This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer File: 29692979765B670997413579D7BF5663C05BBD1A.cer (raw, json) Hash identifier: X5xuVxTjn211fi/S9y2z+mnRINPFcmyNFUshaJUf0e8= Subject key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5EB3EA87137A7832035C9B2147074E57F45D8B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft caRepository: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Nov 2025 09:48:16 +0000 Certificate not after: Fri 20 Nov 2026 09:53:16 +0000 Subordinate resources: IP: 45.251.72.0/22 IP: 103.9.124.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b3:ea:87:13:7a:78:32:03:5c:9b:21:47:07:4e:57:f4:5d:8b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 21 09:48:16 2025 GMT Not After : Nov 20 09:53:16 2026 GMT Subject: CN=29692979765B670997413579D7BF5663C05BBD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:c7:d2:7e:18:9d:58:ac:49:18:c0:3d:9d: 59:70:cd:b0:70:de:f2:1a:d3:0e:64:ca:cc:1d:03: 12:39:af:ca:9c:42:9b:cc:7a:36:f2:5d:3f:6c:1f: c6:d7:ac:bb:6e:ee:25:23:f6:21:01:af:8f:90:5e: 66:4a:28:94:ce:c2:c7:1b:e0:1f:92:48:d4:12:77: 4d:25:f8:50:cf:26:98:ed:f6:dc:70:16:73:1b:6d: d9:45:b8:46:71:d0:b9:29:25:eb:ff:e5:41:23:0a: f4:ee:dd:af:9e:a1:7a:fd:d5:10:c3:4f:33:62:52: 78:a3:e5:9e:86:3b:1a:fc:8f:d7:d4:f1:a3:5c:3a: 91:df:d4:97:17:87:0d:2c:1b:a0:da:b5:ab:24:4b: 47:80:a6:a1:1f:47:8d:ef:33:9f:6d:54:66:0d:ef: b2:21:04:61:c4:8b:b8:a1:2e:ab:49:56:4e:8a:24: 9b:dc:a1:f2:35:14:f4:9a:25:2f:1f:98:97:56:fb: ed:30:8e:15:f2:38:8a:d3:72:ff:69:23:ee:fe:37: 4a:9f:02:48:9d:eb:f3:b4:d8:3e:c7:cd:d5:98:54: 24:5b:f6:7c:af:f2:f0:91:04:95:15:25:5f:be:16: 7f:74:9b:dc:fd:e5:be:78:e0:5e:d3:1c:aa:b0:28: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.72.0/22 103.9.124.0/22 Signature Algorithm: sha256WithRSAEncryption 47:2b:65:6c:1b:9f:68:a2:64:ef:4f:a8:0c:a0:e3:95:0e:a7: e7:b6:52:f8:05:ad:7e:74:a6:c2:88:e5:aa:f7:75:bb:be:60: d9:19:e8:2c:4b:01:1c:2e:5f:c0:3d:65:02:53:bb:00:27:b8: ee:22:50:98:19:d8:8b:42:d7:d9:25:07:66:b7:6c:1b:49:cd: e8:8a:03:61:09:0f:d1:1d:91:f4:54:a5:7e:00:cf:71:df:81: 14:8c:19:92:d4:cf:29:21:49:a1:0a:0b:4c:87:34:51:5f:94: ce:00:81:79:50:80:31:b3:50:91:52:8c:fb:65:29:1f:c7:a7: 16:35:14:96:92:7f:60:69:ba:33:c7:1c:f6:7f:e7:21:cf:92: fb:98:d3:d0:de:c2:c0:2f:24:44:56:9d:3a:5d:ad:95:d2:69: da:5a:6c:af:28:19:4f:a0:d2:29:dc:d7:5d:e2:db:ac:ad:ad: 03:51:e0:81:50:c0:c8:0e:5a:c2:42:53:e5:2f:4c:06:25:d7: 37:f9:2c:42:85:79:19:c0:f2:a5:0b:35:e5:cf:02:a4:13:77: 3f:91:07:95:eb:8a:f4:3c:cb:7f:88:77:69:b1:1b:6a:fb:2a: ee:22:2a:5c:c8:26:44:81:3e:73:7b:c5:c7:eb:97:6e:24:23: 9c:45:f4:37 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUXrPqhxN6eDIDXJshRwdOV/Rdi4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyMTA5NDgxNloX DTI2MTEyMDA5NTMxNlowMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEz NTc5RDdCRjU2NjNDMDVCQkQxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJytx9J+GJ1YrEkYwD2dWXDNsHDe8hrTDmTKzB0DEjmvypxCm8x6NvJdP2wf xtesu27uJSP2IQGvj5BeZkoolM7CxxvgH5JI1BJ3TSX4UM8mmO323HAWcxtt2UW4 RnHQuSkl6//lQSMK9O7dr56hev3VEMNPM2JSeKPlnoY7GvyP19Txo1w6kd/UlxeH DSwboNq1qyRLR4CmoR9Hje8zn21UZg3vsiEEYcSLuKEuq0lWTookm9yh8jUU9Jol Lx+Yl1b77TCOFfI4itNy/2kj7v43Sp8CSJ3r87TYPsfN1ZhUJFv2fK/y8JEElRUl X74Wf3Sb3P3lvnjgXtMcqrAo9X0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClpKXl2W2cJl0E1ede/VmPAW70aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiMGExMWI1 LTk0NDEtNGNjOS1hNjcyLWJlOTc5OWI2NTUyMC8wLzI5NjkyOTc5NzY1QjY3MDk5 NzQxMzU3OUQ3QkY1NjYzQzA1QkJEMUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIt+0gDBAJnCXwwDQYJKoZIhvcNAQELBQADggEBAEcrZWwbn2iiZO9PqAyg45UO p+e2UvgFrX50psKI5ar3dbu+YNkZ6CxLARwuX8A9ZQJTuwAnuO4iUJgZ2ItC19kl B2a3bBtJzeiKA2EJD9EdkfRUpX4Az3HfgRSMGZLUzykhSaEKC0yHNFFflM4AgXlQ gDGzUJFSjPtlKR/HpxY1FJaSf2BpujPHHPZ/5yHPkvuY09DewsAvJERWnTpdrZXS adpabK8oGU+g0inc113i26ytrQNR4IFQwMgOWsJCU+UvTAYl1zf5LEKFeRnA8qUL NeXPAqQTdz+RB5XrivQ8y3+Id2mxG2r7Ku4iKlzIJkSBPnN7xcfrl24kI5xF9Dc= -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:36 2025 by rpki-client