This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
File:                     B197F427572524588487CFDB163A9E512FAE4DF2.cer (raw, json)
Hash identifier:          fuQuL2CrqKpdWCWB1JcV/x79yo4YgScnbVKkOYLjc6k=
Subject key identifier:   B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7CA67730EF12FD9AB66A8D64215E2F0A2F82443E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Dec 2025 19:28:10 +0000
Certificate not after:    Mon 28 Dec 2026 19:33:10 +0000
Subordinate resources:    IP: 103.153.246.0/23
                          IP: 2406:4ec0::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a6:77:30:ef:12:fd:9a:b6:6a:8d:64:21:5e:2f:0a:2f:82:44:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 29 19:28:10 2025 GMT
            Not After : Dec 28 19:33:10 2026 GMT
        Subject: CN=B197F427572524588487CFDB163A9E512FAE4DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:07:b5:35:be:95:d5:bb:49:9c:15:26:1c:
                    bb:5c:b1:dc:a1:94:45:68:9b:d8:4a:10:d6:ac:dd:
                    c5:13:70:fc:9d:2d:86:7f:62:17:da:c5:93:7b:df:
                    e3:06:e0:99:9b:fe:bd:8a:81:52:fd:bf:b4:4b:7f:
                    9c:38:0f:b4:ac:e3:a9:bf:3d:de:1d:cb:7c:45:d2:
                    55:23:46:93:06:ce:8f:7c:ef:75:be:80:03:86:20:
                    08:78:6c:93:00:d9:96:7c:ca:b9:04:e6:01:a9:59:
                    28:61:d7:80:67:f8:1a:36:9f:e4:fe:98:b8:93:f9:
                    3e:8f:da:f3:f4:4b:49:9c:56:15:7c:6d:70:be:c4:
                    77:0f:e2:c6:32:5a:e9:4a:ad:e4:fb:37:b5:f3:b6:
                    3f:1f:2f:85:a0:70:00:52:13:c4:5f:fd:0b:bc:bf:
                    b2:64:98:02:7e:b7:00:6f:95:e6:b8:1b:a7:16:3f:
                    5e:f2:f6:b2:1b:0f:33:97:8b:34:b5:d2:35:fa:55:
                    b7:54:a1:8a:3c:0d:b9:47:21:8a:15:a7:20:2f:87:
                    31:32:7f:17:0e:11:6b:a2:91:a7:dd:7d:4e:2c:1a:
                    07:47:5f:4c:ae:e3:47:98:a3:d1:8a:09:a2:81:02:
                    af:9a:f5:b6:48:31:8a:8a:e1:7a:47:a5:a4:a9:7d:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.246.0/23
                IPv6:
                  2406:4ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:e3:72:3e:a4:b7:17:b6:1f:69:be:1a:66:6b:ae:53:97:
         fd:fa:bf:09:e6:70:44:6f:7c:a0:4b:e7:7e:52:49:70:f0:d0:
         69:64:06:f9:d9:ea:41:56:61:46:55:25:ea:29:dc:3b:12:0d:
         62:82:bc:30:7a:d7:e3:fc:c7:f8:e9:a9:1a:fc:56:e9:73:ed:
         1d:d6:14:23:70:a0:2d:3d:b7:ec:1c:f6:3a:3e:5f:eb:2f:4d:
         62:68:9a:6b:ca:86:db:6c:16:85:95:8a:85:12:e1:4a:b1:ea:
         70:e8:7a:9a:bc:be:03:67:a7:0a:29:23:3f:be:e7:ae:87:fd:
         cb:77:d4:a1:83:45:07:ce:ff:64:ac:b0:04:7a:cf:78:27:0e:
         3b:2c:c4:b8:eb:10:05:43:cd:ce:03:0d:97:95:1b:b4:08:51:
         64:09:1e:40:f1:df:a6:cd:d7:08:7b:97:19:55:bb:25:d1:05:
         12:d8:8f:12:0c:e4:ee:6c:af:20:05:55:41:65:69:28:72:c9:
         d1:df:fb:7f:bf:50:a7:c0:ef:cb:db:f4:d4:b5:b1:97:87:43:
         41:95:df:a5:83:90:d4:78:c7:c5:85:98:b1:47:3e:b0:9a:55:
         fe:41:87:ce:22:1c:e8:d2:22:d2:09:b9:8d:51:1f:5c:94:d4:
         fd:99:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----