This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
File:                     86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer (raw, json)
Hash identifier:          69DdhJ6fC+u2/YCo/mB0Q7FX01+O4mvjNO6Tm7hBWg4=
Subject key identifier:   86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       765C897F536FC4092850C9E19FBF26430A9674DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Nov 2025 12:34:23 +0000
Certificate not after:    Tue 10 Nov 2026 12:39:23 +0000
Subordinate resources:    IP: 103.120.76.0/24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5c:89:7f:53:6f:c4:09:28:50:c9:e1:9f:bf:26:43:0a:96:74:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 12:34:23 2025 GMT
            Not After : Nov 10 12:39:23 2026 GMT
        Subject: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:35:44:84:a8:0f:ca:a9:81:b9:9f:41:bc:
                    70:2e:fb:a9:72:83:9b:b1:73:f6:40:89:09:eb:4d:
                    05:b6:ce:70:5b:e8:cb:06:50:3f:4c:f1:99:1e:07:
                    47:5f:8f:90:d1:d4:bb:99:41:8a:59:ac:a9:17:57:
                    bd:da:4f:bf:4c:11:40:be:aa:b8:a8:8b:e9:7f:10:
                    dd:fe:cc:8d:36:f1:7f:8a:84:d7:01:f7:aa:1d:1a:
                    0a:dc:df:b3:be:f7:02:62:2e:b2:d0:f3:89:04:45:
                    07:26:03:53:67:85:8e:31:68:86:b6:fe:15:92:b8:
                    02:d3:6e:0b:b1:cc:c9:09:8f:f0:73:9a:75:13:82:
                    d9:02:08:9c:71:a3:57:28:6e:fa:0d:14:80:be:e6:
                    45:7f:16:15:4c:de:e9:71:31:19:ed:47:0d:fd:4a:
                    d1:fa:55:23:8b:5f:20:b0:4e:f6:94:02:b9:40:3a:
                    79:56:6c:16:86:48:33:5f:e3:3c:01:ad:26:d5:32:
                    8f:a3:f2:bc:63:e8:16:bd:e0:a6:8b:06:50:78:7c:
                    ce:cd:81:4a:d7:11:41:e6:02:f2:4f:cc:60:49:b0:
                    30:10:e5:8d:63:f4:b3:e4:6d:59:08:d5:b5:46:d3:
                    e0:99:ac:23:e6:03:ef:53:0f:aa:35:d2:76:d3:3d:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:6d:38:d1:6a:4b:00:26:2b:6f:42:d3:c8:31:13:8a:30:
         db:c3:f1:aa:5f:7c:5b:10:0a:ba:90:82:cd:a6:8a:fd:00:5a:
         9f:4e:af:81:de:2d:66:ba:ac:b4:2d:ee:e1:18:ef:3a:d0:5a:
         72:3e:5a:a3:a0:88:b2:8d:76:ed:e7:7f:12:c7:bd:ed:48:ba:
         ff:ad:32:37:e8:3c:13:90:4a:d8:83:0e:8a:89:73:c0:5b:ca:
         61:b5:03:83:f3:d8:db:6a:3a:39:c0:3b:76:68:58:f2:da:f8:
         3f:a9:36:c6:76:86:d3:d9:83:1e:d4:b0:e1:70:c2:83:d9:10:
         ea:f5:2c:6f:47:00:75:56:31:5a:e1:fd:61:d7:63:53:c3:b5:
         4c:ca:37:76:72:9b:2e:a5:3b:10:c6:94:f1:80:11:6d:bf:e1:
         5a:c0:95:76:80:23:cf:52:7c:c3:a6:55:cf:25:7b:24:e7:db:
         9e:8f:16:0f:4a:c1:3e:53:09:ea:26:33:4e:f7:38:46:42:fb:
         57:14:a7:de:29:24:10:5e:93:6b:9a:52:89:e8:d6:da:f5:6a:
         7d:89:a8:83:2e:26:10:31:23:d2:77:24:c3:b6:1c:4c:bf:52:
         35:9f:38:b5:32:65:70:c0:de:aa:e5:8a:a5:2a:23:8c:86:6c:
         72:dc:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----