This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer File: 8E87AB0332210D864175F7A371230D7C6099AE30.cer (raw, json) Hash identifier: cJBMwwUPtkBWBeqk0Yr7jHHwLGGxKQtHzL0pqt48ZCo= Subject key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11E0C83AE95EB25D906E1D7B38753176CD016B1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft caRepository: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 Jan 2026 00:16:34 +0000 Certificate not after: Wed 20 Jan 2027 00:21:34 +0000 Subordinate resources: IP: 103.178.42.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e0:c8:3a:e9:5e:b2:5d:90:6e:1d:7b:38:75:31:76:cd:01:6b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 21 00:16:34 2026 GMT Not After : Jan 20 00:21:34 2027 GMT Subject: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:af:9c:36:25:04:59:09:01:ab:11:2d:38: ba:29:c8:79:9e:dc:e9:b0:1f:b9:e9:48:bd:58:8e: 26:4d:d1:a3:2c:e0:99:54:19:72:7d:1b:e9:e6:c9: 33:22:d1:19:65:c6:be:72:d2:7d:ca:8d:1d:08:75: 38:0d:66:c7:33:51:d5:b8:ce:d3:43:d0:d8:6e:14: 0f:d8:9a:7e:eb:dc:ff:a2:d7:0a:f5:2c:58:45:2f: 2c:61:03:b0:c0:85:7b:02:b1:8a:42:51:6c:41:62: f1:35:fd:0a:6c:b9:5f:a9:37:aa:e9:b0:15:5e:13: fa:0d:f6:be:ed:d6:30:da:a5:e6:cd:41:3c:7d:f4: 15:e9:d7:77:3d:4e:15:09:a5:2d:08:dd:27:1a:01: 76:49:35:b5:3e:02:9e:40:d6:be:45:6a:96:26:8f: ee:b9:57:66:e0:69:da:51:93:8c:a4:a4:74:d6:af: b5:cb:86:7e:93:e5:04:11:da:ee:ab:47:95:06:85: 0d:85:19:53:63:26:1f:61:e1:ea:5b:35:4a:eb:93: e8:30:53:54:fb:e6:66:b2:fc:9d:32:45:dc:6e:b9: 0f:de:59:b0:21:b6:cc:0a:0f:5b:b4:1e:33:96:eb: df:7e:51:d0:d2:72:68:c0:60:16:2e:9b:b1:0a:1d: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.42.0/23 Signature Algorithm: sha256WithRSAEncryption 73:7e:90:82:91:ce:e7:4a:0a:23:88:b1:3b:8f:90:7a:f2:1b: 09:f4:83:dd:c6:83:0f:93:8c:94:7c:55:55:bb:ce:30:39:9f: f4:36:d9:09:16:44:1e:11:74:7f:27:6f:ec:97:8e:9b:92:68: 5d:1f:82:dc:0d:0f:30:23:5c:44:c4:8a:64:c1:d4:28:1c:97: 69:7b:54:44:ee:66:98:4e:dc:0c:c7:76:00:70:e9:92:aa:6a: c5:28:b8:7c:41:a9:e4:ee:74:8c:0d:18:c2:ee:ef:31:31:45: 88:0b:43:ba:a6:86:e7:c0:88:d7:53:4f:58:19:e0:d9:48:33: a9:76:f0:c3:fe:77:73:f1:17:9e:b6:1d:4f:de:47:fb:69:91: e9:ab:3a:ae:6d:44:af:82:8d:1b:e4:d7:04:7f:c9:6e:86:dd: 40:fa:69:be:9f:b6:5d:0b:63:6d:71:72:bf:27:03:f5:e3:05: a9:48:88:6a:2e:6e:51:59:6c:83:97:9a:aa:e2:f4:9f:41:6d: 2f:b2:c6:6d:b3:cf:59:77:10:d5:e2:64:8b:f8:82:d0:54:e2: be:17:36:05:55:d3:e5:ee:c6:c2:67:7f:c8:75:21:f4:97:6d: 7f:02:6b:ab:73:fc:20:2e:c2:35:06:41:55:ca:72:db:6f:0c: cb:aa:bd:6d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEeDIOulesl2Qbh17OHUxds0Bax8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMTAwMTYzNFoX DTI3MDEyMDAwMjEzNFowMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVG N0EzNzEyMzBEN0M2MDk5QUUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBer5w2JQRZCQGrES04uinIeZ7c6bAfuelIvViOJk3RoyzgmVQZcn0b6ebJ MyLRGWXGvnLSfcqNHQh1OA1mxzNR1bjO00PQ2G4UD9iafuvc/6LXCvUsWEUvLGED sMCFewKxikJRbEFi8TX9Cmy5X6k3qumwFV4T+g32vu3WMNql5s1BPH30FenXdz1O FQmlLQjdJxoBdkk1tT4CnkDWvkVqliaP7rlXZuBp2lGTjKSkdNavtcuGfpPlBBHa 7qtHlQaFDYUZU2MmH2Hh6ls1SuuT6DBTVPvmZrL8nTJF3G65D95ZsCG2zAoPW7Qe M5br335R0NJyaMBgFi6bsQodNnMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI6HqwMyIQ2GQXX3o3EjDXxgma4wMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1MDRlNGM3 LTdhMmQtNGQ2Ni04ZmI0LTIwNTU2NTc4N2YyNC8wLzhFODdBQjAzMzIyMTBEODY0 MTc1RjdBMzcxMjMwRDdDNjA5OUFFMzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsiowDQYJKoZIhvcNAQELBQADggEBAHN+kIKRzudKCiOIsTuPkHryGwn0g93G gw+TjJR8VVW7zjA5n/Q22QkWRB4RdH8nb+yXjpuSaF0fgtwNDzAjXETEimTB1Cgc l2l7VETuZphO3AzHdgBw6ZKqasUouHxBqeTudIwNGMLu7zExRYgLQ7qmhufAiNdT T1gZ4NlIM6l28MP+d3PxF562HU/eR/tpkemrOq5tRK+CjRvk1wR/yW6G3UD6ab6f tl0LY21xcr8nA/XjBalIiGoublFZbIOXmqri9J9BbS+yxm2zz1l3ENXiZIv4gtBU 4r4XNgVV0+XuxsJnf8h1IfSXbX8Ca6tz/CAuwjUGQVXKcttvDMuqvW0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:12:39 2026 by rpki-client