This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer File: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer (raw, json) Hash identifier: 4nleb8ta7spM0rQGLod0FjS7PSIDPyFs3+FhSInaDVQ= Subject key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3CCF490B8F34D59DDD008E670A5C9029A652241F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft caRepository: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 05 Jan 2026 19:53:16 +0000 Certificate not after: Mon 04 Jan 2027 19:58:16 +0000 Subordinate resources: IP: 103.54.172.0/24 IP: 103.242.233.0/24 IP: 2001:df4:5000::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:cf:49:0b:8f:34:d5:9d:dd:00:8e:67:0a:5c:90:29:a6:52:24:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 5 19:53:16 2026 GMT Not After : Jan 4 19:58:16 2027 GMT Subject: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:29:82:f0:e9:bd:88:35:a0:b4:89:7e:5e:a9: be:71:f8:9c:dd:ba:a9:1f:79:58:3c:fd:26:26:93: a6:39:9e:3c:e9:c0:aa:cd:36:0a:d8:06:44:6c:3c: 9d:94:ad:c3:30:10:9e:6a:b9:0c:61:1a:58:17:6b: 36:d7:b5:5d:8e:98:32:36:3c:b9:2b:bd:9e:6c:5f: 70:d4:89:5d:60:18:18:a9:17:03:af:13:2a:a7:9f: 9e:fa:76:42:94:0f:28:29:1c:f0:66:7c:d4:86:66: f3:cc:1d:0f:1a:5d:fa:63:af:58:1d:d0:e0:67:12: b5:a5:a5:5c:e7:49:06:e3:b8:39:9a:96:4d:8c:22: 01:88:54:68:8d:f9:59:c1:d7:77:16:46:30:8b:f7: cd:a7:23:c6:c1:f2:b0:5b:79:e7:d2:9e:ba:b4:69: 92:0f:46:0a:ac:f2:48:49:af:ee:74:20:5b:07:48: 4b:2d:8b:d1:bb:1a:5e:ac:69:5b:68:56:da:32:6a: 72:91:b6:45:58:01:c7:35:31:5d:f7:2c:a5:2d:58: f7:b2:30:c7:ba:2a:8d:57:dd:1c:13:6e:fb:83:85: 8c:a7:ba:04:af:c1:e7:f5:b2:8c:18:8a:cd:41:ee: 4a:26:68:37:8c:37:10:7f:c6:6c:f0:7a:2f:d5:7a: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.172.0/24 103.242.233.0/24 IPv6: 2001:df4:5000::/48 Signature Algorithm: sha256WithRSAEncryption 0c:c3:91:37:26:a7:82:15:25:c9:6d:60:7e:f8:57:77:b8:37: 0a:9b:33:82:0d:65:ff:66:16:d3:e8:ea:8e:e6:f6:a6:3c:7e: ff:dc:e5:59:cb:70:3f:08:df:a6:0d:3c:2c:1c:66:0f:0d:90: 16:a0:0a:7e:a7:4f:06:b6:e6:84:48:7b:fc:cd:52:e4:5b:1f: e9:49:a9:6f:40:8f:7a:73:77:30:48:05:65:45:8b:ce:46:31: e3:52:bf:db:50:b5:ab:37:f5:8b:d3:95:b3:f6:80:05:6b:11: 66:59:0a:3d:17:86:b6:d0:7c:4e:2f:44:04:5b:3b:c9:db:60: 08:98:32:ab:1b:14:3d:e6:c8:26:b4:fd:33:5c:cc:52:a1:5d: 75:45:8e:17:ba:bf:a4:4b:18:43:d0:10:d6:ed:24:48:df:07: 70:2d:8a:d6:73:15:d1:a4:bf:4f:b4:60:2a:12:47:d0:56:12: 9f:44:9d:a7:d5:7f:08:16:63:2f:ee:25:b6:f7:f3:41:b9:1e: 03:ee:c3:e6:ef:94:00:8c:78:42:bd:4e:e4:29:24:ab:4c:5a: 3d:2f:97:eb:30:30:8d:b8:57:6f:95:fd:09:16:fb:ea:61:97: 12:22:0c:39:0c:78:10:5f:16:eb:ec:39:8c:6b:91:b4:7b:39: cc:4d:db:42 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUPM9JC4801Z3dAI5nClyQKaZSJB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwNTE5NTMxNloX DTI3MDEwNDE5NTgxNlowMzExMC8GA1UEAxMoMTc5Mjg0QTJCRjYwNkY2OUE2RkYz NDBDRDNENjQ2MEJFOUJGMjZERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIpgvDpvYg1oLSJfl6pvnH4nN26qR95WDz9JiaTpjmePOnAqs02CtgGRGw8 nZStwzAQnmq5DGEaWBdrNte1XY6YMjY8uSu9nmxfcNSJXWAYGKkXA68TKqefnvp2 QpQPKCkc8GZ81IZm88wdDxpd+mOvWB3Q4GcStaWlXOdJBuO4OZqWTYwiAYhUaI35 WcHXdxZGMIv3zacjxsHysFt559KeurRpkg9GCqzySEmv7nQgWwdISy2L0bsaXqxp W2hW2jJqcpG2RVgBxzUxXfcspS1Y97Iwx7oqjVfdHBNu+4OFjKe6BK/B5/WyjBiK zUHuSiZoN4w3EH/GbPB6L9V6cBcCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBeShKK/YG9ppv80DNPWRgvpvybdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lN2UwZmFmMC03ODhkLTQ5NWItYWM5OC1mMzUxNjE5NWRiNjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3ZTBmYWYw LTc4OGQtNDk1Yi1hYzk4LWYzNTE2MTk1ZGI2MC8wLzE3OTI4NEEyQkY2MDZGNjlB NkZGMzQwQ0QzRDY0NjBCRTlCRjI2REQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnNqwDBABn8ukwDwQCAAIwCQMHACABDfRQADANBgkqhkiG9w0BAQsFAAOCAQEA DMORNyanghUlyW1gfvhXd7g3Cpszgg1l/2YW0+jqjub2pjx+/9zlWctwPwjfpg08 LBxmDw2QFqAKfqdPBrbmhEh7/M1S5Fsf6Umpb0CPenN3MEgFZUWLzkYx41K/21C1 qzf1i9OVs/aABWsRZlkKPReGttB8Ti9EBFs7ydtgCJgyqxsUPebIJrT9M1zMUqFd dUWOF7q/pEsYQ9AQ1u0kSN8HcC2K1nMV0aS/T7RgKhJH0FYSn0Sdp9V/CBZjL+4l tvfzQbkeA+7D5u+UAIx4Qr1O5Ckkq0xaPS+X6zAwjbhXb5X9CRb76mGXEiIMOQx4 EF8W6+w5jGuRtHs5zE3bQg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:40 2026 by rpki-client