This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer (raw, json) Hash identifier: mO+EOoAF0+6H/qQs4ynPnAhDLpuSgJNZ/fcbuIRM0EE= Subject key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6F2923280CD1BD8B29624BDCFC5E99E45FF8D87D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft caRepository: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 12 Nov 2025 12:02:21 +0000 Certificate not after: Wed 11 Nov 2026 12:07:21 +0000 Subordinate resources: IP: 160.191.64.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:29:23:28:0c:d1:bd:8b:29:62:4b:dc:fc:5e:99:e4:5f:f8:d8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 12 12:02:21 2025 GMT Not After : Nov 11 12:07:21 2026 GMT Subject: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:7b:f3:66:48:9b:2b:f4:dd:53:a3:24:24: 6f:72:b2:b6:94:ce:c3:8a:2c:16:db:dc:13:4c:f1: e0:9a:8f:63:33:89:fb:e5:44:a2:1b:97:4e:40:19: aa:12:09:41:37:f1:5c:9b:54:e2:34:cf:9f:64:a4: 3c:7a:a5:41:d6:8b:32:56:2b:36:51:6b:89:e9:d9: f9:00:44:4a:d7:32:49:63:df:43:30:eb:fd:0b:17: 35:4e:9d:fc:c7:46:80:d6:11:53:8a:00:fe:5c:f8: c2:12:96:2d:06:10:53:d1:22:0d:df:8e:fb:97:ee: be:6e:b0:8a:d3:7c:18:52:0b:58:b5:d0:19:b2:2a: 7c:71:af:76:96:7f:e7:5a:10:47:c5:3a:a6:bd:6d: 6a:f6:99:49:fb:89:c3:e4:26:7a:9b:8c:98:c9:f7: cf:57:b7:c4:b8:42:51:e4:a9:75:41:09:d7:4d:55: 43:6d:6c:62:06:c7:44:02:0c:96:52:38:d1:17:62: 35:18:09:70:0a:f0:76:7f:af:81:30:8d:01:7a:4e: e1:d3:26:21:f8:e5:86:f5:31:30:6d:17:08:e8:d7: 34:a4:bb:b5:69:3e:db:e0:93:63:c8:7c:d1:e2:45: 24:39:2d:68:5e:64:52:ce:13:92:4c:49:84:86:e0: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.64.0/23 Signature Algorithm: sha256WithRSAEncryption 90:10:18:10:57:61:a2:36:b3:c6:fe:db:20:32:dd:d2:ae:3f: 10:02:d5:0d:2f:84:a6:44:2f:10:a8:1e:07:01:10:22:83:bb: 40:1f:94:78:2b:f8:93:5e:2d:62:96:13:3c:c5:0c:8e:73:20: 9a:4e:99:d0:66:93:65:9c:7f:ed:f4:be:83:eb:ce:3e:d3:ce: 9e:dc:b1:86:c6:c7:ba:64:2d:1b:eb:f9:ae:ab:6b:68:cf:bf: a1:0e:4f:ea:a7:c3:20:ec:b2:95:a7:cd:81:64:32:20:18:b7: 74:1a:46:db:b0:89:c8:c3:f9:6a:de:e4:d6:e6:12:36:ac:40: 0f:35:5e:87:ba:68:05:08:c2:1b:d2:57:3a:bd:0b:ad:c5:8c: ec:18:c7:ea:22:f7:b2:f6:81:17:fd:28:eb:d0:e6:9d:09:1d: 34:ed:d6:0a:dd:db:1e:87:63:08:59:61:ae:dc:19:4d:35:63: 39:4a:bd:79:25:e8:07:e4:a5:a4:a5:59:93:2f:0b:8f:b4:8d: 94:84:62:6d:49:e9:aa:18:b8:4a:94:98:8e:f4:6e:ea:87:4f: 22:9c:59:ef:31:5d:8c:e7:7b:e8:61:aa:d3:af:fa:4a:a7:7d: 9e:66:a8:39:8a:a4:91:c0:e5:ef:c9:12:82:03:10:21:c8:27: 9b:ab:e9:27 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbykjKAzRvYspYkvc/F6Z5F/42H0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTExMjEyMDIyMVoX DTI2MTExMTEyMDcyMVowMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3 RUEwOTQ2MjdDOTQxNURFRTdGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTqe/NmSJsr9N1ToyQkb3KytpTOw4osFtvcE0zx4JqPYzOJ++VEohuXTkAZ qhIJQTfxXJtU4jTPn2SkPHqlQdaLMlYrNlFrienZ+QBEStcySWPfQzDr/QsXNU6d /MdGgNYRU4oA/lz4whKWLQYQU9EiDd+O+5fuvm6witN8GFILWLXQGbIqfHGvdpZ/ 51oQR8U6pr1tavaZSfuJw+QmepuMmMn3z1e3xLhCUeSpdUEJ101VQ21sYgbHRAIM llI40RdiNRgJcArwdn+vgTCNAXpO4dMmIfjlhvUxMG0XCOjXNKS7tWk+2+CTY8h8 0eJFJDktaF5kUs4TkkxJhIbgYXsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKnWY8brzSUKqJJ+oJRifJQV3uf8MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4MmE5YmQ5 LTE2NmYtNDUzZS1iM2MwLWU2YjNlZjkyYTU0MC8wL0E5RDY2M0M2RUJDRDI1MEFB ODkyN0VBMDk0NjI3Qzk0MTVERUU3RkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgv0AwDQYJKoZIhvcNAQELBQADggEBAJAQGBBXYaI2s8b+2yAy3dKuPxAC1Q0v hKZELxCoHgcBECKDu0AflHgr+JNeLWKWEzzFDI5zIJpOmdBmk2Wcf+30voPrzj7T zp7csYbGx7pkLRvr+a6ra2jPv6EOT+qnwyDsspWnzYFkMiAYt3QaRtuwicjD+Wre 5NbmEjasQA81Xoe6aAUIwhvSVzq9C63FjOwYx+oi97L2gRf9KOvQ5p0JHTTt1grd 2x6HYwhZYa7cGU01YzlKvXkl6AfkpaSlWZMvC4+0jZSEYm1J6aoYuEqUmI70buqH TyKcWe8xXYzne+hhqtOv+kqnfZ5mqDmKpJHA5e/JEoIDECHIJ5ur6Sc= -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:23 2025 by rpki-client