This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer
File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer (raw, json)
Hash identifier: PPE+XjwjXsa+68LoytQUFCY0WMV4eWznl5cXbN4hU8I=
Subject key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 40054313A1186E3597E3767A0695F4DA0A4EFAFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 09 Jan 2026 10:51:41 +0000
Certificate not after: Fri 08 Jan 2027 10:56:41 +0000
Subordinate resources: IP: 103.147.68.0/23
IP: 2405:af40::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:05:43:13:a1:18:6e:35:97:e3:76:7a:06:95:f4:da:0a:4e:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 9 10:51:41 2026 GMT
Not After : Jan 8 10:56:41 2027 GMT
Subject: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:c6:21:1a:96:9a:e8:a9:9a:82:21:52:9d:
71:08:0c:1a:52:56:12:1f:96:0d:0f:4f:34:45:84:
71:54:16:18:b9:8a:b3:80:ce:76:8c:d8:e4:f5:5a:
e0:25:e2:44:a2:e7:02:4b:08:31:cb:79:39:a6:8b:
4a:96:9e:ed:98:a5:39:02:6d:69:89:f8:1a:26:ad:
5e:3a:ad:79:ea:55:12:e6:09:04:a3:cd:7a:ae:f5:
ee:ee:be:fa:9a:d4:48:74:0f:c5:02:3e:db:9e:f1:
d6:3f:33:08:b2:c5:6b:56:c9:b6:2f:14:96:14:65:
f6:5e:62:93:cd:82:11:c1:62:7c:18:50:bf:1d:da:
b8:4d:68:fc:6b:af:54:1d:12:99:50:6a:99:73:8e:
f2:55:da:b1:ab:85:0d:c8:00:31:21:24:bf:8c:47:
75:8f:ba:40:68:f6:57:8a:3d:53:1d:8d:12:13:68:
b1:48:5d:72:29:d3:ed:aa:c2:4a:96:35:3b:ae:34:
ed:67:41:b9:25:fb:78:c2:06:60:21:b5:af:33:b5:
15:d2:22:8f:c5:88:77:d6:57:32:79:02:11:82:ed:
54:2d:1c:01:ab:8b:cc:db:c9:a9:cb:5d:11:b9:8d:
04:13:da:42:93:4f:70:60:a4:2e:17:e0:4d:c0:78:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.68.0/23
IPv6:
2405:af40::/32
Signature Algorithm: sha256WithRSAEncryption
88:c5:be:64:b6:15:81:fe:53:57:cb:c0:1e:e1:3d:c5:27:71:
13:87:1c:87:1b:15:51:4f:42:6b:4b:10:ce:07:27:3e:76:58:
a4:93:70:39:10:1b:bc:00:ff:fe:96:43:5e:f6:99:65:3c:a9:
2a:28:ff:fa:b0:5a:ab:68:0e:a6:7b:ca:24:2e:e4:ad:04:df:
40:c5:16:cf:4a:2d:8a:6f:6f:c4:2b:c5:36:9d:94:e1:65:f7:
12:07:72:cc:a9:30:66:b9:38:6e:26:c7:de:20:a2:8f:ab:9f:
b6:74:ab:cd:32:e8:a5:5d:93:d3:90:6b:34:fd:59:00:47:1e:
5c:c0:22:d3:03:d2:df:8b:5d:b7:a8:0c:55:4d:32:f2:b1:e7:
87:39:5c:15:02:de:b4:f7:ab:6e:49:3f:77:b7:67:79:a5:f5:
6e:9c:f1:7e:7a:63:93:4b:42:02:ff:44:03:d0:51:c3:53:9c:
a2:95:79:49:a0:21:5c:93:99:dd:17:37:6d:2e:2e:fb:7c:dd:
48:8c:3d:17:49:05:3a:65:92:2a:75:58:3e:65:bb:d0:77:01:
cc:12:34:04:8d:59:93:84:d3:75:ad:70:c5:f6:a8:8c:a2:50:
de:d8:39:55:2f:f0:cb:cf:c7:62:89:71:43:21:c8:2d:b1:11:
b1:18:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:06:53 2026 by rpki-client