This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer File: 35AF7B054A8CC95835EC5A2F9275004D39521553.cer (raw, json) Hash identifier: ngDmUTC+gFvil4/LtLoBZlB8YW9Haj4hNU12lV6Hr0Y= Subject key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7457DE7812EA47D5D9F71D007BD179A4EC9F99A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft caRepository: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 04 Jan 2026 06:16:57 +0000 Certificate not after: Sun 03 Jan 2027 06:21:57 +0000 Subordinate resources: IP: 103.173.164.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:57:de:78:12:ea:47:d5:d9:f7:1d:00:7b:d1:79:a4:ec:9f:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 4 06:16:57 2026 GMT Not After : Jan 3 06:21:57 2027 GMT Subject: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:c6:45:aa:ef:ff:72:39:a5:37:fb:b1:77: f1:38:27:67:bc:8b:50:21:da:5a:97:77:d2:a2:72: 3e:ae:c8:27:dd:28:1a:35:11:41:ce:f7:bf:b7:04: b0:94:b5:ed:eb:cb:d2:73:04:c8:a6:1a:38:de:bd: 8d:28:cd:48:8a:e6:64:93:5a:20:d3:9e:14:f1:74: 22:a9:35:4e:e6:6c:e1:c2:47:3f:02:a2:05:2e:f5: 4a:aa:0d:14:ea:a3:4b:8e:55:e7:19:27:d2:18:6e: 28:f2:18:91:2f:fa:7e:ba:58:df:9c:22:91:18:73: 1f:0b:cb:2e:a7:10:5a:5a:3f:7e:73:35:2b:fa:8f: f1:5c:9e:ad:17:57:74:b4:88:45:07:00:72:4a:5d: ea:c7:70:58:17:81:2d:8a:bb:72:c6:f9:b9:d5:53: b3:d1:47:15:ca:9a:9c:39:df:67:af:4a:8e:2d:bb: 73:f5:51:60:41:6a:d7:93:c8:8f:b3:8e:83:e3:3e: ad:89:7a:38:36:5b:8d:c6:00:ca:e3:c2:7a:07:2d: 4f:fd:2b:74:46:9e:90:3a:ae:09:d1:12:a0:8d:a4: 7d:5d:d4:52:aa:a2:a5:f3:96:29:e7:3f:82:1a:5c: 62:29:47:c8:a7:9e:29:98:f3:ad:19:5c:fd:c8:8e: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.164.0/23 Signature Algorithm: sha256WithRSAEncryption 55:33:e4:d4:0d:af:be:5b:74:e6:78:33:ba:0e:4d:fb:94:16: ff:eb:ae:f9:85:09:1c:2c:df:97:dc:cc:e9:a6:e4:06:24:cf: da:eb:34:40:f8:74:fe:59:3a:ce:27:18:b0:69:63:d8:e0:f9: f8:a6:ff:18:7d:b1:de:73:7d:55:36:f0:cc:b3:ed:a3:f1:cc: 9c:a0:4e:81:4f:4c:7b:ee:1f:d4:0f:3e:58:ef:e7:3e:ab:cf: 99:85:7a:d3:0a:32:bb:a6:7e:36:29:73:f5:f4:38:3a:3f:16: 09:6a:59:18:2a:e5:43:d2:a4:da:0d:ac:fb:1b:2e:0e:c0:77: 4d:d2:15:b9:2d:b6:4c:cf:d3:56:4e:61:f9:7f:52:0b:95:df: 1e:c9:9e:78:20:a3:88:a5:2d:5d:f7:c3:ac:1b:2d:d0:ff:d4: 7e:81:de:06:8e:94:48:ff:30:80:e7:03:35:96:87:17:39:5a: 4b:22:78:f1:03:82:72:2e:09:ec:2e:ad:53:3c:7c:c4:55:b8: e0:ec:72:72:94:14:b0:4b:05:69:6c:be:bb:47:c0:2d:13:45: f5:e4:eb:d9:7f:f5:0b:25:1d:17:03:40:b1:79:a0:b6:48:b9: 37:8b:1f:27:b8:0c:94:cd:d3:04:24:1a:4b:90:14:f8:cf:f2: 61:7f:ff:50 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdFfeeBLqR9XZ9x0Ae9F5pOyfmaAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwNDA2MTY1N1oX DTI3MDEwMzA2MjE1N1owMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1 QTJGOTI3NTAwNEQzOTUyMTU1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhDxkWq7/9yOaU3+7F38TgnZ7yLUCHaWpd30qJyPq7IJ90oGjURQc73v7cE sJS17evL0nMEyKYaON69jSjNSIrmZJNaINOeFPF0Iqk1TuZs4cJHPwKiBS71SqoN FOqjS45V5xkn0hhuKPIYkS/6frpY35wikRhzHwvLLqcQWlo/fnM1K/qP8VyerRdX dLSIRQcAckpd6sdwWBeBLYq7csb5udVTs9FHFcqanDnfZ69Kji27c/VRYEFq15PI j7OOg+M+rYl6ODZbjcYAyuPCegctT/0rdEaekDquCdESoI2kfV3UUqqipfOWKec/ ghpcYilHyKeeKZjzrRlc/ciOhn8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDWvewVKjMlYNexaL5J1AE05UhVTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNDZhOWNh LTEwOTYtNGZlNC04OTkzLWQwYmU5N2I1NGE3Ni8wLzM1QUY3QjA1NEE4Q0M5NTgz NUVDNUEyRjkyNzUwMDREMzk1MjE1NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnraQwDQYJKoZIhvcNAQELBQADggEBAFUz5NQNr75bdOZ4M7oOTfuUFv/rrvmF CRws35fczOmm5AYkz9rrNED4dP5ZOs4nGLBpY9jg+fim/xh9sd5zfVU28Myz7aPx zJygToFPTHvuH9QPPljv5z6rz5mFetMKMrumfjYpc/X0ODo/FglqWRgq5UPSpNoN rPsbLg7Ad03SFbkttkzP01ZOYfl/UguV3x7Jnnggo4ilLV33w6wbLdD/1H6B3gaO lEj/MIDnAzWWhxc5WksiePEDgnIuCewurVM8fMRVuODscnKUFLBLBWlsvrtHwC0T RfXk69l/9QslHRcDQLF5oLZIuTeLHye4DJTN0wQkGkuQFPjP8mF//1A= -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:06 2026 by rpki-client