This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer (raw, json) Hash identifier: Zu1d/1oyinYi5cwLlUzFCc2ZWwpw06Lq+11BKZzdeXQ= Subject key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2702C3A2AB2D3F61FEF4A2912C3D70E48681E266 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft caRepository: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Aug 2025 12:44:59 +0000 Certificate not after: Fri 31 Jul 2026 12:49:59 +0000 Subordinate resources: IP: 160.19.110.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:02:c3:a2:ab:2d:3f:61:fe:f4:a2:91:2c:3d:70:e4:86:81:e2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 1 12:44:59 2025 GMT Not After : Jul 31 12:49:59 2026 GMT Subject: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:6d:45:7e:e4:07:c5:eb:db:67:ca:be:f0: ea:4e:95:61:58:51:d5:04:23:36:4f:32:33:45:ee: a1:33:bf:0a:2c:a4:e3:d0:57:a4:40:d6:f1:59:3f: ed:2e:35:9d:40:ba:4e:e6:ff:b7:4c:82:b7:a8:b3: ea:9d:23:f5:28:92:d7:1c:53:8c:c5:36:1e:c8:66: 89:1a:d2:59:b7:f5:ec:07:81:9c:00:69:99:34:e2: 5f:ee:30:09:11:85:ca:d1:73:25:00:e5:3a:65:59: 89:d2:87:c2:31:90:1b:42:89:38:b4:26:fb:78:db: 4c:c9:ab:d5:b3:c5:f4:56:23:99:54:e1:dc:00:56: dc:e0:ac:02:25:7f:dc:e2:b5:05:8a:c6:de:3f:9e: 0e:ae:cc:2b:a8:6e:f7:54:ee:8e:7c:83:e8:37:29: 54:64:9c:ef:65:90:ef:b8:cb:b6:51:1f:7e:ba:45: 0f:40:55:5a:c8:54:f6:46:17:c6:c0:d9:ed:16:ce: 16:47:5d:2a:96:64:34:f6:1b:19:c9:62:02:02:f6: 2a:f4:23:9d:37:69:c9:18:82:ff:b9:a4:40:68:3d: 91:af:b6:86:ca:c2:dc:5a:6a:b7:fc:aa:8d:82:55: e2:c5:7e:7c:b1:0b:77:c6:88:77:47:30:c2:56:0a: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.110.0/23 Signature Algorithm: sha256WithRSAEncryption 86:f9:d3:75:14:b4:fb:27:eb:a8:63:7b:37:d2:cd:9c:f9:32: 53:d4:54:e4:83:84:90:b0:98:7a:e1:3a:32:36:15:6b:5d:44: 4b:a5:24:97:10:d0:4b:19:03:20:bf:1f:9a:ed:4d:e6:84:fd: 8e:ee:fa:4d:56:ff:39:f4:4c:e1:57:e7:2d:fd:66:85:d1:14: 37:38:3f:fe:4f:60:20:44:1e:12:85:a4:a9:22:b2:d6:1e:dd: 35:ba:76:29:0f:8e:59:8e:11:e4:9b:e4:82:b9:61:99:a9:25: 2d:7d:8b:3a:7e:0a:4a:7b:c9:72:5c:36:2a:91:5c:6b:37:c3: 63:51:05:d9:ac:c8:59:2a:66:58:fe:f4:84:d7:6e:d5:39:d5: 1c:27:20:69:b6:51:a4:86:b4:9c:36:bc:0a:0d:f8:2a:0b:6b: fa:be:4b:97:a5:14:21:da:44:16:65:bd:e0:a7:d6:ac:1d:27: 9e:2a:5f:a2:5d:73:d6:b6:9a:da:ab:cd:0e:6d:02:e8:36:73: 80:97:ce:d3:21:d6:ad:a4:4f:5b:30:47:af:d5:63:af:5c:98: 91:27:d4:15:2b:ed:bd:98:9c:78:69:15:59:c6:b2:3d:3a:50: 37:a4:c9:ca:f3:31:68:23:a9:65:7a:82:34:11:17:79:8a:e2: 9b:da:7d:2c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJwLDoqstP2H+9KKRLD1w5IaB4mYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgwMTEyNDQ1OVoX DTI2MDczMTEyNDk1OVowMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVC RjU4MjBFNzBEREQxQjQ5NEI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKubUV+5AfF69tnyr7w6k6VYVhR1QQjNk8yM0XuoTO/Ciyk49BXpEDW8Vk/ 7S41nUC6Tub/t0yCt6iz6p0j9SiS1xxTjMU2HshmiRrSWbf17AeBnABpmTTiX+4w CRGFytFzJQDlOmVZidKHwjGQG0KJOLQm+3jbTMmr1bPF9FYjmVTh3ABW3OCsAiV/ 3OK1BYrG3j+eDq7MK6hu91TujnyD6DcpVGSc72WQ77jLtlEffrpFD0BVWshU9kYX xsDZ7RbOFkddKpZkNPYbGcliAgL2KvQjnTdpyRiC/7mkQGg9ka+2hsrC3Fpqt/yq jYJV4sV+fLELd8aId0cwwlYKibUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPPEUHFperaP3q6/WCDnDd0bSUtYMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkOWIzNTE5 LTNkZjMtNDQwNi04MjhmLTNlYmI5MWQ5Mjk0NC8wL0YzQzQ1MDcxNjk3QUI2OEZE RUFFQkY1ODIwRTcwREREMUI0OTRCNTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE24wDQYJKoZIhvcNAQELBQADggEBAIb503UUtPsn66hjezfSzZz5MlPUVOSD hJCwmHrhOjI2FWtdREulJJcQ0EsZAyC/H5rtTeaE/Y7u+k1W/zn0TOFX5y39ZoXR FDc4P/5PYCBEHhKFpKkistYe3TW6dikPjlmOEeSb5IK5YZmpJS19izp+Ckp7yXJc NiqRXGs3w2NRBdmsyFkqZlj+9ITXbtU51RwnIGm2UaSGtJw2vAoN+CoLa/q+S5el FCHaRBZlveCn1qwdJ54qX6Jdc9a2mtqrzQ5tAug2c4CXztMh1q2kT1swR6/VY69c mJEn1BUr7b2YnHhpFVnGsj06UDekycrzMWgjqWV6gjQRF3mK4pvafSw= -----END CERTIFICATE-----Generated at Sat Dec 6 19:25:22 2025 by rpki-client