This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer File: 3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer (raw, json) Hash identifier: xv1S3njG6oPbIJUy6GsZTkPg6+/fiesjfoKOnwXRtXo= Subject key identifier: 38:09:A2:88:AA:4D:4C:24:1E:A6:01:1D:90:DB:F2:69:3B:33:33:D2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2836EFDCAF570E3E6942199B14098651AFCAE51F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft caRepository: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 31 Dec 2025 03:19:19 +0000 Certificate not after: Wed 30 Dec 2026 03:24:19 +0000 Subordinate resources: IP: 2001:df6:4640::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:36:ef:dc:af:57:0e:3e:69:42:19:9b:14:09:86:51:af:ca:e5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 31 03:19:19 2025 GMT Not After : Dec 30 03:24:19 2026 GMT Subject: CN=3809A288AA4D4C241EA6011D90DBF2693B3333D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:20:23:d6:49:61:50:5d:20:eb:e9:0f:7b: 6e:40:c2:80:a1:8d:b4:9a:b4:7f:fd:a6:54:ea:7d: da:69:ce:24:a3:74:44:dc:92:75:d7:ef:8b:7c:f1: 4f:d5:6a:5a:41:07:10:e0:4a:83:0c:3d:fa:10:c0: c4:7b:65:8e:18:4e:f3:1b:9e:f8:59:67:01:84:96: ef:74:81:a0:c5:2a:73:f8:49:cf:bd:e1:97:7e:86: d2:c1:5b:2a:32:c7:ce:c0:01:f3:e2:a7:fe:63:4c: bb:78:b4:dd:ea:29:7a:ef:28:63:92:17:a4:60:db: 19:27:ba:8f:2b:42:f7:8d:17:9c:95:09:97:be:64: a1:86:78:c7:e9:f0:ec:65:12:46:3c:df:c6:32:ab: f1:9b:23:be:55:f2:4b:9f:55:99:8b:a9:9c:bf:be: 04:3f:49:77:53:9d:e1:dc:c9:44:dd:5d:64:9a:73: 31:d4:79:11:e9:60:ad:47:65:d8:75:4c:5c:83:36: 7e:03:5b:72:1e:65:92:24:18:fc:9f:ac:41:38:f2: 12:47:3e:8d:4e:ea:05:94:87:fb:61:da:58:fd:18: 96:31:76:fa:1d:01:7b:07:fd:87:2c:71:95:36:64: 57:cc:1b:cc:bd:b1:2a:89:20:c6:83:75:51:60:50: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:09:A2:88:AA:4D:4C:24:1E:A6:01:1D:90:DB:F2:69:3B:33:33:D2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:4640::/48 Signature Algorithm: sha256WithRSAEncryption 63:61:60:92:7e:f3:d5:3f:b5:b0:87:b1:15:e9:f0:57:6f:bf: d0:9a:ad:c7:ea:35:3e:80:89:f1:47:50:63:75:89:7c:58:a0: f0:91:6b:c1:8c:99:83:76:00:62:a1:d4:29:61:c3:7f:80:83: 71:44:14:c3:d0:59:8d:34:0e:b6:17:c5:e3:64:07:99:be:70: cb:c0:b6:97:f9:35:6a:01:d8:6b:99:07:bf:c8:75:92:60:4b: a6:56:31:64:90:e4:e7:08:b1:3c:f3:c8:0d:88:96:84:f4:22: 1b:f6:0c:51:f1:f9:44:19:d0:46:18:8b:e8:63:3e:06:bd:f6: 0e:a4:35:86:80:ee:09:3d:88:75:4e:73:ca:c9:a7:6e:75:3c: 9d:55:15:d3:a0:31:e9:77:e8:3f:1e:c6:ca:67:e2:b3:8f:f7: 5b:d5:d0:37:da:5b:e8:19:9a:76:c3:92:65:1f:b4:63:2a:a3: 43:a1:77:81:c9:04:20:a9:3f:91:4f:56:45:42:ab:10:78:9c: b5:24:38:8e:2e:ab:e7:fe:8e:42:eb:26:1e:62:05:6c:d0:c3: 9a:3d:dc:b5:7d:98:9e:c4:34:38:87:2a:79:3a:11:b4:4c:cd: 0a:1b:ed:47:0b:4b:ad:2f:72:32:d1:ad:2e:61:ef:6e:16:18: e3:cb:f4:51 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUKDbv3K9XDj5pQhmbFAmGUa/K5R8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIzMTAzMTkxOVoX DTI2MTIzMDAzMjQxOVowMzExMC8GA1UEAxMoMzgwOUEyODhBQTRENEMyNDFFQTYw MTFEOTBEQkYyNjkzQjMzMzNEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL86ICPWSWFQXSDr6Q97bkDCgKGNtJq0f/2mVOp92mnOJKN0RNySddfvi3zx T9VqWkEHEOBKgww9+hDAxHtljhhO8xue+FlnAYSW73SBoMUqc/hJz73hl36G0sFb KjLHzsAB8+Kn/mNMu3i03eopeu8oY5IXpGDbGSe6jytC940XnJUJl75koYZ4x+nw 7GUSRjzfxjKr8ZsjvlXyS59VmYupnL++BD9Jd1Od4dzJRN1dZJpzMdR5EelgrUdl 2HVMXIM2fgNbch5lkiQY/J+sQTjyEkc+jU7qBZSH+2HaWP0YljF2+h0Bewf9hyxx lTZkV8wbzL2xKokgxoN1UWBQjVcCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDgJooiqTUwkHqYBHZDb8mk7MzPSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkNzhiNTBi LTQ0OWMtNDU0Yi04NTBkLWYyMDgwMzc4OWI1OC8wLzM4MDlBMjg4QUE0RDRDMjQx RUE2MDExRDkwREJGMjY5M0IzMzMzRDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ32RkAwDQYJKoZIhvcNAQELBQADggEBAGNhYJJ+89U/tbCHsRXp8Fdvv9Ca rcfqNT6AifFHUGN1iXxYoPCRa8GMmYN2AGKh1Clhw3+Ag3FEFMPQWY00DrYXxeNk B5m+cMvAtpf5NWoB2GuZB7/IdZJgS6ZWMWSQ5OcIsTzzyA2IloT0Ihv2DFHx+UQZ 0EYYi+hjPga99g6kNYaA7gk9iHVOc8rJp251PJ1VFdOgMel36D8exspn4rOP91vV 0DfaW+gZmnbDkmUftGMqo0Ohd4HJBCCpP5FPVkVCqxB4nLUkOI4uq+f+jkLrJh5i BWzQw5o93LV9mJ7ENDiHKnk6EbRMzQob7UcLS60vcjLRrS5h724WGOPL9FE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:14 2026 by rpki-client