This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
File:                     B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer (raw, json)
Hash identifier:          m3idjYs890ps0Twkb8/tMWfzJrGK4D/T813x5AUb8gQ=
Subject key identifier:   B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0646D733ADE78BEEB56EB5DF311B2C1A35C95671
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jan 2026 13:01:12 +0000
Certificate not after:    Tue 05 Jan 2027 13:06:12 +0000
Subordinate resources:    IP: 103.141.254.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:46:d7:33:ad:e7:8b:ee:b5:6e:b5:df:31:1b:2c:1a:35:c9:56:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  6 13:01:12 2026 GMT
            Not After : Jan  5 13:06:12 2027 GMT
        Subject: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:46:4b:b4:ed:ae:9c:2a:44:dd:0e:20:92:
                    59:5e:ac:00:92:1e:78:cd:16:61:be:76:43:ae:f9:
                    45:bf:cb:9f:c3:c6:92:1f:52:06:74:6a:56:b8:4a:
                    07:ca:16:22:f5:06:9e:90:33:63:26:96:6b:b8:f2:
                    3f:42:05:d6:59:ca:44:97:1f:08:b2:b3:74:fd:4e:
                    5b:5b:65:5a:83:60:6c:32:50:37:4e:b9:42:11:f4:
                    42:d3:d3:1f:4d:39:e6:55:a7:f2:8b:a8:0a:0b:77:
                    08:cb:0a:6f:02:38:ab:9e:ba:dd:8b:94:09:c9:fc:
                    3f:ef:04:ae:2b:f7:39:c5:37:20:9a:75:1e:e6:45:
                    9e:2f:1d:c1:f0:82:e8:cc:d2:a9:eb:0b:8e:a4:ec:
                    92:13:47:60:61:42:ad:ee:e5:73:ee:a1:d9:f2:18:
                    cb:58:28:0d:e0:4b:b5:43:35:89:ad:df:fc:62:0b:
                    7b:14:22:58:8a:0f:f8:c5:f7:fd:b1:9e:7b:f6:1f:
                    8c:00:bd:05:53:7f:cf:56:84:24:bc:c9:92:f9:21:
                    f4:de:3c:6d:95:8e:e6:db:b4:ea:40:b3:18:c8:f7:
                    d5:ba:25:54:bb:4e:5e:94:f4:07:6c:39:75:84:96:
                    b2:c3:c6:8d:b8:d7:e8:a1:10:81:d2:5d:37:db:dd:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:27:ce:0d:5f:4c:da:81:fe:75:b8:8c:d2:b3:07:78:f9:
         95:bb:13:1e:2e:9c:35:d4:dc:52:83:a9:dc:d9:7c:63:41:e6:
         a9:cc:c1:27:35:b7:7e:77:63:e6:a8:e6:ea:f6:3d:31:38:3c:
         d7:3a:fd:53:3b:08:09:1d:c4:05:e5:1e:7a:1d:95:28:6b:cc:
         13:8e:16:d0:53:e4:c0:45:e0:69:bc:4f:f3:c5:4f:92:74:bc:
         54:a5:91:1f:0f:55:46:60:61:7f:fd:84:51:06:02:ed:7a:3f:
         1f:ac:b9:8e:9a:72:5f:05:0d:47:d8:9e:cc:84:95:16:25:79:
         56:28:95:c4:4e:12:75:30:6c:da:59:37:19:d9:7e:49:b9:c2:
         67:12:f1:ba:11:25:fc:f8:ca:1c:37:58:c4:36:d4:92:6f:eb:
         6e:de:89:16:b2:6d:4b:42:c3:9b:46:2c:a9:3c:9e:2f:6f:84:
         bf:96:3a:8d:61:86:31:bf:ef:73:53:3f:2d:cf:2b:26:39:11:
         b5:cf:3f:0c:65:0c:a9:25:06:9e:51:3c:cb:fe:d9:dd:8c:c8:
         f7:f4:10:d3:ac:f5:1c:eb:47:7c:4b:aa:a2:18:89:7d:c1:21:
         14:d0:53:a9:80:14:a7:cf:4c:d2:d4:38:82:bf:16:44:70:17:
         15:b0:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:40 2026 by rpki-client