This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
File: 9481EF5008E46F3618B42A0945A1522D5C041511.cer (raw, json)
Hash identifier: eKeEIjJ1L6oRLfUgSguDvzeQnvo27DmKlO+yh9SgmwI=
Subject key identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3DA2CE17770368C27758D68E59CE5DDD41F80110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
caRepository: rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 07 Nov 2025 07:58:36 +0000
Certificate not after: Fri 06 Nov 2026 08:03:36 +0000
Subordinate resources: IP: 103.59.160.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a2:ce:17:77:03:68:c2:77:58:d6:8e:59:ce:5d:dd:41:f8:01:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 7 07:58:36 2025 GMT
Not After : Nov 6 08:03:36 2026 GMT
Subject: CN=9481EF5008E46F3618B42A0945A1522D5C041511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:1c:4e:d1:1f:f3:7d:70:58:3d:48:51:10:
bd:20:89:67:fe:1f:85:58:b3:54:d3:f1:cd:a3:c4:
1e:05:ad:c1:d9:c3:5d:f9:ad:7c:1c:bf:47:9e:f0:
7b:4f:58:3d:5e:4f:f2:78:ca:f1:61:ef:56:bc:32:
8c:d5:b2:22:3c:0c:a1:2e:13:f7:b8:78:2d:e5:73:
49:d3:73:b9:7c:0f:59:23:bb:7a:33:d1:68:80:a4:
ab:08:37:fa:81:c7:b9:2a:91:27:1e:f5:36:f1:54:
60:5e:88:fb:e6:a3:17:92:38:ab:b2:da:92:81:0d:
af:4a:f5:52:fb:f1:d2:65:40:6f:f7:49:32:a8:04:
50:1f:b0:9b:7a:40:87:49:31:56:8b:73:33:31:40:
52:a3:86:90:fc:11:61:46:26:b7:9c:d3:5f:26:07:
db:ad:4f:5c:7c:c3:99:23:6b:02:a5:40:05:9c:67:
d2:d9:e1:dd:ee:c2:16:75:64:b5:1f:0a:39:3a:78:
f0:59:b9:61:c8:6e:80:3f:49:64:ae:57:c8:07:72:
48:a3:7a:4c:fd:a5:d3:ef:ae:b3:0f:1d:b8:d5:48:
a4:b9:46:0e:6a:3c:9a:44:6a:be:fc:7f:79:f6:63:
01:d9:8f:75:23:10:0c:f9:41:72:d2:25:86:8b:b4:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.59.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:04:02:d3:64:c9:53:f1:bd:79:07:52:e7:84:0e:6c:63:17:
e7:82:cc:ef:34:b1:89:c7:f0:49:80:aa:fd:3b:f1:13:ea:6c:
37:30:5b:fb:0f:62:9a:57:e9:48:87:42:19:e6:46:4e:de:a7:
23:ad:02:b5:d6:7a:3b:3a:4e:75:87:43:ba:ea:4c:d2:67:93:
8f:ac:b7:0b:05:6e:ae:07:15:2f:d2:37:99:b9:ec:91:2f:97:
18:74:c1:20:e1:59:87:56:9a:c3:9e:38:9f:fa:18:e9:cc:b4:
53:33:af:a8:2b:1d:58:7b:c8:84:ef:4b:11:f9:0f:a7:c0:86:
6e:fb:58:c0:76:79:42:2d:12:68:ca:37:09:c3:9c:8c:29:30:
0e:a0:3c:a1:3f:90:74:6b:76:ce:06:19:1f:db:ae:c3:09:1d:
84:53:91:32:83:a2:14:07:aa:4d:09:fb:da:b1:82:6b:80:8a:
e8:fc:5d:a5:0a:12:f3:52:12:89:4a:44:cf:91:e1:4f:7e:24:
83:f1:f6:da:09:ba:96:86:00:07:ec:0d:3f:f2:47:3f:d7:d1:
54:ec:0b:ba:0b:cb:8b:0b:b9:43:87:a1:f2:2c:e6:61:ee:07:
01:26:bf:26:4e:ba:bc:4a:6a:a7:86:87:f0:1d:03:f7:98:27:
48:bd:06:92
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUPaLOF3cDaMJ3WNaOWc5d3UH4ARAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNzA3NTgzNloX
DTI2MTEwNjA4MDMzNlowMzExMC8GA1UEAxMoOTQ4MUVGNTAwOEU0NkYzNjE4QjQy
QTA5NDVBMTUyMkQ1QzA0MTUxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKBSHE7RH/N9cFg9SFEQvSCJZ/4fhVizVNPxzaPEHgWtwdnDXfmtfBy/R57w
e09YPV5P8njK8WHvVrwyjNWyIjwMoS4T97h4LeVzSdNzuXwPWSO7ejPRaICkqwg3
+oHHuSqRJx71NvFUYF6I++ajF5I4q7LakoENr0r1Uvvx0mVAb/dJMqgEUB+wm3pA
h0kxVotzMzFAUqOGkPwRYUYmt5zTXyYH261PXHzDmSNrAqVABZxn0tnh3e7CFnVk
tR8KOTp48Fm5YchugD9JZK5XyAdySKN6TP2l0++usw8duNVIpLlGDmo8mkRqvvx/
efZjAdmPdSMQDPlBctIlhou0mTMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJSB71AI5G82GLQqCUWhUi1cBBURMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9hZGJkM2E1MC04MzJlLTQxMjctOTRlMS00OGFjZTE2NGNmMjYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkYmQzYTUw
LTgzMmUtNDEyNy05NGUxLTQ4YWNlMTY0Y2YyNi8wLzk0ODFFRjUwMDhFNDZGMzYx
OEI0MkEwOTQ1QTE1MjJENUMwNDE1MTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnO6AwDQYJKoZIhvcNAQELBQADggEBAG0EAtNkyVPxvXkHUueEDmxjF+eCzO80
sYnH8EmAqv078RPqbDcwW/sPYppX6UiHQhnmRk7epyOtArXWejs6TnWHQ7rqTNJn
k4+stwsFbq4HFS/SN5m57JEvlxh0wSDhWYdWmsOeOJ/6GOnMtFMzr6grHVh7yITv
SxH5D6fAhm77WMB2eUItEmjKNwnDnIwpMA6gPKE/kHRrds4GGR/brsMJHYRTkTKD
ohQHqk0J+9qxgmuAiuj8XaUKEvNSEolKRM+R4U9+JIPx9toJupaGAAfsDT/yRz/X
0VTsC7oLy4sLuUOHofIs5mHuBwEmvyZOurxKaqeGh/AdA/eYJ0i9BpI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:08 2025 by rpki-client