This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer (raw, json) Hash identifier: OTG2kq0kGoD8ScJvEZJLTAh3LWBKeW9xySjxfP0mdhc= Subject key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EC7148DE952988357CE1E67BC50024FE28B60F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft caRepository: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 07 Jan 2026 16:33:13 +0000 Certificate not after: Wed 06 Jan 2027 16:38:13 +0000 Subordinate resources: IP: 103.120.64.0/22 IP: 2001:df6:900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c7:14:8d:e9:52:98:83:57:ce:1e:67:bc:50:02:4f:e2:8b:60:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 7 16:33:13 2026 GMT Not After : Jan 6 16:38:13 2027 GMT Subject: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:c9:b1:22:81:3f:d3:f4:69:a5:ee:1a:32: a8:22:6b:5a:7e:c3:67:28:8c:04:7a:28:13:69:97: 23:21:1a:a2:54:7f:05:e4:8b:59:c4:64:47:59:8f: b1:bc:ac:74:ad:fb:99:04:cb:ce:88:0a:cb:bd:2b: 54:71:98:3c:03:d9:c8:58:93:0a:c5:73:5a:0b:a4: 3b:f5:13:29:6c:17:36:63:82:22:e5:24:f1:a9:a3: 69:e4:9e:08:4c:27:d5:83:68:34:cf:e4:b0:e1:90: 87:fa:95:b6:31:2f:24:f4:23:2f:93:d5:c5:a4:2a: 24:07:61:98:66:92:c8:08:00:2a:ae:6a:9d:54:33: b7:c1:36:d6:9e:ab:34:40:44:06:68:5c:d7:95:63: 64:23:d1:52:e4:45:06:50:f7:17:4a:03:46:84:13: 12:75:19:39:4b:3a:4e:a0:1c:56:e7:cd:19:20:ca: ce:4b:24:9c:76:5c:b5:aa:39:c1:c6:a0:36:95:bd: 4e:d2:d9:e5:a7:3c:fb:b5:d6:de:10:cd:cd:b0:e0: 02:bb:eb:8a:c6:11:7d:8c:f7:a3:df:c3:a7:d7:f3: d5:ea:62:21:c6:e2:f7:36:76:e5:58:d6:58:5e:54: 4f:be:25:4f:a1:c6:be:9e:83:4b:cc:e0:4a:96:12: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.64.0/22 IPv6: 2001:df6:900::/48 Signature Algorithm: sha256WithRSAEncryption 9b:cb:de:3f:1a:a3:85:18:9c:f7:dc:74:40:d9:e3:62:b2:6b: 4f:19:dd:5e:7b:bc:79:79:1e:72:90:e7:35:9a:11:84:34:b7: c5:66:7f:4c:1d:66:dd:0b:d7:96:d2:38:7d:08:f5:19:5d:39: b9:0a:c9:5f:9b:9d:e1:db:07:df:37:6a:0c:ee:f6:d3:52:b9: b9:31:95:50:71:a8:0c:27:06:02:51:79:7b:c6:e4:76:8d:de: 96:4d:65:be:37:ff:f2:66:e1:8a:42:09:18:07:5e:24:17:6e: 50:b2:a6:ee:60:69:4c:13:9f:6f:2e:29:ab:94:5d:e6:4f:64: 7f:4b:12:43:cf:0b:ce:ab:49:c2:15:b0:ad:ba:bb:61:f0:6f: ab:4c:a1:bb:5a:98:19:58:d6:fd:e1:0c:35:21:5c:ce:ed:aa: 51:c2:54:7e:a4:8b:0b:e2:1c:7b:05:39:00:02:15:70:48:94: e4:fb:8a:61:c3:1d:57:ee:13:01:2a:06:95:71:be:f5:c8:26: f4:85:47:23:89:fb:9c:a8:36:b1:2c:cc:75:46:03:83:06:e7: e7:6e:b9:d4:5e:96:1c:ba:91:c1:a4:95:3c:ad:6a:90:d2:52: 69:90:81:a2:73:69:a7:42:ba:39:e3:f8:4a:7a:5f:9b:89:51: cf:ee:86:fa -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUHscUjelSmINXzh5nvFACT+KLYPQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwNzE2MzMxM1oX DTI3MDEwNjE2MzgxM1owMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1 RTg5MjJCRUYxQkVFNTY2Rjk0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTUybEigT/T9Gml7hoyqCJrWn7DZyiMBHooE2mXIyEaolR/BeSLWcRkR1mP sbysdK37mQTLzogKy70rVHGYPAPZyFiTCsVzWgukO/UTKWwXNmOCIuUk8amjaeSe CEwn1YNoNM/ksOGQh/qVtjEvJPQjL5PVxaQqJAdhmGaSyAgAKq5qnVQzt8E21p6r NEBEBmhc15VjZCPRUuRFBlD3F0oDRoQTEnUZOUs6TqAcVufNGSDKzksknHZctao5 wcagNpW9TtLZ5ac8+7XW3hDNzbDgArvrisYRfYz3o9/Dp9fz1epiIcbi9zZ25VjW WF5UT74lT6HGvp6DS8zgSpYSjfkCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGtkf2lqm7XHGGBeiSK+8b7lZvlOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NmU0NmVj LWRmNWMtNGI0ZC1hMzBlLTEwYjJjNjg4YzJmYy8wLzZCNjQ3RjY5NkE5QkI1Qzcx ODYwNUU4OTIyQkVGMUJFRTU2NkY5NEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJneEAwDwQCAAIwCQMHACABDfYJADANBgkqhkiG9w0BAQsFAAOCAQEAm8vePxqj hRic99x0QNnjYrJrTxndXnu8eXkecpDnNZoRhDS3xWZ/TB1m3QvXltI4fQj1GV05 uQrJX5ud4dsH3zdqDO7201K5uTGVUHGoDCcGAlF5e8bkdo3elk1lvjf/8mbhikIJ GAdeJBduULKm7mBpTBOfby4pq5Rd5k9kf0sSQ88LzqtJwhWwrbq7YfBvq0yhu1qY GVjW/eEMNSFczu2qUcJUfqSLC+IcewU5AAIVcEiU5PuKYcMdV+4TASoGlXG+9cgm 9IVHI4n7nKg2sSzMdUYDgwbn52651F6WHLqRwaSVPK1qkNJSaZCBonNpp0K6OeP4 Snpfm4lRz+6G+g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:28:37 2026 by rpki-client