vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ
aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by85ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYjkyN2Rm
LWJjOWMtNGJlNi1hMWZhLTJlMTI1YzQ2OWY3MS8wLzlFRTlFODcxNURFN0E5OTUy
NzNEMjdCRDE2RkJGMzNEQzA5Q0Y2NTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGgFkIwDQYJKoZIhvcNAQELBQADggEBAFAJGuiWio33z71vy0NsEaaC5Wdo8czs
+2Fi/me+DhI8PLchovYTfQbKltEWdRsKsNIFPiZagBMc1OQme+BHQtv0o3RGrRix
BcHgrC5y2LsCP1+wVWyW9ymo6/pk8M0ZxCMzIE4oRT1Wx/WzLjmcu6V2KILlOiDj
RmHLE/CNc0jkGd1N4W74duj61tz5+HlgJOS7m+RHHhCcNtb5w7cUhhfqb8HlDQju
VFqddXo1SfelOuuHgE/iP6k7kroANzKaEvFd+GuPu2OUowSk7jMiay5JbhmXVkRx
ZyhNjwGbCFt3qza2LAASXphGoHJ1TVB1qfRuvoSfYid8lZ40ouNhLYU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:52 2025 by rpki-client