This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer File: 3FFB3838E6BD431731306308CFEC299A86723365.cer (raw, json) Hash identifier: vay4TyOfufq9man8AUMELLB0Dy8ZS6wIUiCeQIAR2fs= Subject key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3090C9B4D2C6275A99D1D908DC20335FFEA6516E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft caRepository: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 07 Jan 2026 13:11:17 +0000 Certificate not after: Wed 06 Jan 2027 13:16:17 +0000 Subordinate resources: IP: 103.96.144.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:90:c9:b4:d2:c6:27:5a:99:d1:d9:08:dc:20:33:5f:fe:a6:51:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 7 13:11:17 2026 GMT Not After : Jan 6 13:16:17 2027 GMT Subject: CN=3FFB3838E6BD431731306308CFEC299A86723365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:8e:39:f0:9c:56:0c:31:ff:4e:15:59:d9: 95:7d:63:e0:7d:ce:4a:bc:8b:eb:b8:00:a2:9d:72: 19:20:62:18:dd:bc:30:15:52:37:62:05:12:bd:48: 25:cb:43:19:48:0c:e6:8a:95:44:52:b3:69:15:b9: 7a:2d:01:6f:87:21:f0:19:84:53:fd:03:61:03:31: 15:8f:d7:ee:9a:aa:2f:3c:29:ea:40:95:a8:56:4f: fe:d0:d1:58:81:68:a1:a1:85:99:1e:59:b8:ef:75: 41:65:1f:77:d8:44:66:c5:4b:77:67:c9:ec:17:92: f8:2a:b2:b9:cd:1a:46:f1:7d:f6:55:ba:c7:fb:14: 16:31:2f:01:3e:15:c8:5c:da:cc:49:b4:cb:56:2c: 59:17:6c:25:72:06:b2:97:fe:1d:33:02:1b:a9:7a: ec:d7:2c:c1:21:3c:31:52:3f:cd:d5:28:01:25:f7: a8:c8:60:2d:f9:08:3b:df:15:86:fa:40:6d:3b:d1: 9c:f9:dd:29:e8:2e:7c:f0:1e:1d:79:4d:38:a6:10: c1:c3:e0:5d:d0:76:ec:eb:d9:00:24:ca:1e:39:0c: 88:78:64:02:83:1a:67:3c:ce:52:19:4c:56:7e:65: b6:95:2c:4f:c5:4d:a4:51:f6:f1:49:21:08:87:04: c6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.144.0/23 Signature Algorithm: sha256WithRSAEncryption 81:f4:0e:4f:e6:48:6b:40:35:61:b2:cb:9d:fa:1d:01:48:08: 52:5f:fc:ac:c5:eb:e0:3a:74:61:06:c5:3a:62:11:0d:99:51: 57:8d:11:e7:40:2e:17:b0:ca:a5:50:33:7c:0c:1b:41:7a:25: 5f:63:23:cb:a0:5a:5a:a3:b1:3d:39:53:4e:73:e6:c8:24:09: 62:7a:08:38:6d:bd:b4:cb:58:ef:3f:93:27:d7:fe:54:be:54: 0b:22:ae:00:97:46:5c:5b:c6:64:78:a8:ad:de:53:58:13:22: a9:54:51:8c:70:a6:9f:e8:80:72:7c:76:75:f4:ce:ec:fa:bb: 63:35:83:fb:5c:b9:46:90:50:21:c3:68:67:57:6a:51:ac:24: 8d:30:2d:29:ba:cb:ea:2b:8c:3a:7f:29:5d:d7:0f:95:99:ea: d9:1a:91:69:9a:fd:ed:59:99:1c:6b:3b:0c:90:1d:81:9d:51: 5d:c5:8f:01:3e:fb:e1:88:0d:79:fa:2b:d3:58:bd:da:ab:f6: f1:ba:88:f9:84:90:bb:9e:9e:e9:5c:64:df:f5:b4:cb:3c:0b: 18:91:3f:72:90:b9:7b:4c:62:fd:19:6f:47:89:45:cc:fc:a6: 3e:83:0a:c4:68:00:63:2e:bb:80:b0:1e:7b:8a:86:6d:d0:85: cc:fb:d1:92 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMJDJtNLGJ1qZ0dkI3CAzX/6mUW4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwNzEzMTExN1oX DTI3MDEwNjEzMTYxN1owMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2 MzA4Q0ZFQzI5OUE4NjcyMzM2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5DjjnwnFYMMf9OFVnZlX1j4H3OSryL67gAop1yGSBiGN28MBVSN2IFEr1I JctDGUgM5oqVRFKzaRW5ei0Bb4ch8BmEU/0DYQMxFY/X7pqqLzwp6kCVqFZP/tDR WIFooaGFmR5ZuO91QWUfd9hEZsVLd2fJ7BeS+Cqyuc0aRvF99lW6x/sUFjEvAT4V yFzazEm0y1YsWRdsJXIGspf+HTMCG6l67NcswSE8MVI/zdUoASX3qMhgLfkIO98V hvpAbTvRnPndKegufPAeHXlNOKYQwcPgXdB27OvZACTKHjkMiHhkAoMaZzzOUhlM Vn5ltpUsT8VNpFH28UkhCIcExrkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD/7ODjmvUMXMTBjCM/sKZqGcjNlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4MjYxYzM3 LTU5YTUtNDM2OS05MWU1LTRiMTM2NjAxMGM2ZC8wLzNGRkIzODM4RTZCRDQzMTcz MTMwNjMwOENGRUMyOTlBODY3MjMzNjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnYJAwDQYJKoZIhvcNAQELBQADggEBAIH0Dk/mSGtANWGyy536HQFICFJf/KzF 6+A6dGEGxTpiEQ2ZUVeNEedALhewyqVQM3wMG0F6JV9jI8ugWlqjsT05U05z5sgk CWJ6CDhtvbTLWO8/kyfX/lS+VAsirgCXRlxbxmR4qK3eU1gTIqlUUYxwpp/ogHJ8 dnX0zuz6u2M1g/tcuUaQUCHDaGdXalGsJI0wLSm6y+orjDp/KV3XD5WZ6tkakWma /e1ZmRxrOwyQHYGdUV3FjwE+++GIDXn6K9NYvdqr9vG6iPmEkLuenulcZN/1tMs8 CxiRP3KQuXtMYv0Zb0eJRcz8pj6DCsRoAGMuu4CwHnuKhm3Qhcz70ZI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:07 2026 by rpki-client