This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer File: 64285236074D6BC2BB384B2D544C7F545C16CF31.cer (raw, json) Hash identifier: ElCCNnlAt4tE7yhEQ2mbOHeGXSiC4j06HgjvJYCZp/A= Subject key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7A6FFE4FFFAF72C7066AB1A5194522BC3E6F70E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft caRepository: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Dec 2025 20:20:25 +0000 Certificate not after: Wed 02 Dec 2026 20:25:25 +0000 Subordinate resources: IP: 103.184.50.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6f:fe:4f:ff:af:72:c7:06:6a:b1:a5:19:45:22:bc:3e:6f:70:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 3 20:20:25 2025 GMT Not After : Dec 2 20:25:25 2026 GMT Subject: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:fc:a2:50:68:ce:8f:c1:96:00:9e:71:0f: 10:4d:f1:4c:0f:e8:53:10:98:8b:24:ad:b4:0f:2c: 20:aa:1d:30:59:22:e3:d0:e9:eb:97:40:39:9f:c4: 5f:95:a3:4f:59:69:05:87:c0:9a:75:91:89:19:1e: a7:b3:65:59:82:71:1c:24:d2:f6:d0:64:15:31:15: 1d:b2:5f:36:4c:ce:14:ec:c4:8a:3d:c4:4c:f2:f9: df:45:bf:0b:fe:65:25:17:f9:e9:6b:19:9e:e6:07: 26:1f:3d:13:b4:ea:0c:e0:dc:bf:dd:51:f8:12:3b: da:4d:95:b2:3c:98:c5:e2:db:d9:20:2f:ce:69:fb: 6b:f9:57:16:81:86:d1:de:fa:ed:ad:d3:46:69:bb: 90:cc:fa:af:4c:bd:ed:69:9e:5c:e2:03:a4:a9:1a: 49:29:64:3c:62:58:ef:6b:60:9e:34:47:63:1c:58: eb:61:12:38:42:ad:78:c8:d2:36:34:12:fb:5e:ae: 5a:b8:f1:ec:1d:e0:f8:22:21:22:1c:d4:0d:78:5b: 31:cf:48:8c:bb:3d:42:a2:4c:78:41:89:d7:6a:6f: 7f:37:3e:99:e5:ad:9e:58:cc:ce:ab:e2:b9:1e:1e: 50:bf:30:0c:43:bf:b0:70:3d:bd:14:b0:8f:65:08: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.50.0/23 Signature Algorithm: sha256WithRSAEncryption 70:18:54:43:8d:76:17:61:d7:9f:01:ba:42:cf:72:ad:d2:57: bb:55:02:e0:b5:08:8c:9b:48:10:4b:3c:05:e1:88:91:38:fe: 18:a8:87:1d:18:3f:d4:19:30:56:52:95:c4:c8:ea:4d:80:bc: 05:0d:c4:2c:67:21:bf:f3:07:1f:25:cc:c7:97:e3:d7:fb:d1: 0b:c2:9e:b2:fb:7f:38:05:f4:c2:69:a6:d8:bb:2f:fa:d6:70: c7:12:7f:b7:99:ba:ff:76:ad:ad:f2:2f:b9:3c:4e:65:d3:6b: 4a:24:42:73:30:91:da:3a:32:eb:cc:1d:2d:5c:62:d5:9b:c2: 11:ff:75:47:cf:c4:45:d0:ce:71:67:93:8f:c2:75:4d:fb:c7: 7d:7b:aa:55:d3:bc:9f:5b:d4:69:1d:fe:8c:8a:5f:06:95:e3: 24:73:7e:0d:ab:72:92:07:f7:ca:36:b6:9c:dd:44:d0:c4:d2: 40:12:fb:a6:8f:dd:9d:aa:df:f2:86:1f:0c:36:1d:4b:70:16: a5:35:53:c6:64:44:e1:07:9d:83:c5:b0:9e:db:76:f6:ce:33: 40:53:48:de:27:f9:bf:a7:5f:b3:99:d0:76:e0:43:2b:f9:60: c6:30:90:56:48:c0:6c:92:79:d8:71:c2:17:1a:6a:f5:e0:d7: 95:24:da:b1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUem/+T/+vcscGarGlGUUivD5vcOcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMzIwMjAyNVoX DTI2MTIwMjIwMjUyNVowMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0 QjJENTQ0QzdGNTQ1QzE2Q0YzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7d/KJQaM6PwZYAnnEPEE3xTA/oUxCYiySttA8sIKodMFki49Dp65dAOZ/E X5WjT1lpBYfAmnWRiRkep7NlWYJxHCTS9tBkFTEVHbJfNkzOFOzEij3ETPL530W/ C/5lJRf56WsZnuYHJh89E7TqDODcv91R+BI72k2VsjyYxeLb2SAvzmn7a/lXFoGG 0d767a3TRmm7kMz6r0y97WmeXOIDpKkaSSlkPGJY72tgnjRHYxxY62ESOEKteMjS NjQS+16uWrjx7B3g+CIhIhzUDXhbMc9IjLs9QqJMeEGJ12pvfzc+meWtnljMzqvi uR4eUL8wDEO/sHA9vRSwj2UID50CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGQoUjYHTWvCuzhLLVRMf1RcFs8xMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzYzE5N2Y4 LTRlMmUtNDZkOS1iZTJiLWUzNDhhMTMzZGM1Ny8wLzY0Mjg1MjM2MDc0RDZCQzJC QjM4NEIyRDU0NEM3RjU0NUMxNkNGMzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuDIwDQYJKoZIhvcNAQELBQADggEBAHAYVEONdhdh158BukLPcq3SV7tVAuC1 CIybSBBLPAXhiJE4/hiohx0YP9QZMFZSlcTI6k2AvAUNxCxnIb/zBx8lzMeX49f7 0QvCnrL7fzgF9MJppti7L/rWcMcSf7eZuv92ra3yL7k8TmXTa0okQnMwkdo6MuvM HS1cYtWbwhH/dUfPxEXQznFnk4/CdU37x317qlXTvJ9b1Gkd/oyKXwaV4yRzfg2r cpIH98o2tpzdRNDE0kAS+6aP3Z2q3/KGHww2HUtwFqU1U8ZkROEHnYPFsJ7bdvbO M0BTSN4n+b+nX7OZ0HbgQyv5YMYwkFZIwGySedhxwhcaavXg15Uk2rE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:38 2025 by rpki-client