This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.cer (raw, json) Hash identifier: RqWTtHGW/jInRCvM3IKTFtmrLdUMfk25jifxLNoTwc8= Subject key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 209A69B55A0855B1CC3C0914BB54BBAE04A4AF52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft caRepository: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 20 Nov 2025 02:26:01 +0000 Certificate not after: Thu 19 Nov 2026 02:31:01 +0000 Subordinate resources: IP: 103.75.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9a:69:b5:5a:08:55:b1:cc:3c:09:14:bb:54:bb:ae:04:a4:af:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 20 02:26:01 2025 GMT Not After : Nov 19 02:31:01 2026 GMT Subject: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:7d:68:4f:0f:79:6f:c8:81:f7:89:dc:57: d1:5b:c0:d8:51:4c:08:c5:0a:78:b2:83:54:e6:3d: 67:aa:14:9c:90:29:4b:e4:e4:75:01:78:fd:03:fb: 99:d7:86:d4:31:59:aa:d2:fb:f4:31:21:da:9d:82: e3:b6:28:8c:ef:97:96:21:cd:ff:ed:ee:7a:8a:b4: 42:80:68:5d:87:20:70:da:90:b6:c0:1a:21:a1:38: 4e:88:68:f8:66:e8:be:61:b9:c7:d0:43:e8:8a:85: d8:96:da:3b:94:b4:63:82:c9:47:8a:9e:27:54:59: 76:5e:e2:7e:e9:f8:80:a7:d1:c4:da:5c:cb:ba:24: 82:45:ce:72:dc:62:1d:03:fc:8b:25:c5:bd:35:1c: 0d:97:f3:bd:e2:07:f5:ce:fe:ce:3e:2d:1b:d4:bb: d7:5f:31:ab:a2:0a:84:d8:62:6a:ec:d0:e0:be:4f: 50:c8:b8:ac:f6:e4:dd:63:d1:fb:fc:fb:1f:16:e5: 3d:3f:fb:5a:34:8b:45:07:d8:aa:10:35:70:c5:35: 83:a1:88:ae:c9:a0:dc:63:16:99:aa:77:9d:f9:a3: 7a:e7:5c:cc:91:ad:41:cf:43:ab:80:4d:e9:8a:56: 6b:5f:92:7e:2f:b4:39:bf:1d:8e:9f:9c:04:6d:42: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.62.0/23 Signature Algorithm: sha256WithRSAEncryption 56:7d:5d:39:51:5b:bd:79:c9:55:71:8d:72:81:58:93:5c:c0: 5e:b9:a8:f0:63:98:4d:71:af:98:a7:7b:8d:f7:f5:34:3f:7b: df:23:ac:d3:d3:4b:35:40:71:83:c7:f9:1a:46:77:b9:08:c7: 4a:8e:fb:ba:c1:24:7c:f9:e5:bc:eb:f4:b4:86:42:36:31:7e: 5e:ad:79:1b:ba:11:e2:37:55:d8:34:e0:a5:f2:c1:ab:37:1f: 44:6a:44:68:11:dd:70:68:f0:1a:a4:72:1e:b6:8b:91:b9:1c: cd:09:ae:c3:0c:e3:8d:b3:c7:d7:c8:94:f3:bd:6d:6a:d1:60: 63:ab:64:72:df:85:ff:76:93:b6:4f:74:80:5a:4e:60:ad:a8: ef:64:73:74:94:b8:7a:09:ad:c1:35:a9:a8:1e:94:b7:9d:7b: da:63:24:14:55:36:74:3e:43:3c:74:b7:39:09:b0:64:36:06: 37:73:82:f1:f6:ff:f3:99:9d:c8:0f:c4:dc:81:df:91:ca:df: e5:60:56:eb:c7:56:47:0d:31:ab:d2:be:d4:e0:02:fc:fc:be: 0f:a8:7d:cb:b5:1a:b4:58:7e:8e:b6:d9:2f:f9:9e:8a:83:90: e5:04:c3:bd:11:6d:10:89:6c:16:9d:87:fc:e7:6a:4e:be:b5: fc:00:d5:8f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIJpptVoIVbHMPAkUu1S7rgSkr1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyMDAyMjYwMVoX DTI2MTExOTAyMzEwMVowMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJD OTdFRDI5MTk3NkI2RTM0MjlGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbQfWhPD3lvyIH3idxX0VvA2FFMCMUKeLKDVOY9Z6oUnJApS+TkdQF4/QP7 mdeG1DFZqtL79DEh2p2C47YojO+XliHN/+3ueoq0QoBoXYcgcNqQtsAaIaE4Toho +GbovmG5x9BD6IqF2JbaO5S0Y4LJR4qeJ1RZdl7ifun4gKfRxNpcy7okgkXOctxi HQP8iyXFvTUcDZfzveIH9c7+zj4tG9S7118xq6IKhNhiauzQ4L5PUMi4rPbk3WPR +/z7HxblPT/7WjSLRQfYqhA1cMU1g6GIrsmg3GMWmap3nfmjeudczJGtQc9Dq4BN 6YpWa1+Sfi+0Ob8djp+cBG1CLDkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHQzq2RXG+GCfwvJftKRl2tuNCn6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wN2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3YzhhMGMz LTM3ZjUtNDY2Ny1hNDMwLTZmYTExMWQzNDNhYS8wLzc0MzNBQjY0NTcxQkUxODI3 RjBCQzk3RUQyOTE5NzZCNkUzNDI5RkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnSz4wDQYJKoZIhvcNAQELBQADggEBAFZ9XTlRW715yVVxjXKBWJNcwF65qPBj mE1xr5ine4339TQ/e98jrNPTSzVAcYPH+RpGd7kIx0qO+7rBJHz55bzr9LSGQjYx fl6teRu6EeI3Vdg04KXywas3H0RqRGgR3XBo8Bqkch62i5G5HM0JrsMM442zx9fI lPO9bWrRYGOrZHLfhf92k7ZPdIBaTmCtqO9kc3SUuHoJrcE1qagelLede9pjJBRV NnQ+Qzx0tzkJsGQ2BjdzgvH2//OZncgPxNyB35HK3+VgVuvHVkcNMavSvtTgAvz8 vg+ofcu1GrRYfo622S/5noqDkOUEw70RbRCJbBadh/znak6+tfwA1Y8= -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:28 2025 by rpki-client