This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer
File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer (raw, json)
Hash identifier: jJQsp/JHcEY72/TWKGnXIiDCz2yR+dAmKzJEviqCetc=
Subject key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 558784B13D575D501CC211EBB7F7F85646E27AFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft
caRepository: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 22 Jan 2026 05:51:51 +0000
Certificate not after: Thu 21 Jan 2027 05:56:51 +0000
Subordinate resources: IP: 103.71.190.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:87:84:b1:3d:57:5d:50:1c:c2:11:eb:b7:f7:f8:56:46:e2:7a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 22 05:51:51 2026 GMT
Not After : Jan 21 05:56:51 2027 GMT
Subject: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:62:f1:57:24:81:5d:90:ac:23:cb:ac:ad:
6b:c3:a8:72:2f:29:1b:3e:94:52:d8:b8:ad:18:d9:
8c:a9:5c:4c:de:7b:bd:e6:ec:8c:10:17:df:4e:38:
08:a4:8d:2b:fc:36:cc:b5:db:4e:f6:fb:49:fe:59:
8b:51:e8:a8:6c:e4:b7:91:3f:6e:fe:4b:1e:7c:d5:
81:f3:1f:1b:f9:d5:35:fe:31:4d:b7:ce:3e:12:2a:
27:7f:79:12:60:34:a7:55:23:03:20:c0:1c:9e:5d:
43:b7:ca:33:7a:8c:98:a0:d9:25:f9:b5:14:09:1e:
78:b0:0e:8b:96:e5:b9:c9:91:e5:66:3c:74:c8:c7:
ef:1f:c3:6c:8a:01:59:01:fd:f4:0c:7b:41:0c:89:
35:2d:e0:3e:48:43:d0:eb:37:8c:48:6b:0d:91:b2:
06:58:31:d3:c6:f5:fa:30:8e:7e:25:b8:aa:7b:fe:
74:e5:c0:ca:bb:52:31:9e:40:ff:00:1b:70:8f:c6:
d3:ec:54:e8:26:89:16:bc:ee:cb:2e:d2:88:99:d1:
2c:9b:8f:c3:32:c9:98:81:9e:72:26:e6:c2:6f:43:
fa:e7:48:b1:9a:e4:16:17:2b:d7:fb:57:e4:25:3a:
9b:f5:62:3f:79:2a:2d:41:b9:f7:ed:d9:fb:0a:f2:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.190.0/23
Signature Algorithm: sha256WithRSAEncryption
82:7c:99:51:0a:22:61:68:e5:6a:ee:3e:36:3d:75:1d:03:52:
4c:c7:39:5d:8e:d0:bd:a0:45:fe:af:ca:0e:e4:2f:cb:2f:18:
7f:b9:b7:48:e8:e0:2a:85:67:76:69:61:aa:22:99:46:28:12:
71:a9:ec:79:3c:01:c5:7d:8c:e0:63:a2:e1:f9:1d:2d:1d:da:
55:71:d4:41:39:95:54:d5:7e:47:f0:94:08:aa:d0:27:5d:db:
7a:cc:f7:c8:69:f1:a9:b9:64:fb:fe:7b:ac:44:2a:7a:75:f1:
44:c7:ca:d1:4c:7b:02:e8:23:ef:47:76:04:91:cc:d5:a4:57:
01:90:81:73:09:65:11:90:52:52:c0:3c:f2:33:31:00:19:8e:
13:c6:7b:ca:1d:e4:e2:9e:bc:35:88:5d:33:93:e6:9d:0e:f3:
24:97:c2:7a:61:b8:2f:5a:d1:a5:44:40:ab:75:0a:fb:50:74:
c9:51:14:cf:74:62:2a:34:e7:bd:77:0c:ed:92:ee:f4:31:f8:
67:28:7e:4e:7c:b0:3e:ae:14:f8:55:c2:5b:e6:98:db:4a:ae:
14:af:e6:39:94:fc:b9:4d:f3:72:98:bb:c3:4f:2d:31:db:65:
7f:65:3d:ce:52:c4:67:1d:43:ee:f6:5a:00:73:3d:f8:1e:6a:
0d:4d:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:04 2026 by rpki-client