This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer (raw, json) Hash identifier: 9uesjcr8nMe2n6v4HcGiIzxGfEr+WfAtWpv+8YhSiXI= Subject key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D4F0FDE1D9EFA800674A97D88442F5EDF1740C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft caRepository: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 22 Jan 2026 17:14:37 +0000 Certificate not after: Thu 21 Jan 2027 17:19:37 +0000 Subordinate resources: IP: 103.144.46.0/23 IP: 2405:6640::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4f:0f:de:1d:9e:fa:80:06:74:a9:7d:88:44:2f:5e:df:17:40:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 22 17:14:37 2026 GMT Not After : Jan 21 17:19:37 2027 GMT Subject: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:64:e7:3c:00:37:f2:d9:ec:d9:86:5e:fc: e8:e0:e0:8a:18:56:70:3a:cd:8b:47:13:34:38:9d: 90:8a:54:21:da:c7:d3:04:04:ea:81:8d:2f:53:67: f6:ff:94:31:3d:d1:a9:53:7f:7c:38:ee:c2:b5:41: 00:8b:f4:7a:ea:e7:ce:af:6a:e5:4d:7c:60:98:c6: 80:87:18:40:13:b8:af:06:85:9d:73:96:ac:29:ec: 38:dc:c5:90:d6:6d:1a:34:a0:1b:73:04:a8:57:8d: 17:98:ff:03:fd:a7:2b:ff:8e:02:11:06:cb:30:19: 4b:c2:b0:41:e2:5e:18:bd:23:a7:50:df:bb:ed:37: dd:82:2b:c5:47:fd:0d:0a:f9:6b:b3:d9:df:6d:0a: d4:05:42:af:50:5d:fb:18:ee:cf:20:f8:f6:44:3a: 51:d3:e1:82:c5:f3:3a:77:4b:24:e2:fe:dd:ea:ec: 5c:21:d1:23:b0:6d:f0:8c:df:7b:69:23:24:1d:d6: 21:7a:cd:19:23:d8:f2:6f:ca:4f:c6:0e:02:d8:bf: df:0b:0c:75:6e:c5:cb:f3:6f:a7:61:2b:26:56:3d: d2:04:1d:83:79:a1:02:69:bc:6f:9e:ce:65:e7:10: 20:33:f7:9e:c7:38:1d:d9:0e:0c:a0:22:19:d9:20: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.46.0/23 IPv6: 2405:6640::/32 Signature Algorithm: sha256WithRSAEncryption 04:2a:ac:68:e1:02:65:f0:7d:a2:5f:47:07:50:88:0e:23:7d: 96:09:fa:97:6d:f3:1e:5a:b1:89:31:05:22:e5:df:01:f1:6d: c6:8a:71:01:af:cf:07:fe:1d:40:c4:6e:1e:d1:0a:f7:4a:77: e7:0c:ae:dc:aa:a6:89:3d:1e:73:86:41:aa:64:f2:80:29:33: 31:68:57:fa:c6:ac:ac:d8:07:f5:b4:c3:d2:00:65:db:e0:0a: 20:c0:5e:3c:13:67:d3:55:7a:53:19:b2:e4:b9:02:46:f3:b0: 96:f6:de:a4:ce:03:cd:5e:8f:47:23:bc:40:41:c1:4f:3e:8d: 37:50:aa:91:49:8f:30:fe:d9:cd:70:38:39:72:8e:15:38:55: 83:70:72:c1:5a:53:a0:ee:76:f4:cf:62:7c:5f:a7:4a:3e:88: f4:3d:d9:ad:bd:af:a5:bd:15:a6:47:2c:b6:93:47:8d:36:f4: fb:20:9b:0b:87:1a:fb:87:20:c9:e4:21:dd:52:c8:7e:5d:6f: 2e:64:0e:3f:75:78:ac:be:99:13:17:94:92:74:1d:38:35:3a: 8a:eb:a1:7b:15:d0:47:8d:e3:03:30:33:ef:9e:09:af:e4:ae: 85:e4:d4:a2:be:72:66:18:9d:b6:9a:af:53:2c:50:68:27:59: 80:a4:44:f6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUTU8P3h2e+oAGdKl9iEQvXt8XQMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMjE3MTQzN1oX DTI3MDEyMTE3MTkzN1owMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVG NThCMkE5Q0Q4RDU2NkE1MUZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcnZOc8ADfy2ezZhl786ODgihhWcDrNi0cTNDidkIpUIdrH0wQE6oGNL1Nn 9v+UMT3RqVN/fDjuwrVBAIv0eurnzq9q5U18YJjGgIcYQBO4rwaFnXOWrCnsONzF kNZtGjSgG3MEqFeNF5j/A/2nK/+OAhEGyzAZS8KwQeJeGL0jp1Dfu+033YIrxUf9 DQr5a7PZ320K1AVCr1Bd+xjuzyD49kQ6UdPhgsXzOndLJOL+3ersXCHRI7Bt8Izf e2kjJB3WIXrNGSPY8m/KT8YOAti/3wsMdW7Fy/Nvp2ErJlY90gQdg3mhAmm8b57O ZecQIDP3nsc4HdkODKAiGdkgq3sCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBTIy5f9OBGQOS71iyqc2NVmpR/WMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkYWVjNjZj LTllMWQtNDMyMS1iMDY5LWVlYWI0NzkzYTAwYi8wLzE0QzhDQjk3RkQzODExOTAz OTJFRjU4QjJBOUNEOEQ1NjZBNTFGRDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkC4wDQQCAAIwBwMFACQFZkAwDQYJKoZIhvcNAQELBQADggEBAAQqrGjhAmXw faJfRwdQiA4jfZYJ+pdt8x5asYkxBSLl3wHxbcaKcQGvzwf+HUDEbh7RCvdKd+cM rtyqpok9HnOGQapk8oApMzFoV/rGrKzYB/W0w9IAZdvgCiDAXjwTZ9NVelMZsuS5 AkbzsJb23qTOA81ej0cjvEBBwU8+jTdQqpFJjzD+2c1wODlyjhU4VYNwcsFaU6Du dvTPYnxfp0o+iPQ92a29r6W9FaZHLLaTR4029PsgmwuHGvuHIMnkId1SyH5dby5k Dj91eKy+mRMXlJJ0HTg1OorroXsV0EeN4wMwM++eCa/kroXk1KK+cmYYnbaar1Ms UGgnWYCkRPY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:22 2026 by rpki-client