This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer (raw, json) Hash identifier: GllkPj3OruVFEn0VHdPpr60WB1GRz/s4MGJIJKjMdwo= Subject key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3D56C17DCDC42262B5299EB5D532C7379DBCB036 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft caRepository: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 29 Apr 2025 06:58:27 +0000 Certificate not after: Tue 28 Apr 2026 07:03:27 +0000 Subordinate resources: IP: 113.59.232.0/21 IP: 2400:b080::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:56:c1:7d:cd:c4:22:62:b5:29:9e:b5:d5:32:c7:37:9d:bc:b0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 29 06:58:27 2025 GMT Not After : Apr 28 07:03:27 2026 GMT Subject: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:ee:2a:00:57:af:91:d1:a3:67:33:9e:df: b1:c2:f6:71:fe:2a:3b:71:6e:4c:6e:d3:64:6c:51: ab:14:5e:a5:cd:f6:88:96:b5:9d:27:b6:e7:31:1e: db:85:bf:b4:da:f8:51:2a:7e:4a:d6:a8:5e:3e:74: 9b:91:24:73:e3:af:37:4e:ce:f7:95:86:8a:2a:76: 52:65:ed:6f:a7:b4:35:b8:4d:57:27:83:50:6a:b8: d7:ac:cc:f8:b7:93:8a:21:d0:3c:e0:c0:bd:8b:ad: 5f:83:49:a2:62:cb:1b:3a:7f:cb:6f:a4:de:72:04: b0:f7:a5:7b:86:6f:53:69:d2:28:fe:4d:8c:42:e7: 21:d5:79:85:c2:28:35:ec:e6:ec:53:f4:41:e3:4b: 5b:e0:28:df:20:4b:0a:c9:72:d6:30:c4:d5:fa:13: ca:3f:68:99:07:cd:e5:be:75:a0:c1:51:87:b6:67: a2:53:e7:a7:06:b1:da:27:ba:2e:73:1e:60:ff:95: dc:00:cf:37:23:82:df:40:35:52:ef:ef:b3:25:65: af:67:5f:bd:c7:a3:5d:ad:e5:d8:96:86:34:b5:68: 42:b0:61:9d:69:04:c5:b9:42:19:85:95:6f:a2:20: 29:a4:82:9b:0b:9b:5c:cd:97:d4:e2:e0:20:69:cf: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.59.232.0/21 IPv6: 2400:b080::/32 Signature Algorithm: sha256WithRSAEncryption 0d:f0:80:1d:76:c2:67:a6:68:89:08:6e:f0:ac:81:27:91:57: 17:cd:d1:7c:81:29:d6:ab:3f:56:d2:59:be:5d:c0:3a:5a:c2: 29:d1:14:33:68:05:78:08:57:d7:41:61:72:74:94:53:3e:b6: d4:8a:fb:5e:36:f0:a5:3d:a8:91:e8:eb:5f:b2:5b:b5:75:91: ec:aa:10:fd:3b:7f:bf:dc:50:f3:3f:20:49:cc:a1:fc:14:c9: 93:d5:eb:92:75:33:b7:59:b7:ec:b6:48:8e:b4:bd:51:cb:99: aa:a5:17:c0:05:4d:36:b3:22:5d:d9:98:2a:58:25:99:9d:b3: 5d:d4:f9:c7:04:13:8e:2f:81:cf:20:e7:27:07:24:bb:b0:a0: b2:10:90:eb:54:53:8f:c5:7c:35:fe:3f:10:9d:80:7b:c4:26: e8:77:3f:94:3b:2e:c1:cd:38:ab:2f:55:8e:11:87:7b:9a:2e: bc:32:18:f3:1d:4a:b0:29:9a:ff:56:dd:23:e7:41:f9:79:96: b7:a0:e9:f9:15:00:ed:eb:7c:8d:fb:86:e7:03:86:19:17:83: 48:08:fe:30:fa:ea:82:8f:4e:3f:2a:9e:5c:4f:73:6b:da:c8: 84:9a:2a:8e:af:82:25:68:dd:f8:cf:3f:cd:0c:3a:ec:9f:d7: 98:fb:95:ff -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUPVbBfc3EImK1KZ611TLHN528sDYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyOTA2NTgyN1oX DTI2MDQyODA3MDMyN1owMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVD NUE2MjVEQzAwQzJBNTlGOTlENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoC7ioAV6+R0aNnM57fscL2cf4qO3FuTG7TZGxRqxRepc32iJa1nSe25zEe 24W/tNr4USp+StaoXj50m5Ekc+OvN07O95WGiip2UmXtb6e0NbhNVyeDUGq416zM +LeTiiHQPODAvYutX4NJomLLGzp/y2+k3nIEsPele4ZvU2nSKP5NjELnIdV5hcIo Nezm7FP0QeNLW+Ao3yBLCsly1jDE1foTyj9omQfN5b51oMFRh7ZnolPnpwax2ie6 LnMeYP+V3ADPNyOC30A1Uu/vsyVlr2dfvcejXa3l2JaGNLVoQrBhnWkExblCGYWV b6IgKaSCmwubXM2X1OLgIGnPcjcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJsvAEdtasG6qwXFpiXcAMKln5nXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2MDY3MThm LWY0YzYtNDc3NS04OTU3LTk5ZDJiZDY2NjM2My8wLzlCMkYwMDQ3NkQ2QUMxQkFB QjA1QzVBNjI1REMwMEMyQTU5Rjk5RDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BANxO+gwDQQCAAIwBwMFACQAsIAwDQYJKoZIhvcNAQELBQADggEBAA3wgB12wmem aIkIbvCsgSeRVxfN0XyBKdarP1bSWb5dwDpawinRFDNoBXgIV9dBYXJ0lFM+ttSK +1428KU9qJHo61+yW7V1keyqEP07f7/cUPM/IEnMofwUyZPV65J1M7dZt+y2SI60 vVHLmaqlF8AFTTazIl3ZmCpYJZmds13U+ccEE44vgc8g5ycHJLuwoLIQkOtUU4/F fDX+PxCdgHvEJuh3P5Q7LsHNOKsvVY4Rh3uaLrwyGPMdSrApmv9W3SPnQfl5lreg 6fkVAO3rfI37hucDhhkXg0gI/jD66oKPTj8qnlxPc2vayISaKo6vgiVo3fjPP80M Ouyf15j7lf8= -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:29 2025 by rpki-client