This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer
File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer (raw, json)
Hash identifier: ylRHlv5WAVONMMJiI1VOfFmyZ3aG7lul05/fTV7F7Jg=
Subject key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 79C2DB1BD0A0DA5B8AC87142179F3855250F4993
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft
caRepository: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 21 Jan 2026 02:13:40 +0000
Certificate not after: Wed 20 Jan 2027 02:18:40 +0000
Subordinate resources: IP: 2001:df3:72c0::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c2:db:1b:d0:a0:da:5b:8a:c8:71:42:17:9f:38:55:25:0f:49:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 21 02:13:40 2026 GMT
Not After : Jan 20 02:18:40 2027 GMT
Subject: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:2b:69:03:92:f2:ed:05:4d:ab:86:0a:9a:
1f:7a:98:00:c6:90:0c:da:14:b5:64:33:e2:64:b6:
66:f0:21:95:bf:87:0f:00:d2:bf:27:00:b2:75:0c:
5b:4a:d4:18:48:2f:ac:38:8c:27:87:15:4c:d8:b9:
a0:47:c7:e2:27:85:cf:21:fa:19:85:24:73:97:df:
4e:d9:4b:a3:37:b3:f7:fd:d9:a6:fb:19:0c:b6:b9:
2c:14:c4:c0:27:86:54:fc:e1:fc:92:f4:c8:4d:99:
77:fc:4d:2f:f6:8b:5c:96:d4:f7:73:72:bf:9e:ed:
f2:6b:8c:62:85:5d:27:eb:c9:70:b1:67:e1:72:ff:
2b:0f:a7:b1:9a:6d:12:54:cc:69:39:fa:5e:99:36:
3b:34:ca:fe:7c:ba:a5:29:97:82:be:be:81:b4:68:
f1:f1:f3:10:32:46:9b:b4:27:9c:7f:0f:b9:f2:ee:
6c:d8:4f:33:38:94:9d:35:b6:23:15:27:0f:12:40:
2b:3d:35:6a:c4:80:8d:1e:67:01:ff:47:05:50:55:
90:d9:fc:6b:ed:48:47:4e:a8:b6:c7:8a:5c:40:e1:
5d:91:17:2a:25:78:18:93:f6:f7:11:ab:c9:03:f2:
23:44:11:01:7f:08:1c:54:1e:a5:89:2c:ec:b7:74:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:72c0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:77:a1:94:c2:82:a6:71:42:bd:5d:b0:61:1f:4a:e7:4e:9b:
48:b4:a3:ea:d5:05:33:d0:40:76:22:5f:a4:5f:51:e3:af:21:
82:85:d8:37:66:1e:48:f8:2a:f3:2f:1a:b8:f7:c4:d7:55:cd:
11:da:52:20:b5:e2:91:98:75:0a:22:8c:3a:e6:c9:77:80:dd:
ff:45:b5:d8:d3:5e:b6:ac:b5:65:4b:bf:e0:e3:7b:6a:63:33:
a6:9a:35:5b:48:f8:0f:85:a4:27:da:7e:e5:34:0b:51:cc:cc:
94:53:a3:3a:03:50:3e:11:84:90:80:4b:a1:fa:30:9f:62:bf:
a0:d7:d5:e7:36:26:0f:76:9e:a9:65:e9:d3:a4:40:05:c6:c3:
79:de:a6:0d:c2:95:cf:3c:36:bc:eb:bf:5a:08:b2:8d:aa:25:
03:c2:50:90:0e:9f:8a:df:12:c9:cb:22:c4:42:c4:a6:92:62:
20:1e:45:83:28:a7:db:a9:81:c8:52:51:ac:da:5c:35:c3:f0:
36:6b:f4:3c:53:b5:7f:83:df:6a:2a:30:44:5a:6c:0e:d3:a2:
fd:68:52:36:76:e7:7d:d6:34:c7:95:85:e2:41:69:36:3c:af:
73:e7:bf:e8:46:14:ff:06:f3:6a:20:66:a5:63:6b:4c:b9:74:
7a:28:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:38 2026 by rpki-client