This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer
File:                     1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer (raw, json)
Hash identifier:          ylRHlv5WAVONMMJiI1VOfFmyZ3aG7lul05/fTV7F7Jg=
Subject key identifier:   1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       79C2DB1BD0A0DA5B8AC87142179F3855250F4993
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 02:13:40 +0000
Certificate not after:    Wed 20 Jan 2027 02:18:40 +0000
Subordinate resources:    IP: 2001:df3:72c0::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c2:db:1b:d0:a0:da:5b:8a:c8:71:42:17:9f:38:55:25:0f:49:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 21 02:13:40 2026 GMT
            Not After : Jan 20 02:18:40 2027 GMT
        Subject: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:2b:69:03:92:f2:ed:05:4d:ab:86:0a:9a:
                    1f:7a:98:00:c6:90:0c:da:14:b5:64:33:e2:64:b6:
                    66:f0:21:95:bf:87:0f:00:d2:bf:27:00:b2:75:0c:
                    5b:4a:d4:18:48:2f:ac:38:8c:27:87:15:4c:d8:b9:
                    a0:47:c7:e2:27:85:cf:21:fa:19:85:24:73:97:df:
                    4e:d9:4b:a3:37:b3:f7:fd:d9:a6:fb:19:0c:b6:b9:
                    2c:14:c4:c0:27:86:54:fc:e1:fc:92:f4:c8:4d:99:
                    77:fc:4d:2f:f6:8b:5c:96:d4:f7:73:72:bf:9e:ed:
                    f2:6b:8c:62:85:5d:27:eb:c9:70:b1:67:e1:72:ff:
                    2b:0f:a7:b1:9a:6d:12:54:cc:69:39:fa:5e:99:36:
                    3b:34:ca:fe:7c:ba:a5:29:97:82:be:be:81:b4:68:
                    f1:f1:f3:10:32:46:9b:b4:27:9c:7f:0f:b9:f2:ee:
                    6c:d8:4f:33:38:94:9d:35:b6:23:15:27:0f:12:40:
                    2b:3d:35:6a:c4:80:8d:1e:67:01:ff:47:05:50:55:
                    90:d9:fc:6b:ed:48:47:4e:a8:b6:c7:8a:5c:40:e1:
                    5d:91:17:2a:25:78:18:93:f6:f7:11:ab:c9:03:f2:
                    23:44:11:01:7f:08:1c:54:1e:a5:89:2c:ec:b7:74:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:72c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:a1:94:c2:82:a6:71:42:bd:5d:b0:61:1f:4a:e7:4e:9b:
         48:b4:a3:ea:d5:05:33:d0:40:76:22:5f:a4:5f:51:e3:af:21:
         82:85:d8:37:66:1e:48:f8:2a:f3:2f:1a:b8:f7:c4:d7:55:cd:
         11:da:52:20:b5:e2:91:98:75:0a:22:8c:3a:e6:c9:77:80:dd:
         ff:45:b5:d8:d3:5e:b6:ac:b5:65:4b:bf:e0:e3:7b:6a:63:33:
         a6:9a:35:5b:48:f8:0f:85:a4:27:da:7e:e5:34:0b:51:cc:cc:
         94:53:a3:3a:03:50:3e:11:84:90:80:4b:a1:fa:30:9f:62:bf:
         a0:d7:d5:e7:36:26:0f:76:9e:a9:65:e9:d3:a4:40:05:c6:c3:
         79:de:a6:0d:c2:95:cf:3c:36:bc:eb:bf:5a:08:b2:8d:aa:25:
         03:c2:50:90:0e:9f:8a:df:12:c9:cb:22:c4:42:c4:a6:92:62:
         20:1e:45:83:28:a7:db:a9:81:c8:52:51:ac:da:5c:35:c3:f0:
         36:6b:f4:3c:53:b5:7f:83:df:6a:2a:30:44:5a:6c:0e:d3:a2:
         fd:68:52:36:76:e7:7d:d6:34:c7:95:85:e2:41:69:36:3c:af:
         73:e7:bf:e8:46:14:ff:06:f3:6a:20:66:a5:63:6b:4c:b9:74:
         7a:28:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:38 2026 by rpki-client