This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer
File: A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer (raw, json)
Hash identifier: xnKMo1YRbCAGqwcG8TaBbK8VFkWhkHtaN8Yn2tqvTm0=
Subject key identifier: A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: E3B918030E517E3D94A08D2761EABE8DD0C354
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 03 Dec 2025 18:29:19 +0000
Certificate not after: Wed 02 Dec 2026 18:34:19 +0000
Subordinate resources: IP: 103.104.99.0/24
IP: 2001:df3:3900::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e3:b9:18:03:0e:51:7e:3d:94:a0:8d:27:61:ea:be:8d:d0:c3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 3 18:29:19 2025 GMT
Not After : Dec 2 18:34:19 2026 GMT
Subject: CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2a:43:9e:0d:3a:41:73:a3:3d:b0:90:b2:b0:
7d:7e:50:c6:b1:21:42:df:ed:3a:cd:43:94:98:31:
67:4e:57:e8:7f:dd:f6:3e:4f:b1:66:49:c0:94:a9:
3b:d7:01:fe:e0:10:4c:80:1e:6a:e8:3e:aa:13:65:
98:90:be:10:24:b4:a4:91:56:53:3a:b6:a8:6e:fa:
d1:04:7e:15:20:fc:d1:00:90:0c:72:0b:31:4c:87:
8a:3e:af:ec:d7:a8:5e:30:9a:5f:f6:10:05:37:40:
dc:31:da:7b:4b:83:ee:7d:15:3f:16:24:34:02:26:
d3:db:df:9f:33:b3:bf:5e:e2:cd:ec:2f:f6:e0:d3:
a5:69:49:53:5e:4e:51:a3:9b:e6:53:6b:5b:a9:0a:
d1:24:0e:b5:5a:23:a8:be:cd:c4:c2:3d:e2:a8:05:
5e:a0:83:9b:34:ea:76:64:5c:35:dc:aa:b0:9e:99:
dc:51:18:76:5c:f8:86:06:1d:43:ba:43:d1:79:f8:
0c:56:c1:b4:b9:45:5a:e0:f0:7e:73:7e:74:8f:23:
eb:7b:bf:f5:7f:3d:88:a0:33:6f:a6:e6:68:9b:10:
63:d9:bb:08:8e:8a:00:1f:9c:83:8d:0b:6e:65:56:
f5:60:f0:23:df:a9:ff:6c:a1:b6:c7:3a:ea:af:81:
d7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.99.0/24
IPv6:
2001:df3:3900::/48
Signature Algorithm: sha256WithRSAEncryption
9a:0e:36:cc:0f:d6:e7:87:52:3e:28:b8:dd:53:0f:3f:5d:bb:
08:11:32:46:4d:ed:0c:c3:d3:4b:51:75:3e:4a:fa:87:61:46:
00:71:f0:1f:52:49:6a:4c:30:0e:51:95:f2:1c:a1:f0:e7:86:
ab:2c:dc:62:ee:f7:57:ab:2d:26:43:d6:3f:9e:a8:f7:cb:49:
ed:62:bd:95:2d:05:bd:e5:36:4d:20:22:30:db:42:ab:e6:c7:
e4:93:36:08:f7:2d:f0:aa:af:83:55:97:fd:ed:63:9e:32:de:
40:5f:fa:86:59:74:63:68:ae:4b:1f:aa:cf:c4:ee:ec:ee:99:
6e:36:e7:9d:07:a8:fb:7b:b3:b0:20:3a:f2:a9:fe:1a:67:7f:
30:b4:05:04:39:83:23:5b:83:43:c1:72:0c:12:3c:33:c1:66:
b0:85:e1:94:31:7d:c6:b8:85:a8:8d:be:29:25:59:80:8b:22:
75:e8:62:8f:8f:89:12:d7:3e:b8:7c:e0:60:b1:62:87:32:3e:
7c:e9:23:ff:c8:63:09:45:61:7d:96:a5:f6:15:36:1b:41:a9:
22:5d:d7:6c:a5:aa:88:2d:3a:62:d5:c8:a7:83:b5:56:47:b1:
49:9a:65:82:40:39:17:7c:48:3a:cc:8e:b9:08:9a:4e:40:f9:
f8:48:46:3c
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUAOO5GAMOUX49lKCNJ2Hqvo3Qw1QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMzE4MjkxOVoX
DTI2MTIwMjE4MzQxOVowMzExMC8GA1UEAxMoQTYwNTNERUIwQjEyREJFRTM2RDUy
NjI5NTEyNTYyMDg5Q0NCQzFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO8qQ54NOkFzoz2wkLKwfX5QxrEhQt/tOs1DlJgxZ05X6H/d9j5PsWZJwJSp
O9cB/uAQTIAeaug+qhNlmJC+ECS0pJFWUzq2qG760QR+FSD80QCQDHILMUyHij6v
7NeoXjCaX/YQBTdA3DHae0uD7n0VPxYkNAIm09vfnzOzv17izewv9uDTpWlJU15O
UaOb5lNrW6kK0SQOtVojqL7NxMI94qgFXqCDmzTqdmRcNdyqsJ6Z3FEYdlz4hgYd
Q7pD0Xn4DFbBtLlFWuDwfnN+dI8j63u/9X89iKAzb6bmaJsQY9m7CI6KAB+cg40L
bmVW9WDwI9+p/2yhtsc66q+B1wMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKYFPesLEtvuNtUmKVElYgicy8GhMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9jM2Q3ZjllYi0zYzJkLTQxYTEtOTA4MS0wNzgwYTU4ODczZWEvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZDdmOWVi
LTNjMmQtNDFhMS05MDgxLTA3ODBhNTg4NzNlYS8wL0E2MDUzREVCMEIxMkRCRUUz
NkQ1MjYyOTUxMjU2MjA4OUNDQkMxQTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BABnaGMwDwQCAAIwCQMHACABDfM5ADANBgkqhkiG9w0BAQsFAAOCAQEAmg42zA/W
54dSPii43VMPP127CBEyRk3tDMPTS1F1Pkr6h2FGAHHwH1JJakwwDlGV8hyh8OeG
qyzcYu73V6stJkPWP56o98tJ7WK9lS0FveU2TSAiMNtCq+bH5JM2CPct8Kqvg1WX
/e1jnjLeQF/6hll0Y2iuSx+qz8Tu7O6ZbjbnnQeo+3uzsCA68qn+Gmd/MLQFBDmD
I1uDQ8FyDBI8M8FmsIXhlDF9xriFqI2+KSVZgIsidehij4+JEtc+uHzgYLFihzI+
fOkj/8hjCUVhfZal9hU2G0GpIl3XbKWqiC06YtXIp4O1VkexSZplgkA5F3xIOsyO
uQiaTkD5+EhGPA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:16:05 2025 by rpki-client