This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer (raw, json) Hash identifier: Wva0pUbIt72D/D4To45LqnH/w5ho5wvHQkIRJ6Nani0= Subject key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76FB54DAB723262F9D7216A2EA1B9D91913003EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft caRepository: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 08 Nov 2025 20:17:52 +0000 Certificate not after: Sat 07 Nov 2026 20:22:52 +0000 Subordinate resources: IP: 103.168.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fb:54:da:b7:23:26:2f:9d:72:16:a2:ea:1b:9d:91:91:30:03:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 20:17:52 2025 GMT Not After : Nov 7 20:22:52 2026 GMT Subject: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:60:9e:85:99:31:f1:d3:37:33:9b:26:bc:01: 6d:1a:d2:c5:5c:69:b3:8d:c7:d7:2e:07:34:42:22: 3e:4c:88:a1:6b:61:ca:7c:80:12:50:8b:87:1d:c5: f6:1c:5b:c2:43:c1:2f:5e:7f:60:1c:41:f7:09:9f: 91:68:63:b0:bd:fd:b4:a4:36:80:82:6e:24:66:e6: 3f:34:29:cf:fa:e2:a0:45:0e:e9:af:80:b5:61:9c: 62:a0:25:b8:0f:1e:d9:e1:2f:99:1e:0e:3c:43:fb: 62:65:5d:19:a3:5a:c2:bc:1e:91:b1:c6:6b:6a:2d: 0d:28:ac:33:52:e1:3a:81:34:a2:5b:af:76:a1:b8: b5:24:3f:69:4c:81:71:97:5c:40:4f:b7:44:55:ff: de:07:3c:21:3d:5f:49:d1:1c:bc:be:c2:4a:2e:e5: fd:f9:d9:ee:2b:9a:17:bf:69:9d:ad:51:6e:48:54: 3f:ef:b0:d1:54:d5:ec:c4:dd:f2:2e:76:7d:e2:3f: 04:2b:96:c1:2a:6c:42:4f:b4:85:41:a6:0e:69:68: 91:2b:56:3f:4b:13:81:d6:15:dc:c0:00:6d:a9:b5: f4:74:12:39:27:38:de:09:11:b6:8c:1f:fc:03:9e: 0a:f4:0f:a4:4a:89:77:13:a2:34:9f:1f:1e:5d:5e: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.184.0/23 Signature Algorithm: sha256WithRSAEncryption 76:73:1b:05:a2:f5:8c:c7:8f:f3:30:fb:61:f8:16:7d:bc:7a: a6:73:8c:dd:c1:fc:92:a0:99:52:68:24:44:dc:b2:42:1f:09: 97:dd:61:64:e3:08:7e:cf:ad:68:9b:96:f5:73:c9:6a:70:dd: dd:f1:9b:d9:19:ec:cf:0b:09:b2:8c:36:3f:d9:d7:f1:8c:e1: 0a:04:7d:d4:42:a1:b3:10:8d:2f:d0:38:41:2c:2e:09:ce:e8: 78:81:4f:83:e8:c6:83:69:85:c0:a8:e3:7f:c7:e4:54:91:26: 0e:70:48:48:1d:a6:d9:1f:cb:80:0d:06:0f:8a:db:1e:eb:71: 4e:b7:00:39:95:03:f2:c9:48:46:e3:cd:be:98:42:b8:76:a6: a0:6b:2f:a6:44:87:06:40:1b:7b:9f:5c:f3:ab:f5:66:27:b4: 23:78:36:3d:0d:9a:5e:07:ed:ef:b7:7a:ea:d4:d4:3e:73:69: 55:58:87:83:27:26:a1:4b:55:68:e6:fc:7b:de:53:25:1c:e7: c7:02:2d:89:ae:9a:f4:e5:47:25:42:e0:1a:02:29:f0:ce:ce: 51:f2:d1:2d:95:ae:98:d1:a2:52:17:35:92:cd:91:e6:96:33: 57:3e:21:f3:6c:96:18:70:68:0a:17:8b:c5:fe:34:a0:cf:c8: 98:4c:08:11 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdvtU2rcjJi+dchai6hudkZEwA+owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwODIwMTc1MloX DTI2MTEwNzIwMjI1MlowMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5 QzE1NDU0NjlDQTJCOTgzMzRGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPJgnoWZMfHTNzObJrwBbRrSxVxps43H1y4HNEIiPkyIoWthynyAElCLhx3F 9hxbwkPBL15/YBxB9wmfkWhjsL39tKQ2gIJuJGbmPzQpz/rioEUO6a+AtWGcYqAl uA8e2eEvmR4OPEP7YmVdGaNawrwekbHGa2otDSisM1LhOoE0oluvdqG4tSQ/aUyB cZdcQE+3RFX/3gc8IT1fSdEcvL7CSi7l/fnZ7iuaF79pna1RbkhUP++w0VTV7MTd 8i52feI/BCuWwSpsQk+0hUGmDmlokStWP0sTgdYV3MAAbam19HQSOSc43gkRtowf /AOeCvQPpEqJdxOiNJ8fHl1eJ0kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLHU9Ulb5PnZleqcFUVGnKK5gzTxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4ZTc4ZWUw LTAwMDItNGE2Ny1hNzM5LTMwMzNkNWI1YmE2MS8wL0IxRDRGNTQ5NUJFNEY5RDk5 NUVBOUMxNTQ1NDY5Q0EyQjk4MzM0RjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqLgwDQYJKoZIhvcNAQELBQADggEBAHZzGwWi9YzHj/Mw+2H4Fn28eqZzjN3B /JKgmVJoJETcskIfCZfdYWTjCH7PrWiblvVzyWpw3d3xm9kZ7M8LCbKMNj/Z1/GM 4QoEfdRCobMQjS/QOEEsLgnO6HiBT4PoxoNphcCo43/H5FSRJg5wSEgdptkfy4AN Bg+K2x7rcU63ADmVA/LJSEbjzb6YQrh2pqBrL6ZEhwZAG3ufXPOr9WYntCN4Nj0N ml4H7e+3eurU1D5zaVVYh4MnJqFLVWjm/HveUyUc58cCLYmumvTlRyVC4BoCKfDO zlHy0S2VrpjRolIXNZLNkeaWM1c+IfNslhhwaAoXi8X+NKDPyJhMCBE= -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:48 2025 by rpki-client