This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
File: 7B04CE58A1370241E93EF01F597DD18A039D613D.cer (raw, json)
Hash identifier: o0E6cOBeoDW6k6qaHYs57SMKz2GpfTwNuVNReiNWm0A=
Subject key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 06384445BFAF4DCA3957C3FEC4A3BFD1C537A42F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
caRepository: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 03 Jan 2026 09:22:55 +0000
Certificate not after: Sat 02 Jan 2027 09:27:55 +0000
Subordinate resources: IP: 103.97.198.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:38:44:45:bf:af:4d:ca:39:57:c3:fe:c4:a3:bf:d1:c5:37:a4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 3 09:22:55 2026 GMT
Not After : Jan 2 09:27:55 2027 GMT
Subject: CN=7B04CE58A1370241E93EF01F597DD18A039D613D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:f0:98:1b:45:ee:3e:e2:ce:5a:7e:ff:ee:
42:b6:15:ba:97:4e:45:2c:ab:b4:b4:95:be:f9:c2:
21:a1:d5:6a:17:e9:9e:fe:a3:82:ec:c6:2d:f0:99:
c9:c7:f1:6e:a8:e5:04:75:7c:82:29:aa:41:e8:a0:
dd:93:25:1b:3e:8d:6d:e8:b9:da:78:96:cc:ed:aa:
55:dc:45:37:23:1f:f2:cb:10:9a:02:f4:8f:a8:21:
05:3c:6c:99:26:f8:01:57:6f:83:ab:6d:d2:a4:11:
c4:3e:5b:64:5a:e4:d5:88:44:92:bb:fa:b1:1e:46:
95:e2:a6:27:d8:84:f3:60:c8:1e:10:f1:9c:5e:90:
7d:8b:af:87:79:ab:8d:b3:9e:fa:6e:95:42:b3:bc:
9b:67:d2:50:22:12:47:5f:09:33:23:e0:eb:92:e0:
97:41:aa:1a:d1:db:56:47:6f:bd:96:a0:f5:94:c2:
1b:be:c0:db:20:d8:89:53:63:ef:e9:1f:68:fc:4a:
03:40:f0:85:69:af:68:35:1b:1f:8d:9b:78:ca:63:
21:ad:f9:82:3f:04:df:c5:41:56:3f:d0:57:ce:a3:
ad:7e:c5:00:0a:a8:c6:7b:d5:aa:e6:1b:18:6f:d9:
03:98:1f:4c:6d:aa:5d:cd:2c:b4:3f:a4:90:c2:2f:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.198.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:2f:ab:4c:42:2f:05:a8:b7:2e:a6:4e:74:7f:f8:2c:41:eb:
4a:a5:99:76:98:fc:1f:44:ca:fa:20:10:40:d6:e8:95:a1:8e:
f5:76:51:1e:40:e5:01:4a:b8:cf:bf:78:89:ed:3a:15:04:bf:
cf:14:f0:39:41:f3:e0:94:a9:49:25:c5:42:82:cf:dd:ab:23:
ff:ae:24:82:c4:2a:d3:c2:f0:a5:4b:1b:5b:71:a1:ba:27:e8:
2b:71:eb:1b:dd:8d:87:96:31:4a:b6:84:fa:e9:f2:37:6a:56:
38:56:f9:5e:fb:bc:db:17:a5:91:cd:f7:bb:3e:b5:b0:8f:88:
24:b1:c2:a6:09:fd:5d:0a:c2:55:54:b1:ac:2e:aa:0c:fa:a2:
51:8b:94:af:7b:5b:b6:ff:5a:96:8a:17:44:de:47:47:9c:d4:
de:9e:21:1a:ce:01:18:7b:0a:f8:33:b9:40:68:3a:31:5a:5a:
2b:85:4a:81:2f:76:dd:cc:11:13:42:6f:16:56:a1:8a:0f:c6:
8f:23:b2:ab:85:f0:cf:80:5d:c4:ce:cd:0b:71:14:8d:6b:ff:
08:e7:99:7a:7f:c4:34:1b:d5:cc:21:1a:83:ea:70:72:27:86:
32:9d:ed:74:b4:ea:4b:a9:f2:c3:74:fa:b1:f7:15:8f:c3:74:
cf:78:e3:5d
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUBjhERb+vTco5V8P+xKO/0cU3pC8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEwMzA5MjI1NVoX
DTI3MDEwMjA5Mjc1NVowMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VG
MDFGNTk3REQxOEEwMzlENjEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANqv8JgbRe4+4s5afv/uQrYVupdORSyrtLSVvvnCIaHVahfpnv6jguzGLfCZ
ycfxbqjlBHV8gimqQeig3ZMlGz6Nbei52niWzO2qVdxFNyMf8ssQmgL0j6ghBTxs
mSb4AVdvg6tt0qQRxD5bZFrk1YhEkrv6sR5GleKmJ9iE82DIHhDxnF6QfYuvh3mr
jbOe+m6VQrO8m2fSUCISR18JMyPg65Lgl0GqGtHbVkdvvZag9ZTCG77A2yDYiVNj
7+kfaPxKA0DwhWmvaDUbH42beMpjIa35gj8E38VBVj/QV86jrX7FAAqoxnvVquYb
GG/ZA5gfTG2qXc0stD+kkMIv2w0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHsEzlihNwJB6T7wH1l90YoDnWE9MB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9kODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4NDYzYWQ1
LTE3NDUtNDQzZS1iMTY1LWQxOTRlZWQ4OWU2Yi8wLzdCMDRDRTU4QTEzNzAyNDFF
OTNFRjAxRjU5N0REMThBMDM5RDYxM0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnYcYwDQYJKoZIhvcNAQELBQADggEBABovq0xCLwWoty6mTnR/+CxB60qlmXaY
/B9EyvogEEDW6JWhjvV2UR5A5QFKuM+/eIntOhUEv88U8DlB8+CUqUklxUKCz92r
I/+uJILEKtPC8KVLG1txobon6Ctx6xvdjYeWMUq2hPrp8jdqVjhW+V77vNsXpZHN
97s+tbCPiCSxwqYJ/V0KwlVUsawuqgz6olGLlK97W7b/WpaKF0TeR0ec1N6eIRrO
ARh7CvgzuUBoOjFaWiuFSoEvdt3MERNCbxZWoYoPxo8jsquF8M+AXcTOzQtxFI1r
/wjnmXp/xDQb1cwhGoPqcHInhjKd7XS06kup8sN0+rH3FY/DdM94410=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:26 2026 by rpki-client