This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer File: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer (raw, json) Hash identifier: EFjlXwt/RVr4CAInXXktXNh9VbONr5TOyupfZhM2OFM= Subject key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 101A03AB6F14712AB2996630BAEC3B05DAED8D52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft caRepository: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 03:29:52 +0000 Certificate not after: Tue 02 Jun 2026 03:34:52 +0000 Subordinate resources: IP: 103.137.82.0/23 IP: 2404:acc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1a:03:ab:6f:14:71:2a:b2:99:66:30:ba:ec:3b:05:da:ed:8d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 03:29:52 2025 GMT Not After : Jun 2 03:34:52 2026 GMT Subject: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:46:ba:02:5f:18:fc:fc:d5:57:c4:c1:d5: e2:43:61:86:c1:21:d5:69:9f:1c:35:23:50:7f:f1: 10:cb:bd:af:9d:83:76:f1:2b:3b:33:ee:e1:d1:d0: 18:f8:04:c8:d8:72:39:6b:66:71:f5:22:cb:ad:2b: 7a:02:87:e0:4f:e8:88:d2:91:1f:a7:12:70:7f:e3: 59:a9:bf:9a:20:41:4a:d6:7e:fe:dc:24:18:9b:e7: c8:15:0b:57:2d:4d:be:a3:30:a4:cc:8c:ae:a0:c5: a2:4e:5c:1d:79:ca:54:f8:9a:54:98:83:57:00:14: a6:f2:4c:7b:7e:fa:6a:8d:c8:b2:81:60:f6:9f:41: f7:df:3c:7c:9d:33:11:3d:7f:7c:67:f8:1a:10:a1: 3f:a7:1c:9d:e6:77:1a:e6:1d:a7:87:c4:73:c5:3c: e8:f0:34:c3:66:38:ef:06:82:75:7c:81:d3:56:8e: 24:13:87:5c:43:96:e6:9e:7e:00:02:7a:ef:a5:4f: ed:1b:24:48:6e:09:21:10:7f:2e:35:29:f5:c5:db: 1c:fe:f5:08:44:d1:3f:ae:1d:5d:1b:94:fe:67:db: 3e:15:25:50:74:a5:f9:01:42:01:1e:dc:bf:2b:8c: e2:7b:2f:d2:c7:95:fd:0a:65:39:e7:8b:19:45:a2: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.82.0/23 IPv6: 2404:acc0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:a9:0c:62:76:41:96:a2:ba:e5:ca:86:3e:2e:e6:a1:ea:07: dc:a3:8a:20:b4:e3:4f:e8:40:1a:a2:14:bc:4e:f1:a6:53:4e: 6e:db:05:79:ff:2e:1e:e7:91:3e:72:01:9d:41:55:27:50:f4: 41:2a:1b:42:f6:b0:2b:b9:e1:66:48:da:b4:25:48:fb:78:dd: 6e:4e:cc:be:e5:07:d4:5d:bb:23:66:ae:07:e0:4b:08:7f:67: 76:46:0b:fb:a4:ff:b8:bf:ae:20:8c:90:70:27:ea:50:ee:3e: e8:ab:83:06:15:f1:45:57:34:3a:9a:06:36:3b:2b:66:4b:0a: ea:bc:db:d4:d8:95:fd:5a:cc:0e:ec:38:27:db:70:36:c5:95: c9:cf:de:c3:71:f5:e7:eb:82:e7:5a:55:74:ef:a9:d3:52:af: 48:0e:e1:39:93:97:ef:16:1e:77:bf:33:e1:6d:bc:92:fe:73: 33:95:fa:21:95:00:8c:80:28:96:65:48:5e:36:22:1e:5a:b6: 09:f3:cf:57:97:b2:49:0f:02:c5:08:93:14:bb:d3:0d:b5:0e: 77:0b:03:ac:18:6e:97:01:6a:a2:cd:c0:6a:f5:d4:d5:69:ac: 42:12:40:67:92:99:bd:c7:af:19:60:fe:bf:e7:97:99:6d:f5: 6e:31:a1:4d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUEBoDq28UcSqymWYwuuw7BdrtjVIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAzMjk1MloX DTI2MDYwMjAzMzQ1MlowMzExMC8GA1UEAxMoNUU3RTRBNjNDNzE1QjI5NkQ1OTdC NUFBM0ZFODAwNjA5QkYzQjlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNvRroCXxj8/NVXxMHV4kNhhsEh1WmfHDUjUH/xEMu9r52DdvErOzPu4dHQ GPgEyNhyOWtmcfUiy60regKH4E/oiNKRH6cScH/jWam/miBBStZ+/twkGJvnyBUL Vy1NvqMwpMyMrqDFok5cHXnKVPiaVJiDVwAUpvJMe376ao3IsoFg9p9B9988fJ0z ET1/fGf4GhChP6ccneZ3GuYdp4fEc8U86PA0w2Y47waCdXyB01aOJBOHXEOW5p5+ AAJ676VP7RskSG4JIRB/LjUp9cXbHP71CETRP64dXRuU/mfbPhUlUHSl+QFCAR7c vyuM4nsv0seV/QplOeeLGUWizuMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF5+SmPHFbKW1Ze1qj/oAGCb87nwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYWU2Y2Q0MS0yZTRjLTRjYzItODgxZS1iYWI0NGE4ODRmZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhZTZjZDQx LTJlNGMtNGNjMi04ODFlLWJhYjQ0YTg4NGZkNC8wLzVFN0U0QTYzQzcxNUIyOTZE NTk3QjVBQTNGRTgwMDYwOUJGM0I5RjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFniVIwDQQCAAIwBwMFACQErMAwDQYJKoZIhvcNAQELBQADggEBADupDGJ2QZai uuXKhj4u5qHqB9yjiiC040/oQBqiFLxO8aZTTm7bBXn/Lh7nkT5yAZ1BVSdQ9EEq G0L2sCu54WZI2rQlSPt43W5OzL7lB9RduyNmrgfgSwh/Z3ZGC/uk/7i/riCMkHAn 6lDuPuirgwYV8UVXNDqaBjY7K2ZLCuq829TYlf1azA7sOCfbcDbFlcnP3sNx9efr gudaVXTvqdNSr0gO4TmTl+8WHne/M+FtvJL+czOV+iGVAIyAKJZlSF42Ih5atgnz z1eXskkPAsUIkxS70w21DncLA6wYbpcBaqLNwGr11NVprEISQGeSmb3Hrxlg/r/n l5lt9W4xoU0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:59:10 2025 by rpki-client