This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer
File:                     0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer (raw, json)
Hash identifier:          49zr6xEc/INkqNMeYFZtBxDTaa3OCXhkzcUFWiRdhmQ=
Subject key identifier:   02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7EBA563A1A58DC2E6DA9423BDA8CA54068464E42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 Jan 2026 20:08:23 +0000
Certificate not after:    Fri 15 Jan 2027 20:13:23 +0000
Subordinate resources:    IP: 103.167.136.0/23
                          IP: 2407:6d40::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ba:56:3a:1a:58:dc:2e:6d:a9:42:3b:da:8c:a5:40:68:46:4e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 16 20:08:23 2026 GMT
            Not After : Jan 15 20:13:23 2027 GMT
        Subject: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:9f:f0:3f:40:71:71:09:60:2d:27:15:48:
                    3f:5a:ef:79:60:4d:96:54:de:12:b4:de:fd:72:aa:
                    25:01:76:1a:ce:da:f5:52:aa:a4:7c:d6:99:e4:07:
                    45:89:96:6a:78:01:50:d1:98:cf:3e:9c:ad:b6:da:
                    ef:9b:c3:53:d9:99:13:53:19:ce:06:c7:c8:b4:b4:
                    cc:ac:ad:14:15:4f:f2:5b:5b:9e:0d:fe:f6:a1:14:
                    2e:2f:9d:7d:44:03:1e:b1:b3:bb:79:42:cc:b9:f3:
                    1d:99:57:d6:7b:b4:eb:22:23:36:60:ef:46:c1:e9:
                    98:9a:bd:72:8a:0b:37:6d:25:f9:53:96:65:c5:bf:
                    5f:67:f2:26:58:97:d3:16:87:f9:1e:9c:90:db:36:
                    86:32:49:40:fc:d4:51:10:d4:88:38:fb:d5:8d:ef:
                    3a:62:dd:83:67:d2:c6:a5:f3:12:85:4c:f6:cc:b1:
                    57:c5:7b:f0:63:bc:f6:38:c9:28:7c:72:55:1e:1d:
                    fa:42:6f:f9:1e:41:e7:b3:d4:80:59:b5:40:7d:b3:
                    9d:c6:93:37:9c:15:46:37:85:b4:d9:d2:e0:8d:47:
                    9f:92:6d:f0:40:5d:ac:95:e3:96:86:58:d2:03:b5:
                    aa:d4:48:df:5f:6f:9c:ca:9c:f4:b0:12:a6:50:44:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.136.0/23
                IPv6:
                  2407:6d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:76:15:41:c0:a0:fc:05:05:14:a3:d1:c0:c4:24:e7:b3:
         56:ac:0d:9d:1c:74:12:f5:ac:6d:96:d9:c9:f9:e0:df:04:87:
         29:40:b5:e6:80:ff:34:93:0c:d5:8d:87:58:69:77:92:f6:2c:
         9a:7b:29:93:39:55:aa:c4:17:1a:5d:e5:d1:86:a4:7a:86:46:
         26:e2:59:64:f5:71:c4:26:69:b5:e8:4a:64:cb:13:e4:32:70:
         67:ae:d4:58:0f:1d:2f:a7:e8:e3:ae:78:c2:60:c7:7f:7b:0b:
         d3:0e:0c:88:84:fc:71:02:cf:9d:8a:0a:ff:f3:45:e9:17:cb:
         9b:ce:ea:cf:59:60:57:e7:72:39:91:26:f3:d5:98:4c:fc:6a:
         78:66:04:31:fd:64:a0:21:4a:8d:e2:a2:4d:88:25:32:b7:ae:
         41:35:7a:94:c8:c6:d8:ee:e0:ac:e7:8d:49:56:61:bd:13:aa:
         3f:6c:d4:ac:28:7a:80:2c:31:73:8a:0a:10:c2:af:52:55:50:
         91:e0:30:7d:7e:d0:d5:86:8e:48:6c:46:f1:7b:6c:98:41:79:
         e0:63:da:31:96:de:d7:27:86:3f:72:f3:96:a8:39:bc:25:e8:
         51:22:d5:68:b9:80:8e:77:47:26:25:8d:d6:3f:f6:33:e9:5d:
         7c:86:1e:9b
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUfrpWOhpY3C5tqUI72oylQGhGTkIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNjIwMDgyM1oX
DTI3MDExNTIwMTMyM1owMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFC
RDg4RDFEQjc1MDdFNjkxM0M5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbOn/A/QHFxCWAtJxVIP1rveWBNllTeErTe/XKqJQF2Gs7a9VKqpHzWmeQH
RYmWangBUNGYzz6crbba75vDU9mZE1MZzgbHyLS0zKytFBVP8ltbng3+9qEULi+d
fUQDHrGzu3lCzLnzHZlX1nu06yIjNmDvRsHpmJq9cooLN20l+VOWZcW/X2fyJliX
0xaH+R6ckNs2hjJJQPzUURDUiDj71Y3vOmLdg2fSxqXzEoVM9syxV8V78GO89jjJ
KHxyVR4d+kJv+R5B57PUgFm1QH2zncaTN5wVRjeFtNnS4I1Hn5Jt8EBdrJXjloZY
0gO1qtRI319vnMqc9LASplBEo3kCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFAJG3RSvaPXlUSq9iNHbdQfmkTyWMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by85ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkZmIzOTky
LTFkMmYtNDZjZS04ODZhLThlMjJhMzI2MTFmOC8wLzAyNDZERDE0QUY2OEY1RTU1
MTJBQkQ4OEQxREI3NTA3RTY5MTNDOTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAFnp4gwDQQCAAIwBwMFACQHbUAwDQYJKoZIhvcNAQELBQADggEBAJwpdhVBwKD8
BQUUo9HAxCTns1asDZ0cdBL1rG2W2cn54N8EhylAteaA/zSTDNWNh1hpd5L2LJp7
KZM5VarEFxpd5dGGpHqGRibiWWT1ccQmabXoSmTLE+QycGeu1FgPHS+n6OOueMJg
x397C9MODIiE/HECz52KCv/zRekXy5vO6s9ZYFfncjmRJvPVmEz8anhmBDH9ZKAh
So3iok2IJTK3rkE1epTIxtju4KznjUlWYb0Tqj9s1KwoeoAsMXOKChDCr1JVUJHg
MH1+0NWGjkhsRvF7bJhBeeBj2jGW3tcnhj9y85aoObwl6FEi1Wi5gI53RyYljdY/
9jPpXXyGHps=
-----END CERTIFICATE-----