This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
File: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer (raw, json)
Hash identifier: tbDO3owh7fXiboNKZjbR1jfo+822c7f7viVuXRBdsL4=
Subject key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 67F202F012D8A4565EDBBA6C4CE2EBF6E99703A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 07 Nov 2025 05:38:28 +0000
Certificate not after: Fri 06 Nov 2026 05:43:28 +0000
Subordinate resources: IP: 103.79.128.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f2:02:f0:12:d8:a4:56:5e:db:ba:6c:4c:e2:eb:f6:e9:97:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 7 05:38:28 2025 GMT
Not After : Nov 6 05:43:28 2026 GMT
Subject: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:18:00:66:67:fa:d8:65:1b:d0:4d:dd:e5:
d2:25:68:86:60:0a:93:f2:1c:d2:a0:46:cb:8a:b2:
bf:70:10:71:ae:3d:ff:72:95:7b:73:50:3e:fd:7c:
dd:df:19:44:84:2c:8b:b8:dc:9c:3d:25:61:97:77:
97:d0:d4:4f:08:db:14:cb:51:21:d0:7c:a7:f8:55:
28:b2:df:61:65:e7:02:f9:d2:93:b3:52:7b:e8:88:
c9:82:1d:00:5f:1e:82:e7:11:5b:2b:06:5d:f0:72:
11:68:77:cc:dd:e9:43:78:72:fe:84:4f:fb:a5:cb:
c1:f0:b7:7d:4f:9a:74:ce:b6:56:c1:b3:fc:ea:21:
2f:01:38:7a:fd:07:90:f5:93:28:87:a0:d5:d7:a3:
45:ac:e1:16:72:e0:33:3a:3c:6a:6a:a7:a9:c2:bf:
dd:82:2f:10:55:7b:fa:e7:9d:09:dc:35:10:a1:73:
82:cb:8d:d0:80:43:72:24:be:33:29:fb:04:95:f5:
e6:cc:9d:10:85:4b:c8:85:a6:3f:bf:7d:59:91:d1:
70:f5:cc:27:11:db:ef:d5:c1:fa:38:50:fb:42:3a:
92:db:59:c4:7f:19:cc:2d:c0:9e:b7:95:6d:4d:e1:
23:7d:e2:81:a6:ba:77:63:f3:2f:b6:42:35:b1:70:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.79.128.0/23
Signature Algorithm: sha256WithRSAEncryption
00:09:a2:57:87:cb:4b:a8:c1:c3:a0:0b:37:17:68:72:4b:83:
60:44:a7:62:8d:af:e9:e1:d4:23:47:37:dc:71:73:2e:69:f8:
6d:6a:56:35:f7:dc:30:bd:a7:8b:0e:98:b0:b6:2d:29:00:63:
18:48:9c:f4:ed:1a:d7:ee:f6:72:de:af:af:a5:52:c5:de:84:
6d:57:0c:23:40:56:e0:75:a7:b9:34:84:e4:0a:f8:d3:5d:c2:
12:d1:16:fc:ba:ba:9e:63:11:15:d7:7c:98:89:2e:bb:5a:90:
1d:2d:e7:b1:05:13:41:5c:69:63:5a:79:44:82:bf:df:07:cd:
7a:f0:3e:49:f8:a7:a2:9a:d0:a0:4b:07:ee:a7:c9:4f:11:92:
a5:32:99:f9:c0:3b:32:50:2d:8d:41:d9:47:9b:db:22:88:f4:
5b:f0:4d:4c:fb:b4:56:b0:1c:ac:a0:3d:c7:49:1c:dc:38:b2:
f8:7e:f9:3b:c6:83:bb:9a:33:cb:7f:24:88:f8:91:6f:bb:ad:
25:44:5a:91:de:a3:1b:47:f5:b8:6c:19:0d:b3:65:e5:03:8c:
85:f2:c2:ca:14:3f:a0:51:b7:ee:d1:94:e4:6c:e6:01:fd:86:
ba:ee:ce:dd:6d:b1:9f:49:ed:7b:c3:2c:00:b2:8b:90:7a:68:
c0:db:c7:a2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUZ/IC8BLYpFZe27psTOLr9umXA6AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNzA1MzgyOFoX
DTI2MTEwNjA1NDMyOFowMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1
REE3NEYwNEM2NkMzMTk0OTJGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKEyGABmZ/rYZRvQTd3l0iVohmAKk/Ic0qBGy4qyv3AQca49/3KVe3NQPv18
3d8ZRIQsi7jcnD0lYZd3l9DUTwjbFMtRIdB8p/hVKLLfYWXnAvnSk7NSe+iIyYId
AF8egucRWysGXfByEWh3zN3pQ3hy/oRP+6XLwfC3fU+adM62VsGz/OohLwE4ev0H
kPWTKIeg1dejRazhFnLgMzo8amqnqcK/3YIvEFV7+uedCdw1EKFzgsuN0IBDciS+
Myn7BJX15sydEIVLyIWmP799WZHRcPXMJxHb79XB+jhQ+0I6kttZxH8ZzC3AnreV
bU3hI33igaa6d2PzL7ZCNbFwTm8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFCcRTPxYXF2y4Kxdp08ExmwxlJLxMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9lNWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YzhiOWUz
LWI0NGYtNDkwYi1iZjUxLTk5ZjJkZDJhMTM2NC8wLzI3MTE0Q0ZDNTg1QzVEQjJF
MEFDNURBNzRGMDRDNjZDMzE5NDkyRjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnT4AwDQYJKoZIhvcNAQELBQADggEBAAAJoleHy0uowcOgCzcXaHJLg2BEp2KN
r+nh1CNHN9xxcy5p+G1qVjX33DC9p4sOmLC2LSkAYxhInPTtGtfu9nLer6+lUsXe
hG1XDCNAVuB1p7k0hOQK+NNdwhLRFvy6up5jERXXfJiJLrtakB0t57EFE0FcaWNa
eUSCv98HzXrwPkn4p6Ka0KBLB+6nyU8RkqUymfnAOzJQLY1B2Ueb2yKI9FvwTUz7
tFawHKygPcdJHNw4svh++TvGg7uaM8t/JIj4kW+7rSVEWpHeoxtH9bhsGQ2zZeUD
jIXywsoUP6BRt+7RlORs5gH9hrruzt1tsZ9J7XvDLACyi5B6aMDbx6I=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:54:20 2025 by rpki-client