This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer (raw, json) Hash identifier: o24or9XPC7AYpk1z3pddE0WlnpwM++2yPSTTfwLB/x4= Subject key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 50B0F4AC797E3F4C041E6EDA901C934BC1B99964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft caRepository: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Nov 2025 01:48:10 +0000 Certificate not after: Fri 06 Nov 2026 01:53:10 +0000 Subordinate resources: IP: 103.54.170.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b0:f4:ac:79:7e:3f:4c:04:1e:6e:da:90:1c:93:4b:c1:b9:99:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 7 01:48:10 2025 GMT Not After : Nov 6 01:53:10 2026 GMT Subject: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:a9:48:bd:b7:20:b0:77:9f:62:2f:1f:20: ef:d5:b6:d8:e5:cd:b9:c5:f0:9b:a9:7c:07:2d:88: 2c:9c:80:2b:6d:b7:91:f4:62:97:3f:8b:ab:56:11: 61:3c:be:e0:ee:cd:1e:95:77:ae:45:db:4e:14:51: dc:aa:9c:e2:7b:48:3e:15:42:6c:6c:2e:13:2f:a2: 6f:9f:aa:85:a0:e2:02:8d:d2:03:43:43:88:08:02: 8c:d4:90:9f:71:a1:21:69:e6:78:bc:8b:88:d7:01: 72:38:67:bc:65:b8:38:36:85:97:53:e3:1f:ff:93: a9:b9:5e:01:4e:60:62:54:57:06:87:08:1b:1d:7d: 2c:5b:c9:a4:5e:1d:27:91:a7:d9:64:da:18:2d:d1: 3a:d0:2e:24:a2:fa:be:08:bb:92:3d:fe:57:16:3f: 04:91:1d:41:b4:69:ca:d0:a1:44:ec:6a:61:58:11: 10:5b:9e:93:62:2a:c0:e5:86:81:2a:82:dd:33:6a: 69:74:dd:87:dc:0d:db:43:69:0a:83:a6:0b:e4:ac: 0b:9f:13:9e:d9:b0:37:b0:71:39:93:0f:0c:ee:6d: 26:00:d2:5c:50:af:57:a2:a2:7c:f6:11:d6:90:77: 2e:33:8a:10:d3:cd:19:5a:71:a0:f9:08:30:c3:50: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.170.0/23 Signature Algorithm: sha256WithRSAEncryption 96:a4:29:1b:b9:bf:a7:55:8a:2d:d2:cb:22:1c:47:9c:98:eb: c9:6d:46:a1:9f:a3:36:15:c0:3a:99:dd:bb:55:c9:d9:5d:89: 40:b6:8f:b1:76:3e:a0:b3:78:90:c5:60:f2:d0:bb:0c:a4:34: 68:e0:b2:2a:b1:59:98:bd:08:85:f2:fa:5a:85:c6:a6:86:0a: e2:e5:bf:0e:34:af:ad:80:36:73:15:4b:5c:49:33:34:c9:75: ef:67:92:89:3f:51:ce:0f:9e:35:e8:9f:e1:3b:c1:4a:dc:1b: 5d:27:ab:2a:97:20:e6:65:d6:ee:f8:15:12:52:56:d1:13:f1: ad:ed:86:4e:61:a9:7b:6e:e8:cf:0b:4c:e1:06:0c:3b:8c:e5: 17:c2:de:b1:02:8b:6a:29:5a:da:0c:35:d1:aa:ba:14:d5:e4: bb:1d:67:3e:a4:33:a0:c5:e5:9d:58:ab:d6:a0:6c:bb:3b:32: 78:28:c0:43:ac:1e:51:b5:90:05:76:25:04:d9:ac:39:8d:3b: a2:12:3e:2f:7a:63:ce:f7:b4:50:0f:b1:d7:e6:12:b6:c9:17: e6:d2:d4:34:a5:50:c9:58:73:85:59:09:9f:ef:2e:74:68:60: 28:d5:fd:10:08:0b:07:b9:13:58:71:f9:1f:8b:56:48:07:34: 4e:a0:22:33 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUULD0rHl+P0wEHm7akByTS8G5mWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNzAxNDgxMFoX DTI2MTEwNjAxNTMxMFowMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYz MTczN0Y3OERDMjA1RUVDMjM5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAME9qUi9tyCwd59iLx8g79W22OXNucXwm6l8By2ILJyAK223kfRilz+Lq1YR YTy+4O7NHpV3rkXbThRR3Kqc4ntIPhVCbGwuEy+ib5+qhaDiAo3SA0NDiAgCjNSQ n3GhIWnmeLyLiNcBcjhnvGW4ODaFl1PjH/+TqbleAU5gYlRXBocIGx19LFvJpF4d J5Gn2WTaGC3ROtAuJKL6vgi7kj3+VxY/BJEdQbRpytChROxqYVgREFuek2IqwOWG gSqC3TNqaXTdh9wN20NpCoOmC+SsC58TntmwN7BxOZMPDO5tJgDSXFCvV6KifPYR 1pB3LjOKENPNGVpxoPkIMMNQCM8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDxS1Khqvd0NbaYxc3943CBe7CObMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzNzY5NGI3 LTMyNTYtNDY2Ni1hM2ZlLTZlODJlNzgzYjFlMS8wLzNDNTJENEE4NkFCREREMEQ2 REE2MzE3MzdGNzhEQzIwNUVFQzIzOUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnNqowDQYJKoZIhvcNAQELBQADggEBAJakKRu5v6dVii3SyyIcR5yY68ltRqGf ozYVwDqZ3btVydldiUC2j7F2PqCzeJDFYPLQuwykNGjgsiqxWZi9CIXy+lqFxqaG CuLlvw40r62ANnMVS1xJMzTJde9nkok/Uc4PnjXon+E7wUrcG10nqyqXIOZl1u74 FRJSVtET8a3thk5hqXtu6M8LTOEGDDuM5RfC3rECi2opWtoMNdGquhTV5LsdZz6k M6DF5Z1Yq9agbLs7MngowEOsHlG1kAV2JQTZrDmNO6ISPi96Y873tFAPsdfmErbJ F+bS1DSlUMlYc4VZCZ/vLnRoYCjV/RAICwe5E1hx+R+LVkgHNE6gIjM= -----END CERTIFICATE-----Generated at Sat Dec 6 19:40:25 2025 by rpki-client