This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
File:                     722FE79638E6D14E4794815122247CBEC27B8505.cer (raw, json)
Hash identifier:          NKf3Y+jnGhAIkgOlAeS+HuTgnKGdRsYlkm3FPQ99070=
Subject key identifier:   72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4B03C8B8592C359D7F0D812ADA7D3FE95D54B262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sun 25 Jan 2026 12:38:25 +0000
Certificate not after:    Sun 24 Jan 2027 12:43:25 +0000
Subordinate resources:    IP: 103.167.166.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:03:c8:b8:59:2c:35:9d:7f:0d:81:2a:da:7d:3f:e9:5d:54:b2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 25 12:38:25 2026 GMT
            Not After : Jan 24 12:43:25 2027 GMT
        Subject: CN=722FE79638E6D14E4794815122247CBEC27B8505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fc:dc:a0:a6:cc:09:02:f1:0f:b2:a8:f5:84:
                    d0:21:70:76:87:3a:fc:0e:2c:14:f5:dd:55:ea:ef:
                    3a:6b:10:22:00:7f:d8:6c:01:50:02:3d:83:43:76:
                    26:84:0f:eb:96:82:21:eb:c5:01:18:7a:bd:47:a3:
                    35:d9:fe:9e:c9:e4:b2:ce:51:ab:8a:c6:ec:10:ce:
                    ca:7f:fa:17:fa:b1:78:f8:8f:ef:2f:d9:9e:78:f2:
                    10:b1:12:f6:49:db:d4:ba:75:c0:15:19:d4:61:d8:
                    2f:4e:ee:28:eb:41:58:3a:b2:81:a6:37:5a:f7:85:
                    df:7a:8d:e9:40:d5:5e:17:08:b3:d4:9e:21:bd:8a:
                    f1:fe:ba:15:5e:eb:d8:4a:5f:a0:b4:16:18:d4:a8:
                    c7:36:9e:61:63:45:76:91:92:71:ea:f6:15:cc:ad:
                    41:49:f1:c1:54:00:2c:b6:d6:48:77:12:ae:04:c0:
                    db:70:ad:ab:68:28:6b:37:f1:7a:aa:bc:25:b1:1f:
                    ae:9d:3f:57:5d:0f:55:9f:8f:c0:06:05:0f:61:6c:
                    bb:ab:90:88:a2:01:12:90:51:d2:c7:95:3e:0f:a4:
                    4c:a4:a7:29:a2:1c:84:d9:89:98:c7:34:84:0d:16:
                    56:a1:63:ea:d7:9a:92:c5:50:2e:a0:89:92:f7:58:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:57:a4:50:e6:53:46:19:e2:02:d2:7f:83:77:93:bf:18:
         f9:5c:45:06:e8:b2:f5:04:e5:ff:a1:77:f3:23:6b:40:50:e2:
         82:3b:6e:13:56:43:57:41:78:b4:3e:74:b7:17:47:0c:ef:96:
         5d:77:16:85:50:c3:92:c3:74:87:b2:70:b5:51:f8:eb:96:cf:
         34:20:94:18:dd:08:40:08:69:59:65:d8:32:6a:a8:5c:da:f3:
         ec:79:38:66:1d:36:58:b4:b8:7d:8b:89:62:c0:58:16:ba:6f:
         03:02:90:e9:1f:c8:c7:25:94:5c:3e:90:36:96:a3:a1:5a:2c:
         f4:67:cd:78:de:77:ee:6f:0e:f6:fe:8c:97:82:e1:82:1e:37:
         d3:29:18:fc:a7:0c:ea:97:aa:a8:08:eb:0d:3b:5e:fb:e3:39:
         c7:40:38:b0:63:dd:33:e1:d0:3e:1e:83:d3:05:ef:e9:ef:75:
         51:2c:d7:39:86:e6:ce:c2:5e:22:82:42:27:52:87:82:b0:d6:
         8a:a2:3c:00:c5:93:3a:45:7a:9b:96:13:03:33:a2:35:c8:f9:
         43:ec:04:7f:3a:b4:86:b3:56:2c:c9:36:53:26:ae:04:08:7d:
         85:df:9d:5e:a1:5b:a8:a3:46:b3:40:bd:89:20:2a:3d:e0:0d:
         a9:e9:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----