This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
File:                     1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer (raw, json)
Hash identifier:          znFWPQWz2hUF3hbk0tIVjdrrXDpsCNEL6M/gAmHQg5A=
Subject key identifier:   1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4C807B25498CAEB1DFFC23619EE18EABBE62EBCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 28 Dec 2025 23:48:13 +0000
Certificate not after:    Sun 27 Dec 2026 23:53:13 +0000
Subordinate resources:    IP: 103.102.140.0/22
                          IP: 2401:e440::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:80:7b:25:49:8c:ae:b1:df:fc:23:61:9e:e1:8e:ab:be:62:eb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 28 23:48:13 2025 GMT
            Not After : Dec 27 23:53:13 2026 GMT
        Subject: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:66:8c:4f:a4:b8:84:ac:8c:c6:0b:ff:21:36:
                    7d:78:f8:9d:74:df:e5:dd:81:36:03:70:29:98:2e:
                    ff:3c:21:cb:90:b1:3e:b0:87:47:13:27:fd:07:99:
                    b9:06:ed:52:5a:73:88:bb:90:a0:3a:fa:08:fc:dd:
                    34:21:c6:37:53:e4:f5:85:2c:bd:1e:cd:8d:08:13:
                    2c:a0:08:0e:8d:e6:51:de:f7:19:d8:d1:b7:1b:00:
                    89:15:1c:1b:8d:6f:5b:56:c5:06:e0:a2:6f:70:7e:
                    93:f9:91:23:1b:cb:47:74:5e:b8:a2:be:cb:50:7a:
                    76:bc:9b:e4:07:9c:ce:c7:28:90:74:6d:27:5f:5c:
                    f6:2c:f5:5f:04:f1:a0:7a:0b:2b:dc:a6:0c:4c:0d:
                    16:95:c2:30:d5:0e:d7:6c:17:f9:f7:46:ff:af:4d:
                    90:c4:4a:9a:1d:40:fb:73:8f:29:bb:6f:f1:b8:05:
                    8d:c7:0e:6b:64:15:f2:57:1b:23:1c:8e:3a:3b:e7:
                    03:6d:3a:88:ea:e3:da:2a:0b:01:db:92:d1:fa:6b:
                    8f:cd:e4:b3:fd:aa:1f:d4:73:5f:b2:19:63:c4:4d:
                    c7:51:f3:50:8c:c8:4b:61:b0:a9:73:92:7e:16:ec:
                    5e:a7:2b:1a:1a:a5:23:67:99:d6:95:a4:cf:c8:be:
                    68:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.140.0/22
                IPv6:
                  2401:e440::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:39:b5:ea:18:8f:45:0b:b7:5d:5e:60:21:78:9e:f9:2d:cc:
         21:5d:57:06:ce:cc:ae:d9:c3:24:a6:6a:b5:c0:93:61:2c:01:
         40:68:94:73:c3:52:89:7c:1d:10:39:2b:ca:0c:bd:c2:63:e9:
         6b:ed:b4:71:9a:26:c7:9a:2a:95:ef:9a:d4:f6:3a:0d:7f:48:
         2b:19:ac:a6:00:b5:b1:73:13:75:f1:54:db:ab:a1:5b:d1:a5:
         6b:66:ad:6d:aa:32:06:8d:c9:e4:00:f5:87:be:5b:6b:1e:33:
         39:c1:f3:41:2d:57:5a:8a:f8:a3:21:8e:6d:05:5a:e3:de:df:
         e2:50:80:66:37:29:58:2d:98:3c:e2:d3:c2:ef:96:d1:c9:b5:
         58:a4:ae:81:dc:b0:df:d6:ed:c3:53:a2:c7:75:d9:81:5e:52:
         47:7f:d9:31:c1:7a:2d:c4:31:19:07:a0:e3:de:ec:38:eb:ca:
         f4:90:7d:60:d7:75:d2:06:b7:78:68:fc:15:84:c9:81:95:14:
         de:ce:02:83:0e:ce:65:c3:0e:8e:ea:64:3c:a9:5a:1f:1d:6d:
         2d:c2:24:67:46:ab:1b:af:d5:68:5a:7e:08:0d:b0:2e:d7:67:
         a0:79:1d:84:91:bd:16:37:35:e8:ba:71:d2:e1:7d:64:0c:7a:
         2e:94:9d:35
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUTIB7JUmMrrHf/CNhnuGOq75i680wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyODIzNDgxM1oX
DTI2MTIyNzIzNTMxM1owMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3
MUNBNUNGMDg4RjdBRjUwRDc1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOVmjE+kuISsjMYL/yE2fXj4nXTf5d2BNgNwKZgu/zwhy5CxPrCHRxMn/QeZ
uQbtUlpziLuQoDr6CPzdNCHGN1Pk9YUsvR7NjQgTLKAIDo3mUd73GdjRtxsAiRUc
G41vW1bFBuCib3B+k/mRIxvLR3ReuKK+y1B6dryb5AeczscokHRtJ19c9iz1XwTx
oHoLK9ymDEwNFpXCMNUO12wX+fdG/69NkMRKmh1A+3OPKbtv8bgFjccOa2QV8lcb
IxyOOjvnA206iOrj2ioLAduS0fprj83ks/2qH9RzX7IZY8RNx1HzUIzIS2GwqXOS
fhbsXqcrGhqlI2eZ1pWkz8i+aEMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFB1gAaT0ZUizfthxylzwiPevUNdUMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iNTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NjMyZDk5
LTMyYjItNDY3Yi1iN2ZlLTBkMjVmODUzYmZhNi8wLzFENjAwMUE0RjQ2NTQ4QjM3
RUQ4NzFDQTVDRjA4OEY3QUY1MEQ3NTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAJnZowwDQQCAAIwBwMFACQB5EAwDQYJKoZIhvcNAQELBQADggEBAIU5teoYj0UL
t11eYCF4nvktzCFdVwbOzK7ZwySmarXAk2EsAUBolHPDUol8HRA5K8oMvcJj6Wvt
tHGaJseaKpXvmtT2Og1/SCsZrKYAtbFzE3XxVNuroVvRpWtmrW2qMgaNyeQA9Ye+
W2seMznB80EtV1qK+KMhjm0FWuPe3+JQgGY3KVgtmDzi08LvltHJtVikroHcsN/W
7cNTosd12YFeUkd/2THBei3EMRkHoOPe7DjryvSQfWDXddIGt3ho/BWEyYGVFN7O
AoMOzmXDDo7qZDypWh8dbS3CJGdGqxuv1WhafggNsC7XZ6B5HYSRvRY3Nei6cdLh
fWQMei6UnTU=
-----END CERTIFICATE-----