This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer (raw, json) Hash identifier: 4imrWluOXgeJOqMH17xE9/JfcUOYQ0oj6npPYYjgEEk= Subject key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66FEA9A5C58A1B962E9A094DCDD5DE96D3487C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft caRepository: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 03 Jan 2026 21:42:07 +0000 Certificate not after: Sat 02 Jan 2027 21:47:07 +0000 Subordinate resources: IP: 103.177.10.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:fe:a9:a5:c5:8a:1b:96:2e:9a:09:4d:cd:d5:de:96:d3:48:7c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 3 21:42:07 2026 GMT Not After : Jan 2 21:47:07 2027 GMT Subject: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:23:f0:ac:d9:c0:9f:e9:aa:33:fd:2d:ce: 3f:08:85:88:f1:6f:4c:44:21:94:a0:33:03:c5:bb: af:d5:cb:c3:60:46:bd:5f:c0:04:09:cf:16:6c:8c: 44:fd:4b:1e:84:0c:cf:7a:20:21:1d:d3:e4:a0:01: 29:49:ae:1e:88:48:c5:6f:14:55:00:60:c0:bb:83: 2b:ab:30:ea:93:dc:16:99:25:2e:a4:fc:d1:bb:c1: 7f:bb:62:90:d5:d4:21:40:6a:4e:d0:ee:05:97:2f: 06:36:58:03:c2:91:09:62:5b:65:83:55:57:03:4a: a1:2d:15:8b:9d:64:b2:e2:63:fb:c0:3e:05:21:3f: be:b0:f4:35:e5:d3:65:3e:29:43:c9:e5:22:e2:23: e8:f0:37:4d:90:76:46:44:8c:17:2a:e6:1b:3f:65: 29:f3:ad:82:9d:2d:d9:d3:db:9c:9c:00:db:d8:5d: f5:c3:de:8f:f8:df:ff:64:11:3c:0e:a1:79:e5:1a: 91:ca:2e:89:d8:ef:6c:ac:23:3c:5c:72:3a:d5:ce: 1f:9b:ce:2f:ab:3b:bf:ff:13:5d:7c:4e:cf:4b:e4: 3c:ed:73:c1:58:a8:2f:70:59:a2:8c:14:54:6a:e6: 23:ba:e0:2d:94:cd:94:a4:06:37:65:f5:8c:0b:e8: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.10.0/23 Signature Algorithm: sha256WithRSAEncryption 31:7b:f6:9a:51:a9:10:b6:50:a8:13:2b:80:2f:18:c9:49:e2: f7:e4:e6:9c:e5:50:e5:27:3a:00:72:af:71:68:15:d3:3e:48: 0b:88:d1:07:f6:48:3e:d9:1e:da:4a:d9:a6:19:22:42:69:4a: 9d:b2:cb:8f:b6:03:2f:8a:d1:97:a9:ba:f7:40:09:04:6c:8a: cd:f6:a7:21:72:fe:e2:b8:3a:60:2b:c3:94:2f:0c:2b:92:5a: e7:24:b7:a6:af:f1:01:f3:ea:9b:7a:9e:b4:74:74:65:f4:f1: f3:e7:32:22:5a:ba:3d:5f:f8:65:04:f7:ce:71:b1:34:cb:cb: 4a:9e:d7:47:ba:12:4f:f7:05:e7:15:93:ee:49:ce:31:11:b3: c0:2b:81:41:17:19:d3:8c:d3:37:fb:ba:f2:32:7a:6c:16:2a: 34:a3:cd:1a:6a:5f:4e:d4:e1:5e:ea:34:f1:de:7e:17:52:d3: e7:d3:05:93:ed:60:2e:88:75:bf:cd:31:a4:44:1a:b5:ef:9e: 0b:a4:ad:1d:5e:73:3d:5f:94:75:52:40:fd:38:31:37:8c:4e: 20:bd:a1:21:d5:77:3c:ff:82:bc:ca:64:1f:ca:47:99:dd:9a: 42:00:5a:05:a2:1a:b9:4d:f7:0a:52:ce:a7:07:ed:b4:5b:6b: b2:d7:3f:19 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZv6ppcWKG5YumglNzdXeltNIfEcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwMzIxNDIwN1oX DTI3MDEwMjIxNDcwN1owMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNC OTBCM0U4MzhENjNEMTJCRkQyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANeQI/Cs2cCf6aoz/S3OPwiFiPFvTEQhlKAzA8W7r9XLw2BGvV/ABAnPFmyM RP1LHoQMz3ogIR3T5KABKUmuHohIxW8UVQBgwLuDK6sw6pPcFpklLqT80bvBf7ti kNXUIUBqTtDuBZcvBjZYA8KRCWJbZYNVVwNKoS0Vi51ksuJj+8A+BSE/vrD0NeXT ZT4pQ8nlIuIj6PA3TZB2RkSMFyrmGz9lKfOtgp0t2dPbnJwA29hd9cPej/jf/2QR PA6heeUakcouidjvbKwjPFxyOtXOH5vOL6s7v/8TXXxOz0vkPO1zwVioL3BZoowU VGrmI7rgLZTNlKQGN2X1jAvoNI0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBlUwzz7r4oHK6O5Cz6DjWPRK/0uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMTk2ZDY1 LTIxYTgtNGIwNC1hOWRlLTcyODNmYmUzYzFjYi8wLzE5NTRDMzNDRkJBRjhBMDcy QkEzQjkwQjNFODM4RDYzRDEyQkZEMkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsQowDQYJKoZIhvcNAQELBQADggEBADF79ppRqRC2UKgTK4AvGMlJ4vfk5pzl UOUnOgByr3FoFdM+SAuI0Qf2SD7ZHtpK2aYZIkJpSp2yy4+2Ay+K0ZepuvdACQRs is32pyFy/uK4OmArw5QvDCuSWuckt6av8QHz6pt6nrR0dGX08fPnMiJauj1f+GUE 985xsTTLy0qe10e6Ek/3BecVk+5JzjERs8ArgUEXGdOM0zf7uvIyemwWKjSjzRpq X07U4V7qNPHefhdS0+fTBZPtYC6Idb/NMaREGrXvngukrR1ecz1flHVSQP04MTeM TiC9oSHVdzz/grzKZB/KR5ndmkIAWgWiGrlN9wpSzqcH7bRba7LXPxk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:57 2026 by rpki-client