This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer File: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer (raw, json) Hash identifier: 7Kf1ghgT5TcAIY3131AFH0rILKjxK+zXY8Zf4lxDkF0= Subject key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C36171ADB5FCD23FF525C633211A532B78A7FAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft caRepository: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Jan 2026 12:04:31 +0000 Certificate not after: Mon 11 Jan 2027 12:09:31 +0000 Subordinate resources: IP: 103.25.54.0/23 IP: 117.103.64.0/23 IP: 202.0.92.0/23 IP: 2405:2d40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:36:17:1a:db:5f:cd:23:ff:52:5c:63:32:11:a5:32:b7:8a:7f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 12 12:04:31 2026 GMT Not After : Jan 11 12:09:31 2027 GMT Subject: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:25:82:d0:fc:80:81:96:27:50:ac:75:8e:3a: ba:90:f2:89:1f:c5:61:c7:04:b3:61:58:01:7c:11: 51:a7:f8:fd:74:d6:74:b5:ce:69:a6:7a:c2:a0:11: 99:a5:fc:63:b7:ca:74:16:3a:07:af:ad:e2:de:50: 34:cb:1a:9a:ac:fd:eb:11:39:5a:0d:cb:27:5d:a2: c9:7f:9f:48:c8:7a:d6:db:85:96:a1:26:3d:3e:0a: 84:ac:a2:ef:0d:92:b4:17:c0:af:5f:e0:95:79:d2: 82:b1:db:22:4a:c5:93:33:27:60:90:47:8b:a3:fc: 43:84:cd:e4:be:e9:cf:eb:1d:8a:5a:b9:e2:c2:2f: 3c:c6:3e:b4:99:f9:fb:e8:a0:cb:fb:fc:3b:53:22: 87:e0:45:f5:68:4e:35:c3:fb:a8:b9:a7:0a:32:46: 6f:8b:e7:02:7b:04:7e:d7:7e:70:8c:43:07:c1:33: eb:45:4f:be:c4:c4:11:43:34:b2:6a:e2:d3:d2:62: d0:06:fd:f8:d0:8a:88:af:79:fd:50:cd:b2:a8:9a: 28:6a:4a:74:ec:90:04:8a:5e:9d:5a:72:6d:26:d3: 8c:4d:92:c3:88:ed:f6:63:bd:d5:3b:ea:e5:e9:fd: 7c:97:c2:39:0c:c5:ed:0a:31:a7:a7:91:2c:33:76: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.54.0/23 117.103.64.0/23 202.0.92.0/23 IPv6: 2405:2d40::/32 Signature Algorithm: sha256WithRSAEncryption 6a:11:e8:e1:43:36:76:ba:f9:00:44:a5:84:61:69:37:d4:6b: 95:2f:69:64:f5:45:20:a0:5c:ae:9f:5f:9a:4e:c1:56:df:c4: 46:e1:47:ba:ee:e6:ee:2a:36:80:e5:dc:88:70:5e:b9:e0:43: c5:d0:75:7b:05:44:b2:3c:2e:dd:b3:00:c8:77:a3:25:ab:3c: 58:3a:b4:d1:35:54:e5:91:b3:7d:c0:a5:f2:0d:fd:b3:c5:8e: 20:55:ce:38:ab:40:70:c4:be:20:06:8a:ab:d2:77:3c:72:f0: 66:8b:c4:a1:ef:1b:fd:f0:98:fa:4f:f6:fd:70:64:15:ee:95: 3d:20:e8:0f:59:7b:d4:ef:a8:ee:8d:a0:ed:96:4e:f0:3e:71: 63:ce:9c:0c:72:8f:f5:86:66:1f:15:84:0d:6d:af:00:34:c0: 3c:f5:67:9f:11:d0:1c:78:f8:a6:95:86:a3:3e:20:1a:a5:7b: f6:20:fc:15:74:bd:7e:a4:d0:fe:c2:01:3b:0c:56:36:cd:3e: 1e:ee:2a:ac:ae:55:3c:e5:78:da:d7:ed:94:a3:30:9b:ad:9f: 41:d9:35:46:7f:0c:78:66:68:0e:ac:f9:1a:42:f0:2e:5d:bd: 7a:d9:e2:48:a6:29:36:de:9d:7e:93:35:f6:3a:f6:1a:a7:21: 76:84:51:d5 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUTDYXGttfzSP/UlxjMhGlMreKf6swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExMjEyMDQzMVoX DTI3MDExMTEyMDkzMVowMzExMC8GA1UEAxMoMzlCNEFBOUIzQzdGNzgwMjYxREM0 OTA2NThFNjJCRTg2Qjg1RkYzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANslgtD8gIGWJ1CsdY46upDyiR/FYccEs2FYAXwRUaf4/XTWdLXOaaZ6wqAR maX8Y7fKdBY6B6+t4t5QNMsamqz96xE5Wg3LJ12iyX+fSMh61tuFlqEmPT4KhKyi 7w2StBfAr1/glXnSgrHbIkrFkzMnYJBHi6P8Q4TN5L7pz+sdilq54sIvPMY+tJn5 ++igy/v8O1Mih+BF9WhONcP7qLmnCjJGb4vnAnsEftd+cIxDB8Ez60VPvsTEEUM0 smri09Ji0Ab9+NCKiK95/VDNsqiaKGpKdOyQBIpenVpybSbTjE2Sw4jt9mO91Tvq 5en9fJfCOQzF7Qoxp6eRLDN2CesCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDm0qps8f3gCYdxJBljmK+hrhf86MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMjJlMWYzYy01YTQ4LTRmMzktYWFjNy1lMDEyZWQ3MDlkNmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyMmUxZjNj LTVhNDgtNGYzOS1hYWM3LWUwMTJlZDcwOWQ2YS8wLzM5QjRBQTlCM0M3Rjc4MDI2 MURDNDkwNjU4RTYyQkU4NkI4NUZGM0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAFnGTYDBAF1Z0ADBAHKAFwwDQQCAAIwBwMFACQFLUAwDQYJKoZIhvcNAQELBQAD ggEBAGoR6OFDNna6+QBEpYRhaTfUa5UvaWT1RSCgXK6fX5pOwVbfxEbhR7ru5u4q NoDl3IhwXrngQ8XQdXsFRLI8Lt2zAMh3oyWrPFg6tNE1VOWRs33ApfIN/bPFjiBV zjirQHDEviAGiqvSdzxy8GaLxKHvG/3wmPpP9v1wZBXulT0g6A9Ze9TvqO6NoO2W TvA+cWPOnAxyj/WGZh8VhA1trwA0wDz1Z58R0Bx4+KaVhqM+IBqle/Yg/BV0vX6k 0P7CATsMVjbNPh7uKqyuVTzleNrX7ZSjMJutn0HZNUZ/DHhmaA6s+RpC8C5dvXrZ 4kimKTbenX6TNfY69hqnIXaEUdU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:17 2026 by rpki-client