This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer (raw, json) Hash identifier: OUc5uxTbLRivcIWrZV2W8DCELWj0tI6fRaVczyVTZRs= Subject key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D2951152E29246E4B8C94126AA161A73AD5A0ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft caRepository: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 19:23:45 +0000 Certificate not after: Thu 05 Nov 2026 19:28:45 +0000 Subordinate resources: IP: 103.164.12.0/23 IP: 2400:4be0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:29:51:15:2e:29:24:6e:4b:8c:94:12:6a:a1:61:a7:3a:d5:a0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 6 19:23:45 2025 GMT Not After : Nov 5 19:28:45 2026 GMT Subject: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:9c:ee:f9:04:0a:ed:3a:94:7a:c5:9d:e1: 28:e7:64:a6:96:95:24:c0:44:bf:6c:b1:6f:6b:3e: 03:0d:84:a3:d6:30:e5:7a:08:fa:4c:d8:4c:72:a5: 1c:ba:5b:26:5e:38:e6:3b:cb:93:14:d9:8c:be:60: bf:b3:de:82:a7:d1:6c:cd:ee:74:0d:79:c9:be:4d: 9f:00:c3:77:13:62:5a:54:b8:53:46:0d:bb:c7:a4: 98:53:29:2d:11:b5:7e:01:fe:fd:2b:75:07:01:86: c1:00:55:df:a9:4c:3b:17:fb:a1:2f:56:01:9d:8b: fc:7b:7d:d3:6e:74:20:da:27:d7:a7:bd:61:2e:4d: d9:68:bc:7f:54:33:a5:76:2a:9f:6a:19:20:c7:a3: 35:5d:45:81:f4:44:21:f5:97:93:c1:d8:99:26:02: 72:57:30:5c:b0:08:b3:03:f8:c6:f5:07:98:04:b6: 00:2d:43:27:5c:92:94:70:4b:6a:9c:78:e6:1a:d0: b3:0f:cf:d0:dc:a5:4b:c5:5f:d9:6a:34:5a:2f:d7: db:54:3d:00:5c:35:5d:92:1b:ce:7e:29:ae:93:88: 27:ae:a2:16:41:76:20:a5:d6:11:c1:19:4b:6e:b9: ff:1b:61:28:13:5b:00:59:27:a9:83:89:06:87:0d: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.12.0/23 IPv6: 2400:4be0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:34:ec:9c:f4:7b:2d:17:98:b9:64:a0:e0:24:2b:62:fb:2b: 9d:33:16:26:29:6f:72:67:f8:34:ff:3d:91:e9:11:a4:00:76: 3d:be:fc:74:52:71:48:c0:42:3d:79:d5:b0:1e:a3:1b:e9:f9: 49:50:ba:4d:0a:ac:34:ac:b6:3a:5f:18:c6:dc:d0:56:aa:b7: 72:a8:c0:19:49:62:25:20:f8:cb:33:db:c1:0c:b5:7e:e7:07: cc:58:e5:be:8d:2a:8b:f1:71:62:0a:f9:f1:ad:79:54:6f:ec: ed:d5:99:bb:fb:8d:67:95:19:bc:a7:b3:e8:2a:b4:c9:8b:58: 79:a0:6b:87:5a:af:9d:9e:4c:a6:38:02:2e:09:b2:6d:b6:a8: c8:5e:51:81:c3:ba:a5:39:51:06:80:19:16:cf:95:f8:a1:bd: f3:7d:a8:a8:2f:82:06:c7:88:f4:ae:0f:3b:20:d0:bb:d3:15: dc:a8:46:f1:3e:f6:39:cd:e3:27:b6:b8:20:86:68:72:2c:35: 72:69:2f:4e:3f:85:4e:3f:8a:01:c4:19:1b:c1:8b:26:be:87: 9c:71:69:3e:fe:b9:7a:34:46:67:27:1d:4f:7b:4f:71:9c:06: 31:a3:a4:15:75:1c:94:24:cc:fe:e6:cb:0f:52:75:fa:28:f6: aa:c0:21:40 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUTSlRFS4pJG5LjJQSaqFhpzrVoO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNjE5MjM0NVoX DTI2MTEwNTE5Mjg0NVowMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFG OEZEODFENTMxMzdFRjUyRTc4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcvnO75BArtOpR6xZ3hKOdkppaVJMBEv2yxb2s+Aw2Eo9Yw5XoI+kzYTHKl HLpbJl445jvLkxTZjL5gv7PegqfRbM3udA15yb5NnwDDdxNiWlS4U0YNu8ekmFMp LRG1fgH+/St1BwGGwQBV36lMOxf7oS9WAZ2L/Ht90250INon16e9YS5N2Wi8f1Qz pXYqn2oZIMejNV1FgfREIfWXk8HYmSYCclcwXLAIswP4xvUHmAS2AC1DJ1ySlHBL apx45hrQsw/P0NylS8Vf2Wo0Wi/X21Q9AFw1XZIbzn4prpOIJ66iFkF2IKXWEcEZ S265/xthKBNbAFknqYOJBocNSx8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJF6nSS/Hq1vpKH4/YHVMTfvUueEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xYmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGZmODE5 LTJiYWQtNDgzZC05ZmE4LWI2ZWJjNDg0MDMxYS8wLzkxN0E5RDI0QkYxRUFENkZB NEExRjhGRDgxRDUzMTM3RUY1MkU3ODQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnpAwwDQQCAAIwBwMFACQAS+AwDQYJKoZIhvcNAQELBQADggEBAH407Jz0ey0X mLlkoOAkK2L7K50zFiYpb3Jn+DT/PZHpEaQAdj2+/HRScUjAQj151bAeoxvp+UlQ uk0KrDSstjpfGMbc0Faqt3KowBlJYiUg+Msz28EMtX7nB8xY5b6NKovxcWIK+fGt eVRv7O3Vmbv7jWeVGbyns+gqtMmLWHmga4dar52eTKY4Ai4Jsm22qMheUYHDuqU5 UQaAGRbPlfihvfN9qKgvggbHiPSuDzsg0LvTFdyoRvE+9jnN4ye2uCCGaHIsNXJp L04/hU4/igHEGRvBiya+h5xxaT7+uXo0RmcnHU97T3GcBjGjpBV1HJQkzP7myw9S dfoo9qrAIUA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:04 2025 by rpki-client