This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
File:                     A42F07BEA859C831526717AB1D092E11E7890BDD.cer (raw, json)
Hash identifier:          0nXL2TZ4d1ZO2Y0SySsoY2jwyWjUGllXW6KTOZDLR40=
Subject key identifier:   A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       26EFB8CED8411C74FED8B14670A160B77727714C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Dec 2025 13:59:34 +0000
Certificate not after:    Mon 28 Dec 2026 14:04:34 +0000
Subordinate resources:    IP: 103.109.24.0/22
                          IP: 2402:7640::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ef:b8:ce:d8:41:1c:74:fe:d8:b1:46:70:a1:60:b7:77:27:71:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 29 13:59:34 2025 GMT
            Not After : Dec 28 14:04:34 2026 GMT
        Subject: CN=A42F07BEA859C831526717AB1D092E11E7890BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:95:0e:60:81:43:63:68:b3:9b:88:fa:d1:
                    76:76:a7:89:ec:21:77:bc:45:33:c8:7b:b1:f9:84:
                    de:9a:82:11:14:37:d8:88:a1:54:a9:06:40:6a:e4:
                    d1:c0:23:a2:26:52:b1:2d:40:1b:d3:11:63:99:41:
                    76:62:d0:4c:b7:8f:cd:f7:d4:51:02:23:f6:48:04:
                    7a:7f:cf:ff:cc:fd:72:fd:f4:81:e6:c2:ea:54:df:
                    48:21:00:0f:11:bc:e1:0d:a7:26:61:93:6f:4a:64:
                    90:f7:71:24:8e:57:12:92:52:03:1e:f1:30:5f:aa:
                    1b:c5:61:04:43:31:2b:12:d5:68:aa:9a:e1:54:82:
                    65:93:24:23:f1:c4:28:30:cf:50:ba:5e:49:5f:48:
                    69:dc:99:fd:7b:61:6f:4b:91:15:a4:5e:24:5b:ed:
                    75:95:e5:49:23:66:62:2f:2d:c4:6b:65:d4:b4:21:
                    90:33:ca:43:eb:0d:8b:52:c4:33:00:74:21:dc:63:
                    bb:bb:76:88:4a:00:03:86:93:39:06:c2:4b:22:4c:
                    0e:4e:6b:b9:2d:59:28:29:96:a3:1e:71:ca:63:75:
                    b9:ac:a1:d2:01:3b:3a:63:c2:13:3b:ad:fa:d3:fd:
                    dc:e8:4a:2b:44:90:37:c1:72:0d:61:31:ec:4f:45:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.24.0/22
                IPv6:
                  2402:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:3a:b6:9d:70:8c:6e:9e:3e:68:1e:64:af:72:f1:20:16:75:
         72:29:eb:e1:82:b9:0e:5d:82:90:78:df:7c:2e:4a:69:1f:f7:
         2c:8f:8a:b2:a3:ca:70:34:91:7e:95:c4:b4:ed:f9:04:50:4c:
         09:bc:85:51:a0:67:35:ab:07:8c:3a:21:b0:a4:3b:bc:dd:45:
         d9:9d:bd:fd:04:8a:f7:57:5c:6e:9f:5b:6c:dc:c1:be:57:b7:
         b0:31:c2:e9:f2:6e:08:ca:82:f7:d5:d7:a0:09:e6:84:4c:1b:
         c0:c2:bb:b4:ec:a3:28:98:f1:22:4d:d5:c1:71:8e:36:4f:ea:
         f4:81:15:ea:4e:86:c5:62:b4:47:18:d5:7d:cd:9e:af:85:43:
         c8:53:83:f4:37:19:86:8b:c4:08:eb:c1:d1:59:6f:b7:ec:59:
         01:0c:b3:b1:bd:ae:31:17:cb:47:06:ac:d4:40:0c:dc:c3:fa:
         66:89:96:2b:00:32:d5:05:bf:2d:82:d1:7c:6c:f0:21:50:8c:
         a6:c5:be:7f:7d:de:fb:75:7d:16:c6:8e:26:3c:51:0b:22:0e:
         f2:f3:3a:f0:fc:f4:45:30:66:2e:03:62:5b:d3:7d:fb:f6:c1:
         3b:8f:5e:3e:77:43:da:85:e6:44:1f:17:8c:f2:45:94:02:5b:
         e5:21:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----