This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer (raw, json) Hash identifier: JM20k2TvKzqixLxbejFvDY+hw8/oWsZpsStswnYr+aM= Subject key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3792651DE71F09DD9E35F7F8CD352417739313B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft caRepository: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Dec 2025 15:18:05 +0000 Certificate not after: Tue 22 Dec 2026 15:23:05 +0000 Subordinate resources: IP: 103.185.36.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:92:65:1d:e7:1f:09:dd:9e:35:f7:f8:cd:35:24:17:73:93:13:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 23 15:18:05 2025 GMT Not After : Dec 22 15:23:05 2026 GMT Subject: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:4f:59:11:93:ca:bb:99:83:94:e3:0d:ca: 24:8d:c9:64:bb:b8:68:0f:06:ab:bd:d0:a9:ec:80: 7a:44:01:db:7e:50:ae:28:07:58:d0:8b:1a:0f:99: aa:1f:49:87:1b:5e:38:2f:ed:59:fe:c8:1a:a7:e9: 9d:02:1e:5d:95:d2:26:50:99:f9:ca:d0:0f:cc:a2: 2d:8e:4b:7e:a2:98:6c:74:2b:4c:35:04:65:fe:17: 28:af:f1:68:bc:da:6f:89:c0:9d:4b:61:75:08:b8: ca:31:f6:0b:1c:ce:68:3b:bf:58:86:66:e2:e1:2e: b4:21:8b:6e:da:1a:0e:e6:43:22:a2:db:f5:c6:3a: c9:fd:61:b8:67:66:65:e2:c4:4a:55:39:69:9e:1d: 1f:b9:32:18:ea:ca:b2:c3:45:ac:4d:23:78:e5:c4: 3c:70:fe:fe:d4:1d:8b:39:5f:da:ae:ba:22:f6:eb: b4:a3:0d:c1:7c:f0:0b:ae:4b:90:32:00:d7:8b:0e: 43:cc:37:22:a7:c1:47:be:3c:2f:89:48:84:44:fe: d9:00:e0:0d:6f:71:53:75:64:d2:82:e0:47:07:45: 51:92:d4:23:cc:cc:b5:d7:46:e5:7c:4d:53:3b:d0: b7:f0:28:a0:cb:84:f7:0e:aa:be:e8:6a:e9:a5:7e: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.36.0/23 Signature Algorithm: sha256WithRSAEncryption 39:c1:4b:fc:c3:fe:53:1c:b8:04:02:d2:37:48:a6:06:d3:69: b6:3b:10:1e:62:e6:5a:b7:97:d2:16:70:cb:cf:0e:60:7e:c6: 4e:b0:1e:ce:ef:21:4f:9c:bc:d8:ab:0a:33:43:86:3a:15:e8: 7c:da:98:38:9d:fa:c7:55:8c:28:b0:a8:b4:53:9e:dc:60:53: 6e:2e:85:9c:91:69:61:3f:ad:63:2b:2f:a1:6c:ba:92:f4:1f: 06:b6:d0:16:d7:40:3b:95:28:ad:13:89:a6:9f:ce:af:f0:c3: 9c:a8:69:04:51:b2:57:f4:5f:af:4e:fd:39:81:57:ca:c7:e6: a8:d3:fa:49:b7:9a:a7:87:ea:4d:ff:b1:ce:36:3f:d8:d6:b1: 72:b9:1b:24:e8:1d:4e:29:01:7b:be:dc:cd:0c:d8:21:8d:e9: 4b:69:ff:69:76:f4:52:8a:b7:62:20:49:fe:70:02:cd:d5:08: 1e:8a:ad:8f:65:df:cb:77:a3:4f:bd:96:8e:7e:92:b0:a3:f7: 0e:14:ea:e7:0e:6d:77:7f:bf:10:06:87:b9:5b:1e:38:7e:3a: 7b:9a:86:de:4d:33:53:71:fe:ac:76:eb:40:bb:7b:2d:d5:20: 8e:33:ca:d6:18:2b:32:a9:44:10:92:23:6c:72:eb:bf:f9:51: e7:94:7b:8a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUN5JlHecfCd2eNff4zTUkF3OTE7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyMzE1MTgwNVoX DTI2MTIyMjE1MjMwNVowMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1 NzQ2RDdDRjc3QzgxQkZDNjc0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNZT1kRk8q7mYOU4w3KJI3JZLu4aA8Gq73QqeyAekQB235QrigHWNCLGg+Z qh9JhxteOC/tWf7IGqfpnQIeXZXSJlCZ+crQD8yiLY5LfqKYbHQrTDUEZf4XKK/x aLzab4nAnUthdQi4yjH2CxzOaDu/WIZm4uEutCGLbtoaDuZDIqLb9cY6yf1huGdm ZeLESlU5aZ4dH7kyGOrKssNFrE0jeOXEPHD+/tQdizlf2q66IvbrtKMNwXzwC65L kDIA14sOQ8w3IqfBR748L4lIhET+2QDgDW9xU3Vk0oLgRwdFUZLUI8zMtddG5XxN UzvQt/AooMuE9w6qvuhq6aV+8NsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJhwe362XTji7dtXRtfPd8gb/GdDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2NzljYmY2 LTA5MTMtNDgyMS04YWUxLWJiNTExZWFmMDg4Zi8wLzk4NzA3QjdFQjY1RDM4RTJF RERCNTc0NkQ3Q0Y3N0M4MUJGQzY3NDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuSQwDQYJKoZIhvcNAQELBQADggEBADnBS/zD/lMcuAQC0jdIpgbTabY7EB5i 5lq3l9IWcMvPDmB+xk6wHs7vIU+cvNirCjNDhjoV6HzamDid+sdVjCiwqLRTntxg U24uhZyRaWE/rWMrL6FsupL0Hwa20BbXQDuVKK0Tiaafzq/ww5yoaQRRslf0X69O /TmBV8rH5qjT+km3mqeH6k3/sc42P9jWsXK5GyToHU4pAXu+3M0M2CGN6Utp/2l2 9FKKt2IgSf5wAs3VCB6KrY9l38t3o0+9lo5+krCj9w4U6ucObXd/vxAGh7lbHjh+ Onuaht5NM1Nx/qx260C7ey3VII4zytYYKzKpRBCSI2xy67/5UeeUe4o= -----END CERTIFICATE-----Generated at Sun Jan 25 17:08:01 2026 by rpki-client