This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer File: 1F969EE9B0838D22156118A888B81BF27B859BD5.cer (raw, json) Hash identifier: IdSI8+N8uNJNewP0VoOUUP4H/E9fB+Z+d2GF9C6TNxA= Subject key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02BFC929C0FAE141F157086AD41A2DC23A9A3BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft caRepository: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 Jan 2026 13:37:27 +0000 Certificate not after: Fri 15 Jan 2027 13:42:27 +0000 Subordinate resources: IP: 202.57.16.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bf:c9:29:c0:fa:e1:41:f1:57:08:6a:d4:1a:2d:c2:3a:9a:3b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 13:37:27 2026 GMT Not After : Jan 15 13:42:27 2027 GMT Subject: CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:ea:b8:3a:4d:a0:b1:73:7a:53:3e:85:14: 63:d7:bf:6f:75:da:1a:0e:9c:04:55:6e:1f:4d:40: 20:09:22:5a:e1:33:7a:23:30:69:1d:1e:27:46:54: 3d:b1:da:fe:c6:62:46:ff:dd:86:c7:ba:7c:57:15: 7e:9e:02:f4:49:2b:a2:a6:65:c0:f7:58:8a:e5:43: a9:9b:a5:6b:4e:70:d9:2a:d5:57:dc:f7:dc:9f:0d: d4:f9:9e:b0:75:0a:b9:7f:0a:1d:8c:74:f4:8e:ae: 3e:09:da:23:0b:7c:d2:0e:58:a5:c3:23:52:96:75: 0e:2b:97:ba:b0:4e:76:e4:af:75:30:6f:3e:00:52: cc:8a:d8:16:2f:17:01:b5:ff:fd:e3:ef:42:3c:14: 90:35:39:8f:b9:14:be:fe:ce:0a:18:11:58:b3:6d: b1:b5:d2:82:b6:db:ff:b2:69:99:cf:0d:9f:1a:b8: e5:64:cd:42:7e:9e:f9:97:19:e4:53:b7:03:c0:d0: 75:2f:f7:f0:4e:b7:2b:95:10:4d:ec:62:a5:53:4f: 1d:fc:40:cc:32:06:93:bd:56:e1:53:a6:95:94:04: 2e:4d:1d:d1:87:c7:6d:d9:12:38:9b:5c:b8:fd:e8: f5:da:d8:99:cd:8a:ce:84:66:ed:35:db:2e:f0:37: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.16.0/20 Signature Algorithm: sha256WithRSAEncryption 28:e7:0b:67:36:7b:28:97:12:d1:94:f9:90:8f:04:e5:11:84: 9e:5f:70:88:3f:54:a8:09:a7:cf:31:c4:e6:c0:69:bd:95:0d: 01:e6:63:36:a8:17:d9:e1:59:51:c6:a4:54:69:56:28:36:b1: 72:a8:cc:e9:7f:a6:8a:50:0c:4c:f0:a6:cd:9a:fa:e6:0c:ee: db:ee:2b:67:d9:03:65:2d:83:c4:77:4a:c4:99:eb:be:90:7a: 10:df:3e:b9:22:40:91:b8:8e:75:0b:cd:be:1d:e4:74:98:c6: 1a:9b:0c:11:96:69:7f:1a:fd:9d:0b:4f:32:1f:fd:78:a7:e5: 27:9f:88:bf:d7:73:9b:a1:a2:0a:6c:4e:f9:b8:0a:2c:df:90: 58:cc:d3:28:96:13:d9:f5:cc:9a:65:2a:9e:35:90:42:89:bd: c8:66:fb:d7:31:78:c4:7b:0b:6e:18:67:6a:c1:13:c7:7d:20: bd:b4:9a:26:b8:30:9d:81:3a:63:75:12:2e:e4:59:1e:db:cb: 8e:17:21:f4:bc:e7:4f:8b:8f:85:80:9a:bc:09:86:9d:b4:d4: 62:c1:38:7f:b9:9e:03:5d:1f:1b:fa:4d:64:79:93:7d:db:70: 16:c1:82:af:55:73:1c:d8:95:98:02:cf:04:e3:c3:66:a5:1c: 4a:5d:39:11 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAr/JKcD64UHxVwhq1BotwjqaO7IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNjEzMzcyN1oX DTI3MDExNTEzNDIyN1owMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjEx OEE4ODhCODFCRjI3Qjg1OUJENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMda6rg6TaCxc3pTPoUUY9e/b3XaGg6cBFVuH01AIAkiWuEzeiMwaR0eJ0ZU PbHa/sZiRv/dhse6fFcVfp4C9EkroqZlwPdYiuVDqZula05w2SrVV9z33J8N1Pme sHUKuX8KHYx09I6uPgnaIwt80g5YpcMjUpZ1DiuXurBOduSvdTBvPgBSzIrYFi8X AbX//ePvQjwUkDU5j7kUvv7OChgRWLNtsbXSgrbb/7Jpmc8Nnxq45WTNQn6e+ZcZ 5FO3A8DQdS/38E63K5UQTexipVNPHfxAzDIGk71W4VOmlZQELk0d0YfHbdkSOJtc uP3o9drYmc2KzoRm7TXbLvA3yokCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB+Wnumwg40iFWEYqIi4G/J7hZvVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkM2YwOTVi LTcxMzAtNDEyMi1hZjI1LTdkMmU3YTExYjFiMS8wLzFGOTY5RUU5QjA4MzhEMjIx NTYxMThBODg4QjgxQkYyN0I4NTlCRDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKORAwDQYJKoZIhvcNAQELBQADggEBACjnC2c2eyiXEtGU+ZCPBOURhJ5fcIg/ VKgJp88xxObAab2VDQHmYzaoF9nhWVHGpFRpVig2sXKozOl/popQDEzwps2a+uYM 7tvuK2fZA2Utg8R3SsSZ676QehDfPrkiQJG4jnULzb4d5HSYxhqbDBGWaX8a/Z0L TzIf/Xin5SefiL/Xc5uhogpsTvm4CizfkFjM0yiWE9n1zJplKp41kEKJvchm+9cx eMR7C24YZ2rBE8d9IL20mia4MJ2BOmN1Ei7kWR7by44XIfS850+Lj4WAmrwJhp20 1GLBOH+5ngNdHxv6TWR5k33bcBbBgq9VcxzYlZgCzwTjw2alHEpdORE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:10:05 2026 by rpki-client