This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer (raw, json) Hash identifier: /EGOAHSjmsOboqDuQUnbeuVRbQhIl9d8YxxRG+1d8TY= Subject key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01A49478B69E211D7336239DC196FA57DBC5B2A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft caRepository: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 22 Jan 2026 14:23:11 +0000 Certificate not after: Thu 21 Jan 2027 14:28:11 +0000 Subordinate resources: IP: 103.84.4.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a4:94:78:b6:9e:21:1d:73:36:23:9d:c1:96:fa:57:db:c5:b2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 22 14:23:11 2026 GMT Not After : Jan 21 14:28:11 2027 GMT Subject: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:31:a0:82:43:1e:22:c1:1d:8a:2d:f4:52: 22:d4:84:31:2f:93:25:b1:fc:00:21:88:ba:38:d3: ce:d4:d2:96:33:49:5c:6e:02:c6:71:a9:9a:3d:ba: 90:21:8a:43:8e:fa:2e:78:ca:df:f6:ed:95:a1:1e: 60:92:1f:37:6e:12:4c:7d:93:00:e5:84:17:7c:09: 41:1a:e2:b7:c0:a5:76:e1:17:5c:7a:47:85:94:17: b0:ea:78:0f:cd:26:4d:73:87:f8:ba:80:14:d3:74: d3:7c:02:d7:40:9f:2c:7c:43:a8:d6:9f:0d:b4:f7: f2:94:c8:0f:50:4e:db:38:46:eb:e5:99:22:f8:b6: 1f:58:e8:53:a4:71:e6:2f:1f:ea:3e:19:b5:8c:09: 20:3e:6a:09:0d:e5:3a:e9:97:9a:2a:46:49:1c:ec: b1:b1:c4:0d:3e:c4:c3:a6:64:05:f5:fe:41:5f:6f: 1d:dd:18:59:00:5b:0c:dc:0e:1d:6b:3a:d9:e7:11: 5e:af:5a:ff:01:2f:ce:be:6a:a2:0c:f9:7e:55:40: 8a:11:c0:22:c5:4f:30:5a:aa:77:1d:33:1f:91:20: 02:3e:8c:e0:a7:56:3e:2d:96:70:78:6b:c0:6f:06: aa:93:41:8f:f2:79:57:ff:3a:69:01:29:7c:1d:3a: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.4.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:05:fa:ce:51:bc:41:75:53:96:78:f4:87:10:1e:1d:e7:1d: e6:73:98:b2:e6:0d:2e:f2:8f:81:d3:9d:e1:46:3e:0a:94:72: b6:e6:2f:87:31:48:e3:55:d8:41:8d:9e:e2:70:b1:7d:58:fd: 03:9f:43:73:d7:f1:ec:31:99:7d:fd:16:ed:09:3c:31:d1:92: 95:7e:41:c8:2e:04:f7:8f:f9:12:52:e0:c5:f0:1c:be:76:80: eb:ae:63:88:db:7b:0a:4f:3c:9e:9a:81:1f:b9:07:80:e2:8e: 5e:a0:e9:58:c9:58:f8:9b:c6:ea:b5:8f:e6:27:a2:1a:ad:92: c3:9e:0c:2a:7d:dd:93:6d:b4:94:e1:75:b1:5e:58:a3:37:08: d5:76:c6:e2:3f:04:35:6e:1b:f1:75:fd:7e:c1:d8:79:83:07: 3b:19:56:5a:c8:21:32:62:fe:f3:c2:43:51:35:9c:3e:5a:aa: e8:48:87:59:74:54:09:ee:75:32:e0:2e:5e:d5:83:bb:16:f8: d3:3d:25:45:76:5d:0b:ec:76:bd:41:74:87:9e:74:47:07:c6: 54:f3:7a:4d:b1:4f:b1:cf:c9:ed:f0:27:14:1e:83:27:b2:15: a0:30:35:1a:3d:6d:e9:81:c6:b4:e7:5e:24:6b:29:de:b1:2d: 66:a6:8e:b8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAaSUeLaeIR1zNiOdwZb6V9vFsqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMjE0MjMxMVoX DTI3MDEyMTE0MjgxMVowMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFE QkU4RkFDRkVDNkE0Q0RENzgzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQQMaCCQx4iwR2KLfRSItSEMS+TJbH8ACGIujjTztTSljNJXG4CxnGpmj26 kCGKQ476LnjK3/btlaEeYJIfN24STH2TAOWEF3wJQRrit8ClduEXXHpHhZQXsOp4 D80mTXOH+LqAFNN003wC10CfLHxDqNafDbT38pTID1BO2zhG6+WZIvi2H1joU6Rx 5i8f6j4ZtYwJID5qCQ3lOumXmipGSRzssbHEDT7Ew6ZkBfX+QV9vHd0YWQBbDNwO HWs62ecRXq9a/wEvzr5qogz5flVAihHAIsVPMFqqdx0zH5EgAj6M4KdWPi2WcHhr wG8GqpNBj/J5V/86aQEpfB06BmkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDwDz5UXgZcMbQrb6PrP7GpM3Xg2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2MTRjZWUw LTVkZjYtNGIyYi1iYjNkLWY2ODMyMTNlN2MzMy8wLzNDMDNDRjk1MTc4MTk3MEM2 RDBBREJFOEZBQ0ZFQzZBNENERDc4MzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnVAQwDQYJKoZIhvcNAQELBQADggEBAI4F+s5RvEF1U5Z49IcQHh3nHeZzmLLm DS7yj4HTneFGPgqUcrbmL4cxSONV2EGNnuJwsX1Y/QOfQ3PX8ewxmX39Fu0JPDHR kpV+QcguBPeP+RJS4MXwHL52gOuuY4jbewpPPJ6agR+5B4Dijl6g6VjJWPibxuq1 j+YnohqtksOeDCp93ZNttJThdbFeWKM3CNV2xuI/BDVuG/F1/X7B2HmDBzsZVlrI ITJi/vPCQ1E1nD5aquhIh1l0VAnudTLgLl7Vg7sW+NM9JUV2XQvsdr1BdIeedEcH xlTzek2xT7HPye3wJxQegyeyFaAwNRo9bemBxrTnXiRrKd6xLWamjrg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:08:01 2026 by rpki-client