This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer File: 0D14F274908EB737876B8079A7129AF9936DB91E.cer (raw, json) Hash identifier: gnw7l8NUjTCrAIfZtXZvTeHILcnHXED4QgEi09xngoY= Subject key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4EA6C61250893D9AC10046B0522A34DA34BC0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft caRepository: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 04 Dec 2025 18:31:31 +0000 Certificate not after: Thu 03 Dec 2026 18:36:31 +0000 Subordinate resources: IP: 103.214.229.0/24 IP: 2001:df1:ca00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a6:c6:12:50:89:3d:9a:c1:00:46:b0:52:2a:34:da:34:bc:01:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 4 18:31:31 2025 GMT Not After : Dec 3 18:36:31 2026 GMT Subject: CN=0D14F274908EB737876B8079A7129AF9936DB91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:63:33:7c:bb:a3:34:53:32:55:06:e1:a1: d8:6d:c7:5d:a2:f4:fc:9e:74:f4:5f:a2:b6:57:01: 0e:f6:4b:d6:22:54:49:5c:af:89:a9:d6:ad:89:13: 30:6f:dd:27:9c:57:05:d2:ec:67:1c:9d:75:ee:7a: f1:00:3d:06:36:6c:4b:ca:0a:2f:96:30:e5:ce:d6: 2b:4b:87:58:4b:b9:f5:3c:4d:15:52:bb:f2:65:1b: 6a:4a:6e:2c:7e:d3:f1:a4:3b:ce:7b:15:8c:92:db: 91:48:65:fc:a2:34:69:49:1e:8a:bc:c7:89:b9:4b: 77:4a:01:e3:68:b3:4f:74:b3:31:25:4f:35:53:0e: 27:91:e1:cc:a6:8a:8e:4e:dd:87:16:72:04:29:ca: 69:a9:90:46:be:9c:fd:1e:b6:42:c7:bc:71:85:21: db:7f:f0:1c:ae:0a:f6:c7:7c:52:04:a6:b4:82:c1: a3:c2:0f:70:68:82:89:bd:b8:b8:5c:97:d7:c6:79: 94:f0:7f:33:f2:0f:6c:5c:cd:0a:e2:84:5e:80:eb: cd:94:9f:f1:f1:a8:e2:17:1f:91:19:b1:34:9d:cf: 32:c8:1a:3e:9b:4b:f0:b8:6c:69:fe:d9:96:7b:9e: 09:12:7c:85:63:3b:3c:e6:06:9b:7e:2b:0d:f8:0e: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.229.0/24 IPv6: 2001:df1:ca00::/48 Signature Algorithm: sha256WithRSAEncryption 44:31:af:68:a7:dd:22:2a:ba:a3:87:c9:b4:32:d6:a1:29:1a: e1:b2:fd:44:6a:18:ee:b9:85:4a:a4:7d:88:09:38:f4:a0:bd: 14:22:2b:7c:bb:86:6e:ac:ef:b6:1e:b8:e3:e8:a8:0a:95:31: 00:94:a8:83:99:2c:d1:f6:78:a6:50:f8:c2:8a:09:2b:a9:a4: 1d:33:bb:83:f9:27:0c:fa:88:10:62:c7:64:e8:02:4d:16:45: 9c:29:ac:ea:2c:43:b4:12:c5:8c:23:e4:72:e5:64:96:81:32: 4e:29:a8:4a:39:8e:a8:dc:f6:a3:7d:e8:bc:92:fe:93:03:f3: e6:ec:d5:84:a6:a6:fa:76:c8:87:0b:e2:63:91:e2:49:e9:93: 9e:e4:90:10:5f:04:ab:8c:02:8f:6b:bb:ad:0a:1f:fc:35:91: 1b:9b:78:66:ba:b3:70:5c:5c:b0:40:dc:da:fe:7b:cf:4e:af: 8d:e7:8d:c8:1c:45:99:81:33:e5:2e:39:bd:73:93:c4:bf:3a: f4:bf:74:30:db:c2:c5:18:4e:6c:3d:ae:e5:ca:bd:30:1b:71: eb:e6:21:79:1d:86:3e:b1:1c:d7:7b:f5:2f:14:67:26:8f:fe: dd:0e:cc:6d:85:28:c4:d1:11:a1:43:21:b7:63:c1:ff:c3:d9: f0:08:54:20 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUTqbGElCJPZrBAEawUio02jS8AQIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwNDE4MzEzMVoX DTI2MTIwMzE4MzYzMVowMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4 MDc5QTcxMjlBRjk5MzZEQjkxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPvYzN8u6M0UzJVBuGh2G3HXaL0/J509F+itlcBDvZL1iJUSVyvianWrYkT MG/dJ5xXBdLsZxydde568QA9BjZsS8oKL5Yw5c7WK0uHWEu59TxNFVK78mUbakpu LH7T8aQ7znsVjJLbkUhl/KI0aUkeirzHiblLd0oB42izT3SzMSVPNVMOJ5HhzKaK jk7dhxZyBCnKaamQRr6c/R62Qse8cYUh23/wHK4K9sd8UgSmtILBo8IPcGiCib24 uFyX18Z5lPB/M/IPbFzNCuKEXoDrzZSf8fGo4hcfkRmxNJ3PMsgaPptL8Lhsaf7Z lnueCRJ8hWM7POYGm34rDfgOgHECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA0U8nSQjrc3h2uAeacSmvmTbbkeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjA1NTZk LWNjMjEtNGU1Ny1hNWJhLWEyMTExZTA1OWI3YS8wLzBEMTRGMjc0OTA4RUI3Mzc4 NzZCODA3OUE3MTI5QUY5OTM2REI5MUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABn1uUwDwQCAAIwCQMHACABDfHKADANBgkqhkiG9w0BAQsFAAOCAQEARDGvaKfd Iiq6o4fJtDLWoSka4bL9RGoY7rmFSqR9iAk49KC9FCIrfLuGbqzvth644+ioCpUx AJSog5ks0fZ4plD4wooJK6mkHTO7g/knDPqIEGLHZOgCTRZFnCms6ixDtBLFjCPk cuVkloEyTimoSjmOqNz2o33ovJL+kwPz5uzVhKam+nbIhwviY5HiSemTnuSQEF8E q4wCj2u7rQof/DWRG5t4ZrqzcFxcsEDc2v57z06vjeeNyBxFmYEz5S45vXOTxL86 9L90MNvCxRhObD2u5cq9MBtx6+YheR2GPrEc13v1LxRnJo/+3Q7MbYUoxNERoUMh t2PB/8PZ8AhUIA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:38 2025 by rpki-client