This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer
File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer (raw, json)
Hash identifier: x+qW5+5pFLBy+lEtjC4RY++LPtWb0wbNdbp6o/yEH4A=
Subject key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 548F1FF524F0FCEBBC4914B695F85F0948F275CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft
caRepository: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 04 Jul 2025 22:10:46 +0000
Certificate not after: Fri 03 Jul 2026 22:15:46 +0000
Subordinate resources: IP: 103.147.254.0/23
IP: 2405:c5c0::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:8f:1f:f5:24:f0:fc:eb:bc:49:14:b6:95:f8:5f:09:48:f2:75:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jul 4 22:10:46 2025 GMT
Not After : Jul 3 22:15:46 2026 GMT
Subject: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:1a:90:b1:71:6a:fe:28:c4:23:37:2a:b8:
6f:86:af:78:45:c1:1e:ea:c5:c6:bd:12:12:8e:08:
40:9b:02:5d:f0:ce:44:57:68:09:74:2d:c5:11:7e:
4a:02:ed:f5:bc:0b:5f:40:8a:4d:11:05:0a:e6:e5:
4e:eb:fa:cc:37:e5:70:4a:b2:aa:92:f4:88:c5:37:
74:41:6a:d8:ca:d9:26:dd:64:96:f3:af:e6:eb:86:
46:78:5f:0f:d4:26:1a:5c:de:66:f0:c7:4d:d3:47:
55:ad:45:9b:13:0e:0b:96:15:ba:61:6b:05:8a:f1:
9c:f5:c2:28:c6:a2:83:d2:f5:08:41:2c:2b:97:5c:
33:d9:d5:94:da:58:d2:5e:ae:be:8b:c2:ad:b0:08:
ee:fa:13:a6:62:6f:5e:34:20:36:c4:54:18:91:53:
9d:07:81:3b:d2:1c:d3:18:de:3f:98:38:d9:3f:f4:
90:95:64:35:5f:c3:81:97:b2:64:ec:96:62:7c:a2:
6d:95:67:b3:5d:ba:27:a9:f0:8b:84:59:dd:83:52:
33:aa:9b:7d:aa:b2:80:bd:ac:20:e1:d9:e7:ba:6f:
4d:56:9f:9c:40:a3:f8:72:34:09:55:44:e2:dd:d0:
85:cd:23:25:8a:83:69:87:2f:eb:03:0e:3f:ba:52:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.254.0/23
IPv6:
2405:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:c8:64:63:b9:d5:60:14:41:5e:4f:22:44:7a:8f:d1:87:b3:
d8:1b:42:bb:93:d2:1d:89:ff:4a:01:1b:c5:8e:0c:5a:8f:d5:
1a:f9:f4:04:0b:55:7e:b1:f9:d5:dd:d4:d8:b5:86:1c:89:c3:
fb:eb:43:e9:d8:6d:87:eb:4a:20:b5:f0:78:26:80:7b:24:82:
de:6a:12:83:c3:7a:90:35:f5:3f:f0:e1:d6:9f:cb:03:55:7d:
89:bc:77:b3:b2:a0:ae:9c:5d:c7:b5:2e:f6:2c:2c:c7:54:1c:
2d:94:f3:a5:38:ed:ee:1c:69:e5:36:6d:3a:c0:9a:42:ab:66:
2a:d5:48:95:04:3d:40:8c:69:96:fb:51:e1:f4:0b:af:de:1b:
6f:44:ab:c7:4c:c1:ea:f1:9e:81:68:06:3c:4e:1a:ca:64:89:
2c:6e:22:03:f5:b2:e1:85:69:a1:86:a7:ca:3f:30:cf:72:d9:
e0:02:4d:d3:7e:49:8d:8d:f7:c1:4d:58:45:91:60:77:ca:22:
84:99:4d:4e:bf:26:0f:8a:f6:26:07:e6:1f:5c:0f:ef:6d:ea:
6d:66:cb:47:18:1d:41:85:c6:fc:a9:d8:17:b2:9d:b0:da:a1:
66:69:68:4a:77:36:2f:fc:e2:7e:f5:df:9a:2d:97:84:d0:8c:
70:ce:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:55 2025 by rpki-client