This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer (raw, json)
Hash identifier: 0zQf/0ZWblFBJO5wx9PfNDIojF8spPUPOhfUlQQXI98=
Subject key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 54C31CDEDBFC437C90856B991F3DBF37F2853F13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
caRepository: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 03 Jan 2026 06:18:19 +0000
Certificate not after: Sat 02 Jan 2027 06:23:19 +0000
Subordinate resources: IP: 116.58.192.0/21
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c3:1c:de:db:fc:43:7c:90:85:6b:99:1f:3d:bf:37:f2:85:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 3 06:18:19 2026 GMT
Not After : Jan 2 06:23:19 2027 GMT
Subject: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:bd:56:81:5c:b3:76:3c:20:de:a6:b1:7b:
25:dc:24:d5:43:d2:21:ef:90:04:e1:b9:e0:fa:68:
e8:b4:7b:4e:24:be:02:8b:43:2c:89:c0:4e:0b:77:
e7:6d:13:08:81:42:65:ff:ee:74:ab:9c:2e:6a:0e:
22:a6:e9:e3:c3:1d:f5:fb:9b:16:08:81:3b:a0:86:
c6:93:51:ad:44:7b:f5:e4:1b:4d:6d:92:72:cd:99:
6f:b2:6b:de:9c:73:24:dc:a3:c0:ca:51:f2:0b:70:
05:76:a0:20:62:e7:9a:e0:2b:d7:42:7e:53:1c:ae:
27:78:ed:b4:69:66:ed:7d:f4:ca:b8:61:9b:de:01:
35:d9:eb:1e:8c:96:1a:9a:34:28:b5:ee:21:c1:d9:
62:57:e5:eb:08:bb:fb:ef:1e:5d:f2:f9:47:75:28:
78:11:f2:77:07:a6:48:f4:52:3e:5b:1f:f2:c2:5b:
ee:77:9f:2d:9f:f6:e4:6f:ad:a9:73:5b:b0:08:79:
d3:c0:61:14:06:f9:89:1b:b3:27:a6:b0:b2:f8:3c:
48:10:c5:d6:38:b3:14:54:00:2e:8b:2d:63:88:dd:
ac:a1:f1:5f:91:96:6c:1d:71:1e:4a:bc:9d:a6:37:
1f:50:46:34:b3:ec:a1:d0:07:76:ca:c1:63:ef:a6:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.58.192.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:cd:06:fb:47:6a:fe:b0:c6:b8:82:09:5b:30:24:73:9c:fd:
45:67:1b:6d:a3:86:3d:ee:f5:3c:f7:c6:c8:f1:c8:6a:ab:cc:
a5:13:d4:b4:e3:cc:41:da:03:29:64:25:5f:56:36:42:3f:2a:
ed:62:d7:fd:f2:ff:d8:50:0a:ba:ec:f4:a5:e3:db:ae:2d:7b:
50:86:79:3c:49:19:3c:b1:aa:7d:08:a8:cd:8a:02:a3:19:d8:
a4:cb:52:ed:a6:63:94:97:c7:8f:03:c8:f5:21:e5:ec:de:a5:
f3:9e:ae:6c:3a:19:7f:fb:2d:18:4a:6d:6c:cc:b7:a3:d7:08:
4b:b1:e6:09:fc:10:20:6e:40:7b:69:50:3e:44:64:d6:10:2b:
65:fc:1e:3e:c1:b7:98:e6:d5:da:2e:11:1c:1a:ce:91:0f:5c:
5d:7d:4b:26:9d:5e:31:cb:f1:20:b3:fa:6b:0c:af:30:5e:a9:
3f:f7:4f:94:a5:9a:f9:16:b7:81:28:3a:d0:07:f3:11:99:69:
62:9d:6c:4a:36:e3:fa:05:e9:bb:1c:8b:32:35:28:7b:be:f6:
9b:59:92:4c:48:99:5a:e6:1e:fe:bf:6a:1a:50:b7:35:08:78:
52:59:07:54:9b:9e:2f:39:ff:1c:2f:8c:74:62:09:35:ce:c2:
11:83:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:48 2026 by rpki-client