This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer
File: 461B039429CF609C76235D70C58DE1D0AB6EA915.cer (raw, json)
Hash identifier: B1UtGQKXSQhmNXqis2MuqxTJM597OkFZfAkrZPmcHmQ=
Subject key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 01E9F77B500FF938EE525C957083E5FA37F70041
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft
caRepository: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 14 Jan 2026 20:52:25 +0000
Certificate not after: Wed 13 Jan 2027 20:57:25 +0000
Subordinate resources: IP: 103.244.104.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e9:f7:7b:50:0f:f9:38:ee:52:5c:95:70:83:e5:fa:37:f7:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 14 20:52:25 2026 GMT
Not After : Jan 13 20:57:25 2027 GMT
Subject: CN=461B039429CF609C76235D70C58DE1D0AB6EA915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:17:12:e3:d3:fc:fc:0f:4c:61:32:de:fc:
1c:d7:1b:3d:b8:fd:2e:9b:08:40:19:3e:3c:30:17:
b1:7c:f7:98:74:1a:0c:7a:84:c8:ea:3a:03:e9:a3:
0e:39:c4:46:ee:72:98:ff:ba:73:82:7c:17:ae:6a:
ad:66:3d:0f:fa:62:55:14:bd:89:cb:4d:b3:4b:b0:
27:81:fa:bc:21:2f:c1:ef:6f:7f:f7:8d:4c:bc:e4:
64:12:30:9a:4b:0b:00:f9:79:a3:ee:d3:b6:be:d7:
5c:6d:69:cb:67:33:ed:60:25:aa:a2:c7:45:7a:00:
40:14:11:12:90:c6:c3:94:0c:25:2d:35:87:a7:9c:
05:84:d6:c5:ca:96:56:6b:f1:ea:5f:ab:d1:0d:cf:
54:dd:0d:01:9d:02:0b:8b:ac:4b:b1:4b:5b:39:01:
a6:8f:61:bd:8f:d2:76:43:e8:4d:fa:df:02:fc:81:
3a:e7:37:44:61:47:8a:de:c0:1e:6c:93:76:48:ae:
c8:c4:92:57:f2:57:1c:17:b7:56:4d:a4:31:6b:20:
c5:33:02:de:9c:53:77:6e:eb:d1:c6:53:a4:74:e9:
ee:41:a8:f0:15:29:c4:f9:62:7c:1b:fb:54:e1:71:
79:44:3d:6c:76:1f:e7:3a:c7:90:e1:36:7d:bf:31:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.104.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:0d:43:5d:23:bc:6a:71:b1:3a:e6:9e:5e:9d:85:d7:f8:b9:
3b:49:a7:d4:fb:86:1c:60:fe:ff:69:61:23:f3:e7:e9:77:8d:
19:aa:82:99:33:50:1e:ce:ff:d8:66:32:e4:cb:1a:43:ba:7e:
cc:e2:49:0b:ad:a9:0e:18:78:e9:c6:24:33:b4:6c:aa:d2:00:
cd:6f:db:93:54:72:83:48:1e:49:26:b4:52:a6:91:15:57:45:
a3:5b:21:82:bb:4e:35:d7:3b:7f:dd:e7:b5:1f:d5:80:f7:c1:
1b:d9:6b:04:8d:8c:96:e4:89:1d:49:1a:42:44:72:ab:a4:40:
e7:2e:a4:6d:e1:4c:37:4c:85:0c:ed:78:3a:12:eb:40:b5:74:
3b:1e:1b:a9:10:b6:0d:03:0d:f6:b9:b2:d8:16:7a:a1:9b:f7:
8d:2a:c1:71:48:1e:f7:f6:ba:37:95:ec:15:a3:3e:42:59:e6:
d0:83:58:0b:be:10:f4:77:9b:61:85:50:df:6c:97:47:24:8f:
7b:fd:ee:55:dd:80:8a:5e:39:4d:41:74:ae:d2:f6:42:20:db:
b2:c5:c8:5a:dc:8e:84:3d:99:2e:a1:09:05:3c:54:bb:c4:1a:
6f:db:e9:8a:a9:27:b2:49:ac:7c:7d:3c:6b:3a:73:fb:08:a3:
5a:11:09:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:45 2026 by rpki-client