This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer (raw, json) Hash identifier: DgM3RVyyNgAk7yLqxcz8dVG9dOG2OkSfwnQDAs+B6eI= Subject key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 25EA53E4C5B27D1562F3774BED851BA75D7B863D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft caRepository: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Apr 2025 07:49:20 +0000 Certificate not after: Thu 23 Apr 2026 07:54:20 +0000 Subordinate resources: IP: 157.10.222.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ea:53:e4:c5:b2:7d:15:62:f3:77:4b:ed:85:1b:a7:5d:7b:86:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 24 07:49:20 2025 GMT Not After : Apr 23 07:54:20 2026 GMT Subject: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:dd:d4:4c:d1:60:4f:58:32:5d:4f:7d:9d: 25:c3:cf:e8:8f:ba:cf:57:fc:2c:dc:30:6e:b2:c8: 9d:3f:26:02:c0:07:6f:b1:e8:2a:4b:58:93:6f:fe: 3f:db:8c:94:e9:35:a9:46:60:e0:50:be:8e:94:85: 11:33:b2:d3:f5:f0:c8:39:de:4a:82:05:77:a0:9c: cc:d1:77:3e:65:a3:1c:69:6f:d2:35:44:3a:18:3f: be:01:a7:a5:07:fc:4c:d7:67:bc:f2:f1:4b:f4:31: 38:6d:03:ae:23:18:26:5b:c3:66:75:f5:5f:20:8e: 65:fb:4c:8b:3b:13:b5:d6:ea:33:50:58:45:2f:48: df:75:b2:7d:3f:58:a9:e2:f1:a9:a7:0a:0e:41:7b: 84:1f:4d:b9:d1:6f:32:3a:a5:14:7f:51:12:5f:a2: 73:b6:98:8c:9b:88:10:94:51:ef:25:32:44:df:da: 73:9e:48:76:96:8d:f4:34:1e:9c:b7:1d:80:ed:c5: 8c:07:4e:dd:4f:16:e3:19:4e:7b:dd:eb:ca:9b:32: eb:29:a6:6d:2a:18:d8:c0:26:2b:6c:1b:75:cd:92: 4b:fa:72:ff:a5:43:a1:07:cd:30:74:93:82:a5:d3: 4b:7a:a8:f6:a6:f0:a9:2e:11:1a:9d:4c:42:9c:a3: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.222.0/23 Signature Algorithm: sha256WithRSAEncryption 80:fd:64:78:00:f5:e6:25:cf:3d:25:a7:14:25:85:4c:f1:7c: 99:70:93:e6:61:03:5c:c9:60:ee:dc:51:07:ca:b1:ad:32:66: 4a:49:07:6d:d3:10:b0:f1:c5:55:e8:3e:62:2c:9f:b7:c6:e0: 82:45:35:2a:33:e1:3d:3f:9b:63:b9:e2:92:de:be:ef:4d:06: 85:49:39:12:38:4d:bd:22:f9:97:bb:43:69:b6:b8:37:c4:25: 4b:f4:e0:59:c2:6f:0b:ec:ef:be:4c:31:57:7c:31:83:83:4a: 5a:f2:69:09:3b:f3:7e:1e:67:17:f8:48:1c:39:46:2b:31:30: 49:ef:66:6d:16:60:64:68:8f:ec:dc:4c:8a:54:c8:4c:10:18: 41:8b:14:a8:e4:bf:82:0c:d8:f2:b2:35:d3:67:8e:5d:d7:96: 98:45:86:54:a9:3f:73:60:a3:ee:93:f9:74:3c:a0:2f:da:34: 4b:0f:c4:f6:19:72:09:e4:33:ab:fc:59:ba:fb:2e:b8:73:89: c0:c8:fd:dd:71:49:63:04:9e:de:62:e0:0b:e1:72:c3:60:b7: b4:43:30:8c:3c:0f:ff:bc:f7:49:cc:b4:ce:e3:b8:d7:e4:3e: cc:06:2c:90:dd:9a:f1:83:34:09:f3:ae:da:13:99:94:8c:64: 3b:e8:32:09 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJepT5MWyfRVi83dL7YUbp117hj0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDQyNDA3NDkyMFoX DTI2MDQyMzA3NTQyMFowMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJG NENENDJDRTYwNkJCNDQ0NDE0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKT3dRM0WBPWDJdT32dJcPP6I+6z1f8LNwwbrLInT8mAsAHb7HoKktYk2/+ P9uMlOk1qUZg4FC+jpSFETOy0/XwyDneSoIFd6CczNF3PmWjHGlv0jVEOhg/vgGn pQf8TNdnvPLxS/QxOG0DriMYJlvDZnX1XyCOZftMizsTtdbqM1BYRS9I33WyfT9Y qeLxqacKDkF7hB9NudFvMjqlFH9REl+ic7aYjJuIEJRR7yUyRN/ac55IdpaN9DQe nLcdgO3FjAdO3U8W4xlOe93rypsy6ymmbSoY2MAmK2wbdc2SS/py/6VDoQfNMHST gqXTS3qo9qbwqS4RGp1MQpyjaWkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM60+a40dmMKryL0zULOYGu0REFAMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhMzc2YTZl LTNlY2EtNGY3My04ZDE1LWQxZGRlZTkxZmY5OC8wL0NFQjRGOUFFMzQ3NjYzMEFB RjIyRjRDRDQyQ0U2MDZCQjQ0NDQxNDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdCt4wDQYJKoZIhvcNAQELBQADggEBAID9ZHgA9eYlzz0lpxQlhUzxfJlwk+Zh A1zJYO7cUQfKsa0yZkpJB23TELDxxVXoPmIsn7fG4IJFNSoz4T0/m2O54pLevu9N BoVJORI4Tb0i+Ze7Q2m2uDfEJUv04FnCbwvs775MMVd8MYODSlryaQk7834eZxf4 SBw5RisxMEnvZm0WYGRoj+zcTIpUyEwQGEGLFKjkv4IM2PKyNdNnjl3XlphFhlSp P3Ngo+6T+XQ8oC/aNEsPxPYZcgnkM6v8Wbr7LrhzicDI/d1xSWMEnt5i4AvhcsNg t7RDMIw8D/+890nMtM7juNfkPswGLJDdmvGDNAnzrtoTmZSMZDvoMgk= -----END CERTIFICATE-----Generated at Sat Dec 6 19:28:40 2025 by rpki-client