This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.cer (raw, json) Hash identifier: Kbka0iRkfVEnCYdXaIp5Y+Qs4JEsws2N60B98it+W3E= Subject key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68A8D17114DED5BBA6195F8F6BB651CBA0CD19D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft caRepository: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 12 Apr 2025 01:37:55 +0000 Certificate not after: Sat 11 Apr 2026 01:42:55 +0000 Subordinate resources: IP: 103.170.196.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a8:d1:71:14:de:d5:bb:a6:19:5f:8f:6b:b6:51:cb:a0:cd:19:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 12 01:37:55 2025 GMT Not After : Apr 11 01:42:55 2026 GMT Subject: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:00:59:f5:ad:eb:f3:b5:0d:9e:47:40:b6: 83:5d:62:a2:0b:21:e5:45:ec:8d:75:db:44:ae:3e: ac:94:93:59:8b:7c:dc:cb:87:b0:19:89:01:a4:c5: bb:49:57:1d:26:0b:16:9c:1e:e9:e3:83:1d:b6:dc: 2b:f4:02:5a:38:5c:3b:2d:c1:d9:4c:5c:e3:7a:ef: 03:fc:59:a9:36:da:93:04:29:e5:26:5b:36:30:26: 78:0c:61:b3:cb:ea:28:0e:66:ec:07:af:f5:10:22: 15:a4:9c:b0:20:11:d2:e7:66:12:ea:d3:ef:8e:06: b5:f0:81:8d:0b:f0:d7:7a:68:e4:9e:b1:23:b6:f5: a0:5d:05:db:35:37:3b:bd:73:d5:a4:c4:db:a6:56: 31:08:2c:cc:76:66:3c:98:c5:d0:82:46:45:c3:9b: 54:bb:ef:67:14:95:37:90:6b:46:69:fc:d5:03:a4: 93:c2:b2:63:3e:69:88:20:20:27:1f:2a:5c:2e:8a: 18:a2:cd:a4:f0:02:0e:e7:34:02:d4:d5:04:4d:52: e6:9b:f4:c4:4b:1a:31:0b:f1:61:df:e7:74:36:fb: a2:84:62:c8:28:6e:f9:62:fb:82:60:84:6c:86:b1: 86:8b:94:23:43:93:a0:2c:f7:40:a5:8d:4e:dd:8e: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.196.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:19:9f:20:87:82:f9:2b:41:eb:09:84:13:38:b0:19:d4:a9: e0:0f:29:c8:ea:a1:fc:38:47:99:f5:3a:b5:c7:e8:24:af:44: 5a:9f:1b:d3:93:8d:f0:f5:e8:b2:6c:5a:dd:96:a8:b8:f8:27: 14:db:de:d1:0e:67:72:4f:f5:3a:ad:49:16:bd:56:be:24:d3: e2:19:4c:cb:d5:ae:d0:1c:94:ba:23:d3:7e:80:e5:7f:f7:0d: ca:a0:76:25:84:9e:60:70:a1:8e:c1:52:3b:2b:ef:1d:ee:c9: 54:6e:80:07:a6:cf:e7:ac:dd:67:12:4b:57:0b:d7:f2:2b:c1: 71:29:a0:eb:c5:86:33:58:3f:cc:fc:6b:12:46:20:86:6c:2b: 0e:72:c9:86:98:7a:fb:8c:c4:d4:9d:53:37:a7:ef:43:bd:bb: 4f:21:fd:16:99:f8:6c:a3:b8:83:45:71:fe:e2:0c:07:74:bb: 91:f5:63:7f:c0:a9:b9:49:ae:6d:8e:42:56:2e:d9:4c:2f:f4: fd:89:c1:c3:ea:c1:7f:b4:de:3f:48:a1:bb:51:6a:ba:4a:cc: 71:64:dd:f3:83:15:1f:62:43:e2:de:30:4c:a6:02:f9:5b:5d: 50:5a:a7:b1:e1:83:8b:c7:4f:2f:96:de:b1:3a:bf:e3:f9:11: 77:a1:f6:9f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaKjRcRTe1bumGV+Pa7ZRy6DNGdQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMjAxMzc1NVoX DTI2MDQxMTAxNDI1NVowMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTcz MzkxNEFGQjcwMzZGQzY3NDJGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkGAFn1revztQ2eR0C2g11iogsh5UXsjXXbRK4+rJSTWYt83MuHsBmJAaTF u0lXHSYLFpwe6eODHbbcK/QCWjhcOy3B2Uxc43rvA/xZqTbakwQp5SZbNjAmeAxh s8vqKA5m7Aev9RAiFaScsCAR0udmEurT744GtfCBjQvw13po5J6xI7b1oF0F2zU3 O71z1aTE26ZWMQgszHZmPJjF0IJGRcObVLvvZxSVN5BrRmn81QOkk8KyYz5piCAg Jx8qXC6KGKLNpPACDuc0AtTVBE1S5pv0xEsaMQvxYd/ndDb7ooRiyChu+WL7gmCE bIaxhouUI0OToCz3QKWNTt2OtDMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBRy3fO4VGqLIBczkUr7cDb8Z0LzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMWE3NDZl LTUzZTMtNGMyMy1iOWU1LWY2NGYzZWYzZDEzNi8wLzE0NzJEREYzQjg1NDZBOEIy MDE3MzM5MTRBRkI3MDM2RkM2NzQyRjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqsQwDQYJKoZIhvcNAQELBQADggEBAG4ZnyCHgvkrQesJhBM4sBnUqeAPKcjq ofw4R5n1OrXH6CSvRFqfG9OTjfD16LJsWt2WqLj4JxTb3tEOZ3JP9TqtSRa9Vr4k 0+IZTMvVrtAclLoj036A5X/3DcqgdiWEnmBwoY7BUjsr7x3uyVRugAemz+es3WcS S1cL1/IrwXEpoOvFhjNYP8z8axJGIIZsKw5yyYaYevuMxNSdUzen70O9u08h/RaZ +GyjuINFcf7iDAd0u5H1Y3/AqblJrm2OQlYu2Uwv9P2JwcPqwX+03j9IobtRarpK zHFk3fODFR9iQ+LeMEymAvlbXVBap7Hhg4vHTy+W3rE6v+P5EXeh9p8= -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:42 2025 by rpki-client