This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer
File:                     9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer (raw, json)
Hash identifier:          MTuNsO0/dlGscHT6lfA0PCAAhaSuA8kmPWu+eO1fMU0=
Subject key identifier:   93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       282E826387569BF7FC11ACA2949EE19CBCBEC836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jan 2026 14:16:35 +0000
Certificate not after:    Thu 31 Dec 2026 14:21:35 +0000
Subordinate resources:    IP: 103.155.190.0/23
                          IP: 2406:7540::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:82:63:87:56:9b:f7:fc:11:ac:a2:94:9e:e1:9c:bc:be:c8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  1 14:16:35 2026 GMT
            Not After : Dec 31 14:21:35 2026 GMT
        Subject: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:36:04:2b:23:20:f8:f9:2a:87:a1:b4:a1:
                    fa:7a:7e:0b:32:7f:d1:86:68:24:5b:89:b6:b2:63:
                    42:65:5e:f4:13:8e:34:7f:9b:bf:be:72:f9:30:aa:
                    ea:9b:44:0c:12:d7:0e:e7:d3:df:7c:2e:cc:6e:3b:
                    6f:40:77:f6:42:09:e1:05:ca:9d:cd:62:d5:af:f5:
                    b1:a2:af:c2:7a:77:0c:89:91:12:e6:a9:bf:40:7a:
                    99:d0:a2:6e:3d:42:d0:4c:79:a7:8b:8d:f6:b3:1f:
                    c1:e0:af:f8:5d:35:f0:fd:f3:7d:76:a8:d2:f7:72:
                    a2:c7:77:a7:32:a0:6c:58:69:22:da:86:ab:49:f6:
                    fb:6c:df:57:c4:10:2a:f2:0f:ef:65:30:13:e3:68:
                    2a:6a:98:ef:07:a8:ca:f1:51:bc:ba:fa:25:99:1f:
                    f2:35:13:67:88:a0:39:e3:2d:f7:35:76:f3:2f:df:
                    fb:10:fd:96:21:c7:65:15:e3:fe:59:78:1b:20:1b:
                    39:05:31:05:dc:12:f8:5f:05:35:78:1a:06:3a:0d:
                    85:25:d1:45:35:1a:a8:b4:84:3c:c5:8a:11:fb:cb:
                    ca:4d:5c:6c:41:3b:d3:c6:3e:da:a6:de:cf:14:0d:
                    05:50:c4:85:8e:b3:84:37:44:8f:cb:f9:e2:af:ec:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.190.0/23
                IPv6:
                  2406:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:9a:3a:3f:8b:9f:50:3d:c0:88:25:98:1d:7b:61:a0:ac:
         29:ab:eb:68:f6:74:d2:06:fe:63:71:c9:f4:fd:ab:fb:13:d3:
         60:3c:5a:2c:b9:db:94:4f:fb:99:b1:a5:8c:5b:e2:b3:58:d8:
         50:b7:94:21:b4:81:7a:bb:98:7a:c3:d0:c3:ed:47:97:a7:72:
         d0:92:dc:ae:43:c1:a4:fc:d1:74:22:39:b8:0b:8c:d1:86:8f:
         50:1b:68:26:0d:4a:05:15:2e:84:ec:87:7a:41:5d:8d:1e:c2:
         8b:aa:5b:3f:e1:05:69:ed:96:85:b0:d5:df:d6:b2:00:d3:95:
         0e:5c:b8:60:cc:84:ec:68:40:bd:f6:5e:8c:15:4e:35:fd:cb:
         a4:a5:79:3d:b2:d3:3f:8a:fc:5c:73:a0:a7:49:8d:d0:5a:51:
         29:74:9e:78:59:ca:c4:d6:e4:28:c8:a1:66:36:83:b2:7a:dc:
         79:8c:bc:7f:05:64:b3:39:dd:90:31:01:88:b3:8f:e4:84:0a:
         57:7b:c2:f4:ed:2f:01:33:5b:09:3b:8a:d6:a9:9d:3b:02:c6:
         8d:1c:f0:cd:24:03:84:bd:fd:9b:9c:34:1f:a1:30:c8:e5:cc:
         ac:26:46:00:56:bb:fc:f3:71:94:01:45:40:8d:12:ac:95:ef:
         dc:97:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:05 2026 by rpki-client