This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer (raw, json) Hash identifier: NGBfEz1xcjxuT+nkiX4hJq1vRfDNwouVVXSZSABInr0= Subject key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2F159AA25B6AA1B5479D67B66587F76D481E120A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft caRepository: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 15 Jan 2026 02:09:55 +0000 Certificate not after: Thu 14 Jan 2027 02:14:55 +0000 Subordinate resources: IP: 103.130.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:15:9a:a2:5b:6a:a1:b5:47:9d:67:b6:65:87:f7:6d:48:1e:12:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 15 02:09:55 2026 GMT Not After : Jan 14 02:14:55 2027 GMT Subject: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:28:f3:83:ef:4e:43:a3:cf:bb:1c:a3:e6: f6:ce:bb:c5:e0:03:38:98:53:54:de:f5:a5:4f:12: 21:35:83:2c:1a:0b:fc:b1:6c:1c:5b:be:8f:44:a6: 14:b4:4b:a0:41:a7:c6:79:26:13:b5:7b:87:fb:d2: 37:af:89:7f:f7:b8:9c:4a:ba:8d:02:f5:d5:c0:a6: ad:62:61:1e:a8:8e:b3:db:54:b2:26:f5:82:83:fe: 81:49:3b:29:eb:51:af:44:f5:04:4b:a7:32:c0:52: 4b:9e:3d:95:86:a2:ef:fe:04:16:a2:23:b3:fc:3e: b9:1c:18:dc:4d:4e:81:fa:db:39:d8:3c:72:64:25: 51:81:13:47:d0:07:bf:4a:d5:94:30:2a:9f:ed:4d: 48:79:4e:6c:29:70:0a:5a:40:95:b9:be:fb:82:4f: 25:83:63:42:f9:fb:9b:55:98:34:04:2e:23:8b:c3: 92:fc:ed:7b:9a:ac:5f:4d:7a:db:79:fb:59:d2:80: 30:76:f3:7e:36:0a:40:18:77:a4:64:12:59:c9:fe: 35:43:a8:6b:bf:72:aa:8c:8e:bd:44:ab:9b:bb:ad: d0:02:f7:22:15:8f:d4:29:d7:67:eb:df:be:58:92: 00:d0:97:08:d1:2f:dd:f1:fa:f4:e5:0d:68:db:c7: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.82.0/23 Signature Algorithm: sha256WithRSAEncryption 84:c8:24:52:f9:63:b8:b2:0b:3f:a4:db:81:43:fd:9e:54:8e: 04:6c:74:55:ee:17:de:ba:79:e2:f3:03:13:9a:1f:07:10:63: ca:e4:32:9b:5b:d6:2b:91:69:a8:f4:85:43:61:11:04:3b:be: c9:3b:f5:09:44:ca:04:a4:46:cf:a2:2b:45:7a:aa:ed:67:75: 2e:61:d2:8b:8a:4d:fb:96:ac:06:b5:e9:27:30:f4:34:34:62: 3a:79:dd:20:0b:51:91:2c:0e:d9:86:65:e1:be:12:16:a2:d8: b5:e9:62:6c:7c:65:f3:6d:85:fb:04:3a:a1:77:61:96:3f:ae: ff:84:76:ba:e9:d6:0f:08:f8:3b:04:20:04:16:3a:00:91:76: f8:c9:1c:96:da:a4:3d:b1:fe:3f:38:47:a5:75:e9:ff:1f:b0: 76:d4:6e:79:51:b7:71:77:c6:b1:af:8f:de:e5:c4:56:0f:1b: c5:60:57:76:96:58:bd:bf:7b:b3:e6:88:6f:01:78:b1:44:ea: ce:83:7a:33:66:4f:4d:f8:eb:0e:4f:a9:5d:12:b7:ab:cd:8e: a4:59:24:ea:90:7d:82:60:d9:0a:f7:c0:70:f1:11:ff:2f:41: c9:b8:ed:20:81:b3:47:30:2d:12:91:a4:ef:c2:90:d8:7e:39: 99:91:89:0e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULxWaoltqobVHnWe2ZYf3bUgeEgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNTAyMDk1NVoX DTI3MDExNDAyMTQ1NVowMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4 MkEyMUIyQkJCOUY0RTRBMkMyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMpIKPOD705Do8+7HKPm9s67xeADOJhTVN71pU8SITWDLBoL/LFsHFu+j0Sm FLRLoEGnxnkmE7V7h/vSN6+Jf/e4nEq6jQL11cCmrWJhHqiOs9tUsib1goP+gUk7 KetRr0T1BEunMsBSS549lYai7/4EFqIjs/w+uRwY3E1OgfrbOdg8cmQlUYETR9AH v0rVlDAqn+1NSHlObClwClpAlbm++4JPJYNjQvn7m1WYNAQuI4vDkvzte5qsX016 23n7WdKAMHbzfjYKQBh3pGQSWcn+NUOoa79yqoyOvUSrm7ut0AL3IhWP1CnXZ+vf vliSANCXCNEv3fH69OUNaNvH55cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFImJ0EMUU1VvItiCohsru59OSiwkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRhODcwNjRi LTVmMjctNDI3MC05MGU0LTk5ZjQzYWU4NGRiNy8wLzg5ODlEMDQzMTQ1MzU1NkYy MkQ4ODJBMjFCMkJCQjlGNEU0QTJDMjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnglIwDQYJKoZIhvcNAQELBQADggEBAITIJFL5Y7iyCz+k24FD/Z5UjgRsdFXu F966eeLzAxOaHwcQY8rkMptb1iuRaaj0hUNhEQQ7vsk79QlEygSkRs+iK0V6qu1n dS5h0ouKTfuWrAa16Scw9DQ0Yjp53SALUZEsDtmGZeG+Ehai2LXpYmx8ZfNthfsE OqF3YZY/rv+Edrrp1g8I+DsEIAQWOgCRdvjJHJbapD2x/j84R6V16f8fsHbUbnlR t3F3xrGvj97lxFYPG8VgV3aWWL2/e7PmiG8BeLFE6s6DejNmT0346w5PqV0St6vN jqRZJOqQfYJg2Qr3wHDxEf8vQcm47SCBs0cwLRKRpO/CkNh+OZmRiQ4= -----END CERTIFICATE-----Generated at Sun Jan 25 17:06:12 2026 by rpki-client