This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer (raw, json) Hash identifier: 9Ql+4SwLPiJhNlrPytx9aiMAAbR6WfcwFnaUHyVatS4= Subject key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 36B20E836874EDD12C78A3E73F6574E7D41ABE70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft caRepository: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 14 Jan 2026 04:42:12 +0000 Certificate not after: Wed 13 Jan 2027 04:47:12 +0000 Subordinate resources: IP: 103.186.194.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b2:0e:83:68:74:ed:d1:2c:78:a3:e7:3f:65:74:e7:d4:1a:be:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 14 04:42:12 2026 GMT Not After : Jan 13 04:47:12 2027 GMT Subject: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:9e:55:fa:54:cd:fc:3b:2b:61:9f:84:9c: 21:58:f1:53:c1:00:8e:b6:f3:16:82:54:5a:7e:4a: 1c:57:69:23:27:e8:e7:d5:69:07:d8:cf:fd:34:7f: 66:5b:90:52:cf:b6:5b:2f:10:26:d7:59:9c:31:31: e3:51:ad:98:16:1a:3d:9c:b0:a4:ab:69:e4:6d:ed: 65:05:02:17:3a:1e:29:54:05:4b:c6:4f:66:05:68: 22:c1:46:a1:28:c9:68:22:7a:42:64:89:eb:21:a4: 96:1d:48:86:b1:7c:f1:02:26:67:50:f9:88:a0:a5: a1:dc:dc:52:27:b2:9f:74:10:1f:2a:fd:a5:bf:f2: af:53:95:04:06:5d:2f:c5:ba:c3:21:85:af:91:74: c5:02:d7:b9:ef:bb:f2:ed:24:71:28:1c:3c:62:be: d7:fb:ca:cc:39:67:bd:29:7d:39:8c:a6:44:34:51: 33:c6:71:c3:f8:99:57:1c:8a:3d:96:d3:5b:62:45: 31:16:b3:e6:9a:49:dd:6d:5a:7d:e4:ff:f2:a3:bc: 05:21:83:30:e9:0b:e2:87:d7:f6:c3:17:c9:50:ae: f6:45:71:f8:fe:e6:bf:71:4b:2f:23:bb:e2:73:e3: 8f:46:62:5c:74:d0:74:52:58:5c:f9:d9:61:22:bd: 01:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.194.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:49:77:27:36:20:73:2d:8d:97:4c:88:4d:e3:9f:ca:56:91: b7:eb:63:98:ec:47:cd:53:65:d8:9d:80:c7:ad:7d:1c:a5:bc: 04:14:ac:75:10:02:c3:6a:b2:ea:48:90:55:46:69:32:b5:0b: 99:da:d7:b9:f7:9d:4b:4f:56:99:eb:0b:f8:29:0b:33:ce:90: 65:56:7c:ee:1c:d1:db:39:15:c9:b0:12:53:ca:cc:74:6b:d7: df:cd:1c:0e:20:aa:a9:5e:49:9f:27:79:4b:19:f7:ea:30:6d: af:8c:8e:d0:ae:64:5f:c5:1a:7e:49:86:4e:3f:18:75:50:00: 41:eb:81:b5:c2:77:ca:06:ad:32:dc:b3:27:6c:41:7c:07:21: 01:2e:27:c2:09:f7:bd:0d:27:36:01:54:78:e6:f0:af:b8:cf: 74:39:ca:dc:2c:c9:a1:9a:8a:76:83:e4:08:f7:f0:f7:67:88: ce:35:f8:70:b4:26:41:c4:db:ac:6e:d2:d5:1a:51:ee:a4:4e: c3:fe:f4:3e:99:d2:c8:fa:10:f9:e8:6f:dd:f9:c3:49:29:ee: a2:27:1e:55:32:fe:0f:18:43:c1:5b:68:9d:91:b7:76:72:40: d8:55:19:07:75:81:f7:aa:de:15:d2:c3:10:5b:a8:4f:c3:8a: df:a3:4c:2e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNrIOg2h07dEseKPnP2V059QavnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNDA0NDIxMloX DTI3MDExMzA0NDcxMlowMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0 QkJBMDM0RDBGNjhBMDlBNUY1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM20nlX6VM38Oythn4ScIVjxU8EAjrbzFoJUWn5KHFdpIyfo59VpB9jP/TR/ ZluQUs+2Wy8QJtdZnDEx41GtmBYaPZywpKtp5G3tZQUCFzoeKVQFS8ZPZgVoIsFG oSjJaCJ6QmSJ6yGklh1IhrF88QImZ1D5iKClodzcUieyn3QQHyr9pb/yr1OVBAZd L8W6wyGFr5F0xQLXue+78u0kcSgcPGK+1/vKzDlnvSl9OYymRDRRM8Zxw/iZVxyK PZbTW2JFMRaz5ppJ3W1afeT/8qO8BSGDMOkL4ofX9sMXyVCu9kVx+P7mv3FLLyO7 4nPjj0ZiXHTQdFJYXPnZYSK9ASsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIz7In2h71HbIzZLugNND2igml9ZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyNTJlYWQz LWRjOGYtNGQ4Ni1hZmNmLWExNDBlNWI4NzUzMi8wLzhDRkIyMjdEQTFFRjUxREIy MzM2NEJCQTAzNEQwRjY4QTA5QTVGNTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnusIwDQYJKoZIhvcNAQELBQADggEBAE9Jdyc2IHMtjZdMiE3jn8pWkbfrY5js R81TZdidgMetfRylvAQUrHUQAsNqsupIkFVGaTK1C5na17n3nUtPVpnrC/gpCzPO kGVWfO4c0ds5FcmwElPKzHRr19/NHA4gqqleSZ8neUsZ9+owba+MjtCuZF/FGn5J hk4/GHVQAEHrgbXCd8oGrTLcsydsQXwHIQEuJ8IJ970NJzYBVHjm8K+4z3Q5ytws yaGainaD5Aj38PdniM41+HC0JkHE26xu0tUaUe6kTsP+9D6Z0sj6EPnob935w0kp 7qInHlUy/g8YQ8FbaJ2Rt3ZyQNhVGQd1gfeq3hXSwxBbqE/Dit+jTC4= -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:53 2026 by rpki-client