This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer
File: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer (raw, json)
Hash identifier: MTuNsO0/dlGscHT6lfA0PCAAhaSuA8kmPWu+eO1fMU0=
Subject key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 282E826387569BF7FC11ACA2949EE19CBCBEC836
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft
caRepository: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 01 Jan 2026 14:16:35 +0000
Certificate not after: Thu 31 Dec 2026 14:21:35 +0000
Subordinate resources: IP: 103.155.190.0/23
IP: 2406:7540::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2e:82:63:87:56:9b:f7:fc:11:ac:a2:94:9e:e1:9c:bc:be:c8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 1 14:16:35 2026 GMT
Not After : Dec 31 14:21:35 2026 GMT
Subject: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:36:04:2b:23:20:f8:f9:2a:87:a1:b4:a1:
fa:7a:7e:0b:32:7f:d1:86:68:24:5b:89:b6:b2:63:
42:65:5e:f4:13:8e:34:7f:9b:bf:be:72:f9:30:aa:
ea:9b:44:0c:12:d7:0e:e7:d3:df:7c:2e:cc:6e:3b:
6f:40:77:f6:42:09:e1:05:ca:9d:cd:62:d5:af:f5:
b1:a2:af:c2:7a:77:0c:89:91:12:e6:a9:bf:40:7a:
99:d0:a2:6e:3d:42:d0:4c:79:a7:8b:8d:f6:b3:1f:
c1:e0:af:f8:5d:35:f0:fd:f3:7d:76:a8:d2:f7:72:
a2:c7:77:a7:32:a0:6c:58:69:22:da:86:ab:49:f6:
fb:6c:df:57:c4:10:2a:f2:0f:ef:65:30:13:e3:68:
2a:6a:98:ef:07:a8:ca:f1:51:bc:ba:fa:25:99:1f:
f2:35:13:67:88:a0:39:e3:2d:f7:35:76:f3:2f:df:
fb:10:fd:96:21:c7:65:15:e3:fe:59:78:1b:20:1b:
39:05:31:05:dc:12:f8:5f:05:35:78:1a:06:3a:0d:
85:25:d1:45:35:1a:a8:b4:84:3c:c5:8a:11:fb:cb:
ca:4d:5c:6c:41:3b:d3:c6:3e:da:a6:de:cf:14:0d:
05:50:c4:85:8e:b3:84:37:44:8f:cb:f9:e2:af:ec:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.190.0/23
IPv6:
2406:7540::/32
Signature Algorithm: sha256WithRSAEncryption
18:8e:9a:3a:3f:8b:9f:50:3d:c0:88:25:98:1d:7b:61:a0:ac:
29:ab:eb:68:f6:74:d2:06:fe:63:71:c9:f4:fd:ab:fb:13:d3:
60:3c:5a:2c:b9:db:94:4f:fb:99:b1:a5:8c:5b:e2:b3:58:d8:
50:b7:94:21:b4:81:7a:bb:98:7a:c3:d0:c3:ed:47:97:a7:72:
d0:92:dc:ae:43:c1:a4:fc:d1:74:22:39:b8:0b:8c:d1:86:8f:
50:1b:68:26:0d:4a:05:15:2e:84:ec:87:7a:41:5d:8d:1e:c2:
8b:aa:5b:3f:e1:05:69:ed:96:85:b0:d5:df:d6:b2:00:d3:95:
0e:5c:b8:60:cc:84:ec:68:40:bd:f6:5e:8c:15:4e:35:fd:cb:
a4:a5:79:3d:b2:d3:3f:8a:fc:5c:73:a0:a7:49:8d:d0:5a:51:
29:74:9e:78:59:ca:c4:d6:e4:28:c8:a1:66:36:83:b2:7a:dc:
79:8c:bc:7f:05:64:b3:39:dd:90:31:01:88:b3:8f:e4:84:0a:
57:7b:c2:f4:ed:2f:01:33:5b:09:3b:8a:d6:a9:9d:3b:02:c6:
8d:1c:f0:cd:24:03:84:bd:fd:9b:9c:34:1f:a1:30:c8:e5:cc:
ac:26:46:00:56:bb:fc:f3:71:94:01:45:40:8d:12:ac:95:ef:
dc:97:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:05 2026 by rpki-client