This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer
File: A6A73303D7FB4B926766F1EA71A883290C724BC9.cer (raw, json)
Hash identifier: 2HlGIQSv84jjxc2GlLR0W+qoiJT/F+GMnQUQk6m03q4=
Subject key identifier: A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 617074994A3B619D10C3CE61888E870A3FC5CCB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft
caRepository: rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 13 Jan 2026 04:29:16 +0000
Certificate not after: Tue 12 Jan 2027 04:34:16 +0000
Subordinate resources: IP: 103.18.44.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:70:74:99:4a:3b:61:9d:10:c3:ce:61:88:8e:87:0a:3f:c5:cc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 13 04:29:16 2026 GMT
Not After : Jan 12 04:34:16 2027 GMT
Subject: CN=A6A73303D7FB4B926766F1EA71A883290C724BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:46:cb:60:6d:d6:f4:c5:8f:98:bb:a5:14:
f6:c1:e1:83:44:c8:d0:e1:93:7e:aa:a9:9c:47:8b:
6f:6f:f0:27:3d:54:e7:de:cb:6f:c3:3c:36:ef:6b:
f1:87:6a:95:95:31:5b:d0:8e:5f:8b:b1:5d:a2:96:
06:1c:7d:75:88:f4:96:20:7f:16:6f:de:b0:cd:58:
63:ef:d1:97:e2:9d:b1:48:18:86:30:64:6f:d0:a7:
bb:2d:04:b0:e0:19:cc:49:cb:d0:cf:cf:0c:bc:cb:
b4:56:60:d1:65:08:6b:74:84:df:4c:f5:4c:89:b0:
df:4b:23:dc:61:4c:a0:f1:b1:b5:0c:79:b8:ae:92:
89:7f:9e:19:c7:62:94:ca:a0:5a:64:df:fb:c4:3f:
fe:26:e7:15:5b:1c:4c:51:b2:40:52:ca:56:01:12:
fd:a8:dc:13:0e:69:95:f4:b8:e1:54:6f:51:cc:1d:
5a:f1:10:b4:96:7c:78:61:ac:8b:c0:31:d4:68:a0:
6b:f3:60:03:cd:e3:76:0d:89:73:07:a3:66:33:56:
06:f6:9c:28:b0:a6:80:e7:9b:91:ef:41:70:55:0c:
7f:ff:0b:c8:eb:a8:6b:61:2e:93:7d:3a:d3:f8:c6:
ae:2c:53:68:a3:70:3c:61:a6:3e:8e:73:40:24:e5:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.18.44.0/23
Signature Algorithm: sha256WithRSAEncryption
23:95:6a:f9:08:0f:11:18:39:c3:29:9e:f8:a8:52:9c:80:ab:
0e:10:16:d6:c3:74:e5:b6:ef:55:90:4b:7e:20:dc:82:16:08:
ad:06:3a:fc:02:b6:22:bd:cc:be:f1:a2:05:9b:e9:c1:f9:cb:
f1:9e:24:f6:95:8d:5a:2d:e5:78:f3:5a:7d:ae:8e:f8:70:7c:
bd:11:56:0d:d0:d4:27:f2:bd:f2:00:9a:e9:a8:5e:c3:7e:74:
c3:35:f2:83:5c:89:d5:2f:55:d0:b6:9b:a8:25:5f:8d:1d:ae:
33:a5:a4:99:50:ac:21:cb:03:95:e8:cb:7c:5f:34:c4:83:1e:
89:fa:c3:1c:14:23:30:90:bb:09:8b:0d:8a:c9:55:c9:ac:f5:
34:02:4c:33:f7:7b:fe:86:bb:4d:7b:97:c0:df:73:22:d6:12:
3f:1f:71:7a:90:e7:e8:fd:c1:20:7a:9d:2e:9c:62:d0:e4:69:
5d:12:d1:1e:3f:97:86:db:cc:c2:37:4b:e1:a3:e9:0a:a0:39:
1b:b1:66:29:6c:da:43:2e:44:76:9c:73:70:e1:51:f5:c1:e3:
75:7e:91:44:0b:14:f7:40:ad:43:f9:52:c1:9a:84:6d:6d:bc:
6f:34:c9:6a:97:b1:29:bd:41:39:af:f9:4b:23:33:0c:c2:3b:
49:34:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:06:27 2026 by rpki-client