This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer
File:                     A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer (raw, json)
Hash identifier:          xnKMo1YRbCAGqwcG8TaBbK8VFkWhkHtaN8Yn2tqvTm0=
Subject key identifier:   A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       E3B918030E517E3D94A08D2761EABE8DD0C354
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Dec 2025 18:29:19 +0000
Certificate not after:    Wed 02 Dec 2026 18:34:19 +0000
Subordinate resources:    IP: 103.104.99.0/24
                          IP: 2001:df3:3900::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e3:b9:18:03:0e:51:7e:3d:94:a0:8d:27:61:ea:be:8d:d0:c3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  3 18:29:19 2025 GMT
            Not After : Dec  2 18:34:19 2026 GMT
        Subject: CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2a:43:9e:0d:3a:41:73:a3:3d:b0:90:b2:b0:
                    7d:7e:50:c6:b1:21:42:df:ed:3a:cd:43:94:98:31:
                    67:4e:57:e8:7f:dd:f6:3e:4f:b1:66:49:c0:94:a9:
                    3b:d7:01:fe:e0:10:4c:80:1e:6a:e8:3e:aa:13:65:
                    98:90:be:10:24:b4:a4:91:56:53:3a:b6:a8:6e:fa:
                    d1:04:7e:15:20:fc:d1:00:90:0c:72:0b:31:4c:87:
                    8a:3e:af:ec:d7:a8:5e:30:9a:5f:f6:10:05:37:40:
                    dc:31:da:7b:4b:83:ee:7d:15:3f:16:24:34:02:26:
                    d3:db:df:9f:33:b3:bf:5e:e2:cd:ec:2f:f6:e0:d3:
                    a5:69:49:53:5e:4e:51:a3:9b:e6:53:6b:5b:a9:0a:
                    d1:24:0e:b5:5a:23:a8:be:cd:c4:c2:3d:e2:a8:05:
                    5e:a0:83:9b:34:ea:76:64:5c:35:dc:aa:b0:9e:99:
                    dc:51:18:76:5c:f8:86:06:1d:43:ba:43:d1:79:f8:
                    0c:56:c1:b4:b9:45:5a:e0:f0:7e:73:7e:74:8f:23:
                    eb:7b:bf:f5:7f:3d:88:a0:33:6f:a6:e6:68:9b:10:
                    63:d9:bb:08:8e:8a:00:1f:9c:83:8d:0b:6e:65:56:
                    f5:60:f0:23:df:a9:ff:6c:a1:b6:c7:3a:ea:af:81:
                    d7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.99.0/24
                IPv6:
                  2001:df3:3900::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:0e:36:cc:0f:d6:e7:87:52:3e:28:b8:dd:53:0f:3f:5d:bb:
         08:11:32:46:4d:ed:0c:c3:d3:4b:51:75:3e:4a:fa:87:61:46:
         00:71:f0:1f:52:49:6a:4c:30:0e:51:95:f2:1c:a1:f0:e7:86:
         ab:2c:dc:62:ee:f7:57:ab:2d:26:43:d6:3f:9e:a8:f7:cb:49:
         ed:62:bd:95:2d:05:bd:e5:36:4d:20:22:30:db:42:ab:e6:c7:
         e4:93:36:08:f7:2d:f0:aa:af:83:55:97:fd:ed:63:9e:32:de:
         40:5f:fa:86:59:74:63:68:ae:4b:1f:aa:cf:c4:ee:ec:ee:99:
         6e:36:e7:9d:07:a8:fb:7b:b3:b0:20:3a:f2:a9:fe:1a:67:7f:
         30:b4:05:04:39:83:23:5b:83:43:c1:72:0c:12:3c:33:c1:66:
         b0:85:e1:94:31:7d:c6:b8:85:a8:8d:be:29:25:59:80:8b:22:
         75:e8:62:8f:8f:89:12:d7:3e:b8:7c:e0:60:b1:62:87:32:3e:
         7c:e9:23:ff:c8:63:09:45:61:7d:96:a5:f6:15:36:1b:41:a9:
         22:5d:d7:6c:a5:aa:88:2d:3a:62:d5:c8:a7:83:b5:56:47:b1:
         49:9a:65:82:40:39:17:7c:48:3a:cc:8e:b9:08:9a:4e:40:f9:
         f8:48:46:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:16:05 2025 by rpki-client