This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer (raw, json) Hash identifier: R3f2hPbJKW1g9vNUgD0iAMW6plP0I0sgCiOGSUPd+cQ= Subject key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5ED54C5EDFCCCDE9FCD19667AE583F7334BF2070 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft caRepository: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 Jan 2026 01:02:38 +0000 Certificate not after: Thu 07 Jan 2027 01:07:38 +0000 Subordinate resources: IP: 103.223.0.0/22 IP: 2001:df2:8a00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d5:4c:5e:df:cc:cd:e9:fc:d1:96:67:ae:58:3f:73:34:bf:20:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 8 01:02:38 2026 GMT Not After : Jan 7 01:07:38 2027 GMT Subject: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:0f:b1:11:71:9a:f9:cd:4f:b3:28:93:f2: cc:29:13:60:6b:7e:ce:9a:6a:3f:65:c1:be:fb:a2: 29:a7:0f:a5:ad:86:65:43:5a:56:ef:4a:9b:1f:e6: b1:25:2a:bb:ae:30:d7:24:1f:bc:1d:93:9c:3b:7e: f5:9a:24:21:f6:ba:0d:ad:ad:24:96:50:f3:7e:49: ad:1b:84:9a:aa:46:83:b6:37:10:59:9c:f2:c3:bc: 79:31:63:16:99:88:fb:57:bb:be:36:e0:cb:66:cb: e5:1f:c7:4f:c4:7a:07:96:03:3c:98:ac:46:50:db: 7a:23:21:6c:d6:d0:e8:67:df:a5:cf:09:43:4f:d8: da:42:62:92:2a:ba:a3:0b:5c:0a:a5:91:c3:7b:83: b8:e7:dd:10:2b:45:29:cf:f9:e6:78:95:49:62:c7: 64:15:5e:1f:4d:98:e1:78:25:9a:f4:22:83:2c:98: d4:17:21:38:34:e5:ab:82:fd:85:ba:62:f6:96:c1: 2b:8e:b2:1e:a4:58:82:22:18:10:40:a9:e9:d7:59: ac:d9:d0:99:72:c7:63:b9:9a:62:10:ba:89:ea:86: c6:d5:f0:17:ad:65:7b:9c:94:9f:a2:5d:f5:38:bd: 08:0e:4c:62:f4:8b:ce:e7:d7:39:3b:1b:4e:bc:b0: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.223.0.0/22 IPv6: 2001:df2:8a00::/48 Signature Algorithm: sha256WithRSAEncryption 59:6c:66:92:34:39:cd:0f:98:af:ef:09:06:a4:5f:a1:ef:b4: b2:50:4f:40:ae:74:60:63:aa:cb:2d:f5:16:7c:d3:d9:c9:3b: b6:09:2e:1c:82:b2:98:24:a2:3e:c1:85:5f:ba:4c:df:38:b2: f2:12:14:f8:cc:3d:1e:b9:09:a3:e1:fe:a9:1a:63:44:66:e7: 2d:3c:5e:5d:4a:b6:27:62:ca:c4:65:f4:97:d3:ef:b5:0d:86: fc:97:f7:20:fd:af:b7:c7:11:40:1b:42:c0:51:f3:f4:67:8c: 69:52:36:43:0c:05:94:03:a4:08:b9:58:14:90:b6:b4:49:cf: de:d7:b7:53:68:ce:39:a1:36:83:25:b5:bd:fa:a0:f9:a6:5d: 48:bb:b5:20:e1:79:a9:56:13:0d:51:d0:72:07:3a:5c:42:6e: f3:0b:37:64:5b:90:8e:e4:32:97:33:c0:01:ad:41:10:d3:42: 35:5f:3b:ad:b1:44:f3:6e:71:15:87:67:3e:e5:cf:e6:01:7c: 46:f7:34:47:e6:a9:af:62:bd:8f:49:83:ec:26:a0:21:22:a2: 54:68:fb:70:32:ce:e4:93:f1:32:93:d6:fe:b1:ca:e4:c2:89: a0:c5:4b:9c:01:f9:c3:70:1d:74:d4:9c:8a:ea:6a:e3:a3:38: 7b:0f:b3:a5 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUXtVMXt/Mzen80ZZnrlg/czS/IHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwODAxMDIzOFoX DTI3MDEwNzAxMDczOFowMzExMC8GA1UEAxMoNkI0RDE0RkM2RDM3NEFGQ0NBQjE5 MEM1NERERjNBMUE5RDREOTMwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM38D7ERcZr5zU+zKJPyzCkTYGt+zppqP2XBvvuiKacPpa2GZUNaVu9Kmx/m sSUqu64w1yQfvB2TnDt+9ZokIfa6Da2tJJZQ835JrRuEmqpGg7Y3EFmc8sO8eTFj FpmI+1e7vjbgy2bL5R/HT8R6B5YDPJisRlDbeiMhbNbQ6Gffpc8JQ0/Y2kJikiq6 owtcCqWRw3uDuOfdECtFKc/55niVSWLHZBVeH02Y4XglmvQigyyY1BchODTlq4L9 hbpi9pbBK46yHqRYgiIYEECp6ddZrNnQmXLHY7maYhC6ieqGxtXwF61le5yUn6Jd 9Ti9CA5MYvSLzufXOTsbTrywOusCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGtNFPxtN0r8yrGQxU3fOhqdTZMLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNzU0NWI4NS05Mjc0LTQ3MGEtYWQyNy0yNDY5ZTlkMTU1YmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3NTQ1Yjg1 LTkyNzQtNDcwYS1hZDI3LTI0NjllOWQxNTViYy8wLzZCNEQxNEZDNkQzNzRBRkND QUIxOTBDNTREREYzQTFBOUQ0RDkzMEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJn3wAwDwQCAAIwCQMHACABDfKKADANBgkqhkiG9w0BAQsFAAOCAQEAWWxmkjQ5 zQ+Yr+8JBqRfoe+0slBPQK50YGOqyy31FnzT2ck7tgkuHIKymCSiPsGFX7pM3ziy 8hIU+Mw9HrkJo+H+qRpjRGbnLTxeXUq2J2LKxGX0l9PvtQ2G/Jf3IP2vt8cRQBtC wFHz9GeMaVI2QwwFlAOkCLlYFJC2tEnP3te3U2jOOaE2gyW1vfqg+aZdSLu1IOF5 qVYTDVHQcgc6XEJu8ws3ZFuQjuQylzPAAa1BENNCNV87rbFE825xFYdnPuXP5gF8 Rvc0R+apr2K9j0mD7CagISKiVGj7cDLO5JPxMpPW/rHK5MKJoMVLnAH5w3AddNSc iupq46M4ew+zpQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:48 2026 by rpki-client