This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer (raw, json)
Hash identifier: vqPIIc83W3lbvUb/kVPfE5X8YSswIgIu3Qvki5rnteI=
Subject key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7F9BA5FC010977707E509D62FFE8F77BA780AD70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
caRepository: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 08:28:43 +0000
Certificate not after: Tue 19 Jan 2027 08:33:43 +0000
Subordinate resources: IP: 103.122.8.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9b:a5:fc:01:09:77:70:7e:50:9d:62:ff:e8:f7:7b:a7:80:ad:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 20 08:28:43 2026 GMT
Not After : Jan 19 08:33:43 2027 GMT
Subject: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:0c:05:71:01:66:7b:54:ec:a5:f6:27:ef:
51:a6:2f:2a:ab:1d:60:99:d4:65:1e:cb:61:a1:e6:
b9:39:cb:d8:7b:65:85:c3:01:aa:ee:5d:12:4f:82:
e0:d7:ee:3b:5b:d3:ce:3d:d8:1a:68:d5:29:0b:df:
f7:07:a7:68:b2:e8:b2:d6:c7:c4:88:0e:b2:dc:3e:
07:2c:64:8f:93:94:35:71:06:dc:11:b1:03:49:67:
0c:b9:bd:a9:9f:13:1e:22:75:50:64:e4:54:c4:40:
df:68:47:8c:a1:dc:af:37:83:3c:c5:9c:a2:9d:e6:
a0:21:72:27:1c:b5:23:55:da:b5:0f:c1:7e:74:16:
a7:bc:ee:6b:1e:44:1a:c9:6b:15:30:b9:7e:81:03:
e4:03:fa:2f:df:eb:af:7c:ff:4f:b9:af:bb:64:8a:
23:ec:08:ee:bb:4e:c1:0c:b2:b5:17:2d:b0:97:d9:
7e:2a:e0:8a:b3:b2:97:0f:24:6b:68:bd:b6:56:3b:
4a:52:91:c8:d9:a9:c0:23:98:81:f0:c3:b7:f9:9c:
95:f3:7a:ba:dd:c0:11:5a:63:ca:58:4f:90:22:c4:
04:00:b4:72:3e:f3:5a:4a:22:9f:af:07:f5:06:8f:
3c:1c:da:95:09:24:16:25:6a:0f:4f:89:74:f0:8b:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:f0:4a:92:6c:08:d7:6f:02:4c:d2:73:b4:16:7b:fa:72:b6:
70:c4:dc:c7:9b:c7:fd:35:c2:05:03:94:88:d8:86:02:28:60:
5b:af:1b:25:bb:06:cc:b3:41:64:fc:1b:c7:91:56:39:4f:99:
79:ad:88:9f:0f:bb:af:bd:fb:4f:9a:46:3f:bc:da:12:4d:dd:
8d:51:da:53:21:78:ec:2e:fe:27:42:38:a6:a3:2f:5c:e1:1f:
0b:96:66:80:7a:83:2d:d9:ae:4c:93:0a:da:0d:97:e5:38:99:
b9:34:e7:4e:74:6c:15:31:d9:e9:52:9c:e1:3b:f8:55:48:30:
6a:4a:72:86:be:da:a4:fa:a9:c9:9c:a1:06:e5:ca:91:96:83:
4d:61:6e:f9:a1:dd:ad:cb:f9:12:6a:f7:1b:8c:e1:cd:3d:cf:
bc:99:af:23:99:0f:5a:3e:86:7a:4d:55:b6:ec:c0:1c:5a:9d:
5f:b5:fa:04:b6:42:5b:1e:d0:f9:f1:d4:ab:f3:65:64:21:4e:
22:fc:d6:fa:66:80:b9:25:be:b2:9a:43:19:34:8f:ea:11:c9:
2e:37:31:77:c8:65:47:23:87:b8:25:fe:3e:17:e1:90:4e:e0:
ef:62:15:3f:97:53:73:9b:6f:36:12:86:9e:1a:10:05:bd:07:
ce:4b:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:03 2026 by rpki-client