This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
File: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer (raw, json)
Hash identifier: m3idjYs890ps0Twkb8/tMWfzJrGK4D/T813x5AUb8gQ=
Subject key identifier: B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0646D733ADE78BEEB56EB5DF311B2C1A35C95671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
caRepository: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 06 Jan 2026 13:01:12 +0000
Certificate not after: Tue 05 Jan 2027 13:06:12 +0000
Subordinate resources: IP: 103.141.254.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:46:d7:33:ad:e7:8b:ee:b5:6e:b5:df:31:1b:2c:1a:35:c9:56:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 6 13:01:12 2026 GMT
Not After : Jan 5 13:06:12 2027 GMT
Subject: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:46:4b:b4:ed:ae:9c:2a:44:dd:0e:20:92:
59:5e:ac:00:92:1e:78:cd:16:61:be:76:43:ae:f9:
45:bf:cb:9f:c3:c6:92:1f:52:06:74:6a:56:b8:4a:
07:ca:16:22:f5:06:9e:90:33:63:26:96:6b:b8:f2:
3f:42:05:d6:59:ca:44:97:1f:08:b2:b3:74:fd:4e:
5b:5b:65:5a:83:60:6c:32:50:37:4e:b9:42:11:f4:
42:d3:d3:1f:4d:39:e6:55:a7:f2:8b:a8:0a:0b:77:
08:cb:0a:6f:02:38:ab:9e:ba:dd:8b:94:09:c9:fc:
3f:ef:04:ae:2b:f7:39:c5:37:20:9a:75:1e:e6:45:
9e:2f:1d:c1:f0:82:e8:cc:d2:a9:eb:0b:8e:a4:ec:
92:13:47:60:61:42:ad:ee:e5:73:ee:a1:d9:f2:18:
cb:58:28:0d:e0:4b:b5:43:35:89:ad:df:fc:62:0b:
7b:14:22:58:8a:0f:f8:c5:f7:fd:b1:9e:7b:f6:1f:
8c:00:bd:05:53:7f:cf:56:84:24:bc:c9:92:f9:21:
f4:de:3c:6d:95:8e:e6:db:b4:ea:40:b3:18:c8:f7:
d5:ba:25:54:bb:4e:5e:94:f4:07:6c:39:75:84:96:
b2:c3:c6:8d:b8:d7:e8:a1:10:81:d2:5d:37:db:dd:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:a3:27:ce:0d:5f:4c:da:81:fe:75:b8:8c:d2:b3:07:78:f9:
95:bb:13:1e:2e:9c:35:d4:dc:52:83:a9:dc:d9:7c:63:41:e6:
a9:cc:c1:27:35:b7:7e:77:63:e6:a8:e6:ea:f6:3d:31:38:3c:
d7:3a:fd:53:3b:08:09:1d:c4:05:e5:1e:7a:1d:95:28:6b:cc:
13:8e:16:d0:53:e4:c0:45:e0:69:bc:4f:f3:c5:4f:92:74:bc:
54:a5:91:1f:0f:55:46:60:61:7f:fd:84:51:06:02:ed:7a:3f:
1f:ac:b9:8e:9a:72:5f:05:0d:47:d8:9e:cc:84:95:16:25:79:
56:28:95:c4:4e:12:75:30:6c:da:59:37:19:d9:7e:49:b9:c2:
67:12:f1:ba:11:25:fc:f8:ca:1c:37:58:c4:36:d4:92:6f:eb:
6e:de:89:16:b2:6d:4b:42:c3:9b:46:2c:a9:3c:9e:2f:6f:84:
bf:96:3a:8d:61:86:31:bf:ef:73:53:3f:2d:cf:2b:26:39:11:
b5:cf:3f:0c:65:0c:a9:25:06:9e:51:3c:cb:fe:d9:dd:8c:c8:
f7:f4:10:d3:ac:f5:1c:eb:47:7c:4b:aa:a2:18:89:7d:c1:21:
14:d0:53:a9:80:14:a7:cf:4c:d2:d4:38:82:bf:16:44:70:17:
15:b0:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:40 2026 by rpki-client