This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
File:                     027DBEC91021154263BB0CF1565833705023D987.cer (raw, json)
Hash identifier:          9Vy9sEam64PzOrLM73N4MWNiMP5byycTOUUZs657eYc=
Subject key identifier:   02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0AE066F1089AD17E06AC2295615AC9700E4D4B35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 22:00:27 +0000
Certificate not after:    Tue 19 Jan 2027 22:05:27 +0000
Subordinate resources:    IP: 202.160.139.0/24
                          IP: 2403:e380::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e0:66:f1:08:9a:d1:7e:06:ac:22:95:61:5a:c9:70:0e:4d:4b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 20 22:00:27 2026 GMT
            Not After : Jan 19 22:05:27 2027 GMT
        Subject: CN=027DBEC91021154263BB0CF1565833705023D987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:4d:f1:7c:03:34:83:4c:63:14:b4:1a:0c:
                    fb:fc:d1:a4:49:72:df:88:8b:ac:66:60:0e:e2:e2:
                    57:20:0f:e2:87:97:db:e8:ff:95:89:c0:ba:45:29:
                    5f:33:f8:91:73:74:e2:55:41:77:8a:aa:66:59:de:
                    8e:dc:ee:f3:17:69:29:de:ad:7f:4e:1a:ea:b3:c9:
                    99:6e:3d:ca:6e:9b:22:6a:b3:7d:50:f1:f4:db:62:
                    13:bb:89:dc:1f:a6:a0:ee:c5:59:e0:47:48:6d:ad:
                    66:c3:b7:52:52:e1:dd:80:e2:8d:be:f4:05:22:4a:
                    45:95:a1:0f:85:ed:fc:ff:4f:21:7d:03:98:15:ae:
                    4f:43:80:84:a9:32:d0:13:5d:79:c7:23:72:d0:c0:
                    ff:fd:75:0a:f8:c0:32:b8:e7:ad:ac:cd:0c:45:33:
                    80:63:b5:2c:b0:4f:1f:92:2b:70:34:57:1d:54:7a:
                    4a:21:34:14:6b:f6:f6:1e:8e:9f:ae:39:78:0b:8f:
                    7d:8d:0e:e7:6a:ee:30:79:f2:6c:73:99:c9:a5:1c:
                    75:d8:bf:75:b2:9e:42:72:0d:45:ad:4a:7e:6b:d8:
                    3c:15:20:00:07:b9:f5:d2:d6:c2:ad:cc:90:06:00:
                    2f:ef:cc:72:e0:1d:cb:a5:5a:de:48:35:54:2b:93:
                    bd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.139.0/24
                IPv6:
                  2403:e380::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:ad:8e:e2:2c:15:c3:95:1d:c7:62:76:b7:2e:88:68:c9:
         30:c1:53:a9:17:06:d5:eb:16:36:b2:0e:03:06:bd:34:17:ba:
         39:44:36:33:27:98:05:f2:9e:15:b6:85:d7:7f:54:a4:21:6b:
         b3:c0:c0:52:fa:cd:a0:81:a4:0c:b0:e2:85:21:25:95:09:77:
         77:55:5e:dd:29:c0:f0:93:bd:0b:7d:9c:09:fa:9c:66:65:53:
         c9:33:c4:01:31:05:bf:de:c5:ee:65:89:11:b0:e7:ff:c2:0b:
         fe:14:00:18:9d:40:d5:6e:cb:ca:62:47:ff:a7:a5:e5:a8:14:
         e2:f9:d3:7e:ef:c1:2f:52:04:4d:65:a2:8d:32:2d:3e:cb:40:
         06:44:f7:a3:68:a6:6a:a0:c6:ce:c9:0d:87:87:cd:c9:a5:34:
         cb:da:75:2f:0a:c0:de:a7:ca:5f:26:96:b4:64:c4:25:04:39:
         dd:91:f3:21:e6:d6:10:47:f0:96:51:04:d1:2a:a8:80:63:42:
         34:ec:d2:4a:a2:71:7c:b3:53:bd:9d:46:58:32:05:4d:a7:c0:
         89:c4:95:07:a9:b1:18:3c:ca:44:fc:18:ad:e0:1f:d7:c3:9c:
         71:ec:27:b7:56:2e:27:1f:f1:1d:58:8f:dc:13:3a:93:6b:55:
         79:fb:3f:3b
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUCuBm8Qia0X4GrCKVYVrJcA5NSzUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMDIyMDAyN1oX
DTI3MDExOTIyMDUyN1owMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIw
Q0YxNTY1ODMzNzA1MDIzRDk4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANqETfF8AzSDTGMUtBoM+/zRpEly34iLrGZgDuLiVyAP4oeX2+j/lYnAukUp
XzP4kXN04lVBd4qqZlnejtzu8xdpKd6tf04a6rPJmW49ym6bImqzfVDx9NtiE7uJ
3B+moO7FWeBHSG2tZsO3UlLh3YDijb70BSJKRZWhD4Xt/P9PIX0DmBWuT0OAhKky
0BNdeccjctDA//11CvjAMrjnrazNDEUzgGO1LLBPH5IrcDRXHVR6SiE0FGv29h6O
n645eAuPfY0O52ruMHnybHOZyaUcddi/dbKeQnINRa1KfmvYPBUgAAe59dLWwq3M
kAYAL+/McuAdy6Va3kg1VCuTveMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFAJ9vskQIRVCY7sM8VZYM3BQI9mHMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8wNzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3NGYyMTRh
LWJmNTUtNDA0OC04NDVkLTIwNjc1ZmI1ZjJhNC8wLzAyN0RCRUM5MTAyMTE1NDI2
M0JCMENGMTU2NTgzMzcwNTAyM0Q5ODcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BADKoIswDQQCAAIwBwMFACQD44AwDQYJKoZIhvcNAQELBQADggEBAIcarY7iLBXD
lR3HYna3LohoyTDBU6kXBtXrFjayDgMGvTQXujlENjMnmAXynhW2hdd/VKQha7PA
wFL6zaCBpAyw4oUhJZUJd3dVXt0pwPCTvQt9nAn6nGZlU8kzxAExBb/exe5liRGw
5//CC/4UABidQNVuy8piR/+npeWoFOL5037vwS9SBE1loo0yLT7LQAZE96Nopmqg
xs7JDYeHzcmlNMvadS8KwN6nyl8mlrRkxCUEOd2R8yHm1hBH8JZRBNEqqIBjQjTs
0kqicXyzU72dRlgyBU2nwInElQepsRg8ykT8GK3gH9fDnHHsJ7dWLicf8R1Yj9wT
OpNrVXn7Pzs=
-----END CERTIFICATE-----