This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer
File:                     3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer (raw, json)
Hash identifier:          GYlGzS6kjVjxSV5D+3IYdzJGUdW+Dz8w/YPOSsCgRz0=
Subject key identifier:   3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1BF5E924D8EF31F258824714577584ADEBF6B3D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jan 2026 13:51:11 +0000
Certificate not after:    Wed 13 Jan 2027 13:56:11 +0000
Subordinate resources:    IP: 203.153.96.0 -- 203.153.119.255
                          IP: 222.165.192.0/18
                          IP: 2404:f600::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f5:e9:24:d8:ef:31:f2:58:82:47:14:57:75:84:ad:eb:f6:b3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 14 13:51:11 2026 GMT
            Not After : Jan 13 13:56:11 2027 GMT
        Subject: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:2c:bd:18:90:02:4b:19:d3:11:19:8e:29:
                    1f:30:bf:69:b3:83:55:a6:58:c7:77:5f:a6:93:ee:
                    cb:e6:8c:a9:d2:b5:a9:6c:68:f9:74:9f:8a:a8:90:
                    60:85:c3:c5:1a:95:ee:2c:d8:fb:b3:e3:2b:66:b1:
                    ca:a3:7c:22:dd:74:83:f9:55:29:40:62:35:13:79:
                    e7:86:80:85:4b:f9:f4:29:f7:39:1e:58:5f:b9:78:
                    89:34:3e:8f:c8:36:aa:b3:ca:c5:a9:5a:8d:d4:19:
                    f5:8e:28:b6:df:ec:b3:0b:6b:5b:43:a9:7b:01:bf:
                    d8:1b:f3:db:1f:51:c9:8b:d6:8d:52:4e:73:44:e1:
                    58:4b:58:04:13:ad:5b:a2:86:62:cd:fb:5a:27:25:
                    2a:c9:65:ae:76:a8:2f:22:13:fd:70:ea:27:ea:ba:
                    5e:70:b2:14:84:a6:5c:5e:1c:ee:64:db:82:42:74:
                    8b:13:57:c9:e1:eb:ad:47:c3:02:fe:9c:80:45:c6:
                    92:a1:bf:e7:de:9d:3a:ad:ad:ea:8e:bb:90:36:50:
                    38:3d:de:99:53:14:33:f3:cc:df:4d:15:ad:53:78:
                    38:76:9f:00:69:eb:73:11:80:5f:5c:3c:25:45:2b:
                    04:3b:76:b3:23:b7:67:e9:98:f3:26:eb:7f:c2:2d:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.96.0-203.153.119.255
                  222.165.192.0/18
                IPv6:
                  2404:f600::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:80:2e:ca:44:c1:23:bf:72:d4:9b:2c:23:fb:d5:4c:fc:20:
         7e:d5:45:4a:4f:0b:d6:f4:34:59:68:73:b7:48:44:2d:88:3b:
         ee:73:07:13:42:0b:cd:1b:61:09:0a:d2:da:5f:8b:07:9d:3f:
         2b:1a:5f:7c:71:b4:80:dd:8b:d7:73:ae:12:b0:06:a1:fb:04:
         0d:60:bc:40:a8:17:e4:62:69:27:7e:82:41:88:92:a2:94:5f:
         eb:12:9f:bb:4b:42:6b:83:74:e3:4b:5c:67:55:50:4a:ac:31:
         13:9c:ce:2f:51:67:0d:7c:ca:f6:58:b4:0b:68:98:74:26:65:
         57:ba:48:94:28:6d:53:1f:9f:52:a8:08:16:95:44:fc:4b:78:
         89:e1:f3:8d:90:db:df:4a:83:1c:56:5d:86:ed:8b:94:ca:a6:
         d7:32:c0:0b:15:45:4c:3a:9e:aa:53:57:a1:c9:2e:2b:72:25:
         f0:51:d0:cf:8a:ba:c6:25:a8:9f:ca:91:4b:a5:5f:fe:e7:4c:
         7a:b5:16:90:b6:b5:c5:c1:05:fc:fb:47:62:84:8c:18:93:0d:
         7a:11:06:76:c2:73:6b:f1:69:92:8d:b4:bd:0f:a2:28:a3:91:
         7c:ec:67:25:20:cd:cd:7a:99:99:e4:12:c5:28:3d:13:55:80:
         79:26:7e:41
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUG/XpJNjvMfJYgkcUV3WErev2s9MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNDEzNTExMVoX
DTI3MDExMzEzNTYxMVowMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdE
MjY1NzE0QjEyNDVCRjBBRkIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMLRLL0YkAJLGdMRGY4pHzC/abODVaZYx3dfppPuy+aMqdK1qWxo+XSfiqiQ
YIXDxRqV7izY+7PjK2axyqN8It10g/lVKUBiNRN554aAhUv59Cn3OR5YX7l4iTQ+
j8g2qrPKxalajdQZ9Y4ott/sswtrW0OpewG/2Bvz2x9RyYvWjVJOc0ThWEtYBBOt
W6KGYs37WiclKsllrnaoLyIT/XDqJ+q6XnCyFISmXF4c7mTbgkJ0ixNXyeHrrUfD
Av6cgEXGkqG/596dOq2t6o67kDZQOD3emVMUM/PM300VrVN4OHafAGnrcxGAX1w8
JUUrBDt2syO3Z+mY8ybrf8ItsKECAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFDx5D+SrgqLBUBfSZXFLEkW/CvsPMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9mYzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjN2U4MDgx
LTYzYWYtNDllNy05NjQ2LTc2YzI1YTVlOTdjYS8wLzNDNzkwRkU0QUI4MkEyQzE1
MDE3RDI2NTcxNEIxMjQ1QkYwQUZCMEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBoEAgABMBQw
DAMEBcuZYAMEA8uZcAMEBt6lwDANBAIAAjAHAwUAJAT2ADANBgkqhkiG9w0BAQsF
AAOCAQEAL4AuykTBI79y1JssI/vVTPwgftVFSk8L1vQ0WWhzt0hELYg77nMHE0IL
zRthCQrS2l+LB50/KxpffHG0gN2L13OuErAGofsEDWC8QKgX5GJpJ36CQYiSopRf
6xKfu0tCa4N040tcZ1VQSqwxE5zOL1FnDXzK9li0C2iYdCZlV7pIlChtUx+fUqgI
FpVE/Et4ieHzjZDb30qDHFZdhu2LlMqm1zLACxVFTDqeqlNXockuK3Il8FHQz4q6
xiWon8qRS6Vf/udMerUWkLa1xcEF/PtHYoSMGJMNehEGdsJza/Fpko20vQ+iKKOR
fOxnJSDNzXqZmeQSxSg9E1WAeSZ+QQ==
-----END CERTIFICATE-----