This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer File: 35526D55C5F4431129EA7CE9304705CE395693D9.cer (raw, json) Hash identifier: OOt0pVqi7OBDD+G1Ql78cQACB1iDHVWrEXgaywJHmr4= Subject key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 20B3EA4E816BE4B886A03F8A0515940FBC54C512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft caRepository: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 25 Dec 2025 03:27:58 +0000 Certificate not after: Thu 24 Dec 2026 03:32:58 +0000 Subordinate resources: IP: 103.40.120.0/22 IP: 2403:cb80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b3:ea:4e:81:6b:e4:b8:86:a0:3f:8a:05:15:94:0f:bc:54:c5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 25 03:27:58 2025 GMT Not After : Dec 24 03:32:58 2026 GMT Subject: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:c5:81:f8:f6:eb:b7:22:f2:a8:1f:8c:7f: 79:03:52:9b:78:cd:0b:af:c7:90:1d:d6:7f:ba:90: 2f:d0:e5:56:09:3c:9a:61:e2:f7:a2:02:c4:37:3b: b2:d8:41:2a:f5:bc:4c:92:8f:a9:a0:42:c6:58:ec: b6:b0:8b:da:1f:dd:2c:17:a1:04:4f:35:a3:20:2e: 42:e5:c6:a3:0f:b3:1d:9a:84:19:55:82:05:e5:24: 69:0b:e5:67:fe:d1:e1:b2:a7:30:8d:fe:bc:28:5f: 6d:93:ad:35:1a:24:f8:37:02:05:66:bc:95:a4:d8: e2:42:cc:8f:e0:bd:10:22:c1:08:fe:19:33:ec:01: 77:3d:f0:d9:73:1e:20:6b:06:d2:89:e8:08:be:cd: 33:f3:44:4b:1e:64:b4:16:df:3a:05:5e:a2:11:e3: 8c:de:48:59:4a:80:22:cb:c3:fb:dd:5e:ce:da:ff: 58:e7:b4:d3:1a:a5:d5:23:82:7d:a1:ff:99:67:93: 86:09:69:3e:09:48:01:f0:b9:85:7f:ac:79:4f:d1: 8f:7a:33:8b:62:80:86:03:43:a4:71:72:a7:1e:08: 98:a0:c1:19:35:a1:fb:3c:7f:86:89:a7:6b:30:33: cd:ec:a7:e2:08:3c:bf:75:dc:ba:e1:52:94:01:b2: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.120.0/22 IPv6: 2403:cb80::/32 Signature Algorithm: sha256WithRSAEncryption 7d:89:22:b7:fc:61:f4:51:3b:ee:63:1e:27:47:90:dd:42:1e: 83:b0:ea:b8:11:37:8b:2a:98:31:d7:4a:72:05:23:6f:69:4a: f8:31:08:e0:c7:91:f9:1f:22:d8:e1:c2:20:fd:2a:a7:3c:53: 22:7f:41:99:56:6d:6c:9c:9f:1e:40:d4:fd:f0:aa:b5:67:24: 4e:a3:f5:e7:7d:8a:1e:b4:e6:d4:28:d2:65:bb:41:13:93:58: b4:54:85:d4:17:7b:b9:eb:03:db:b6:00:da:68:55:89:23:38: 8b:fe:b9:01:21:4d:5f:9b:5e:54:25:3a:70:df:3a:cc:b2:48: 78:f3:2d:16:46:50:6a:b2:27:98:cf:d1:54:f2:9a:21:2e:a2: 86:57:2d:f2:2d:cd:01:c6:68:4c:19:1a:2f:dc:e5:e5:4e:47: f2:ae:05:49:44:23:02:9c:91:6f:bf:0c:ab:36:c0:71:54:37: 1e:ef:f0:f1:14:e0:8b:cc:70:14:ee:34:f2:fd:78:3f:12:ca: ef:37:69:86:b7:ee:8e:80:d6:6d:fb:9e:94:76:70:aa:53:23: eb:cb:bb:c8:c5:5f:17:db:e3:19:23:9e:8d:b3:1f:28:fc:c5: ac:42:19:48:d9:91:04:cf:e4:d4:1c:ba:3a:d6:6f:52:56:64: 33:d1:2e:84 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUILPqToFr5LiGoD+KBRWUD7xUxRIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyNTAzMjc1OFoX DTI2MTIyNDAzMzI1OFowMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3 Q0U5MzA0NzA1Q0UzOTU2OTNEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPwxYH49uu3IvKoH4x/eQNSm3jNC6/HkB3Wf7qQL9DlVgk8mmHi96ICxDc7 sthBKvW8TJKPqaBCxljstrCL2h/dLBehBE81oyAuQuXGow+zHZqEGVWCBeUkaQvl Z/7R4bKnMI3+vChfbZOtNRok+DcCBWa8laTY4kLMj+C9ECLBCP4ZM+wBdz3w2XMe IGsG0onoCL7NM/NESx5ktBbfOgVeohHjjN5IWUqAIsvD+91eztr/WOe00xql1SOC faH/mWeThglpPglIAfC5hX+seU/Rj3ozi2KAhgNDpHFypx4ImKDBGTWh+zx/homn azAzzeyn4gg8v3XcuuFSlAGyAxMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDVSbVXF9EMRKep86TBHBc45VpPZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0YjBiZjVi LTQ1NmQtNGU2Mi05ZjQ4LTYxOTIxNDlkNTJjMi8wLzM1NTI2RDU1QzVGNDQzMTEy OUVBN0NFOTMwNDcwNUNFMzk1NjkzRDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnKHgwDQQCAAIwBwMFACQDy4AwDQYJKoZIhvcNAQELBQADggEBAH2JIrf8YfRR O+5jHidHkN1CHoOw6rgRN4sqmDHXSnIFI29pSvgxCODHkfkfItjhwiD9Kqc8UyJ/ QZlWbWycnx5A1P3wqrVnJE6j9ed9ih605tQo0mW7QROTWLRUhdQXe7nrA9u2ANpo VYkjOIv+uQEhTV+bXlQlOnDfOsyySHjzLRZGUGqyJ5jP0VTymiEuooZXLfItzQHG aEwZGi/c5eVOR/KuBUlEIwKckW+/DKs2wHFUNx7v8PEU4IvMcBTuNPL9eD8Syu83 aYa37o6A1m37npR2cKpTI+vLu8jFXxfb4xkjno2zHyj8xaxCGUjZkQTP5NQcujrW b1JWZDPRLoQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:06:19 2026 by rpki-client