This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer File: B59504F478A4226C16D97004A6F98153CD19D2E0.cer (raw, json) Hash identifier: DWEnc7l48ufx9eDBucVED4gc18oN1AVhqR0MkzGB2BE= Subject key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 67AEEB308C636365B7683CB52A681A1B927B7F7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft caRepository: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 Jan 2026 03:07:50 +0000 Certificate not after: Fri 22 Jan 2027 03:12:50 +0000 Subordinate resources: IP: 103.122.5.0/24 IP: 2001:df6:7b00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ae:eb:30:8c:63:63:65:b7:68:3c:b5:2a:68:1a:1b:92:7b:7f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 23 03:07:50 2026 GMT Not After : Jan 22 03:12:50 2027 GMT Subject: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:40:c1:8a:f4:7b:25:9e:89:ee:fc:62:37: b8:6a:78:d4:36:82:18:7c:de:45:82:29:57:1b:f3: a5:6c:31:1d:59:dd:3d:89:62:14:c3:21:f5:04:e4: 67:74:10:be:8c:30:bd:e7:d2:da:ff:4e:fd:28:8c: 61:7b:53:95:0f:6b:3a:62:a7:66:d5:f2:66:74:a1: b8:42:2c:da:20:66:43:8f:e7:3c:c3:65:7a:9e:97: b0:f4:32:80:06:34:b3:f6:58:3a:cb:f5:95:e5:5d: 2f:12:c1:dc:e9:c9:86:9d:1c:e8:b0:10:28:5c:f0: e5:0a:8f:c3:89:b7:79:a3:96:36:74:cf:05:ca:46: 3d:06:48:2f:65:6a:85:ac:e0:67:d7:cd:cc:d9:fe: b7:10:0e:e8:06:d2:c2:29:95:fc:13:d3:f2:6c:12: e2:b8:58:e2:9d:f4:db:de:2a:f1:f5:27:33:52:6e: 17:1a:ba:a6:23:1b:f0:a5:96:3d:78:81:e9:56:27: ab:49:0e:cc:fb:c7:2c:87:8f:8e:5b:b6:70:dd:09: e3:28:f2:5e:a7:60:d4:8c:c8:23:c9:8b:6f:03:4e: 4d:a0:b2:31:da:87:bb:52:8c:31:31:65:f8:37:52: 24:98:e1:ce:e8:e3:f4:56:48:fc:11:65:20:9b:6a: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.5.0/24 IPv6: 2001:df6:7b00::/48 Signature Algorithm: sha256WithRSAEncryption 0f:ff:af:fb:d2:79:8b:f4:da:02:ec:c9:1f:7e:b5:91:91:c5: 48:aa:d9:33:82:b0:c1:67:1c:ba:21:62:88:39:df:4d:fc:09: 05:5e:7d:b3:12:ae:00:62:b5:38:48:18:71:cd:14:74:71:1c: b4:20:3a:5c:17:98:b5:38:c5:2f:78:1a:81:91:4d:88:45:07: bf:f6:34:e8:c8:83:71:be:ca:2f:e4:67:23:47:bb:04:5b:ef: 36:0b:5d:47:ea:be:59:10:cb:d9:bf:c5:f4:e5:83:b3:a7:ee: a3:16:08:bd:38:56:a1:d2:cd:cb:37:2d:32:8e:ed:3c:9b:a0: 2f:ab:bf:75:3e:e0:31:c7:df:89:54:79:1d:3c:f7:c9:6d:51: 68:f3:47:8f:d1:d4:83:54:aa:39:86:a8:8c:f3:2d:79:35:bf: 60:b8:ed:94:3c:e5:b9:3e:1c:4b:30:db:4e:48:cb:65:bb:03: c3:f1:81:35:5f:78:b4:be:ff:ec:dc:d2:43:e3:45:36:34:9d: 21:bb:9b:1f:04:ce:56:f2:09:80:2c:1e:d1:5c:3d:e3:65:08: 97:f8:5c:71:9c:c7:60:70:1f:81:bb:58:0a:d8:3b:ef:ac:fd: 10:8b:05:be:63:79:58:9b:79:57:88:a8:e1:a2:32:93:d4:e5: 36:6f:1b:ce -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUZ67rMIxjY2W3aDy1KmgaG5J7f3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMzAzMDc1MFoX DTI3MDEyMjAzMTI1MFowMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3 MDA0QTZGOTgxNTNDRDE5RDJFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPMQMGK9Hslnonu/GI3uGp41DaCGHzeRYIpVxvzpWwxHVndPYliFMMh9QTk Z3QQvowwvefS2v9O/SiMYXtTlQ9rOmKnZtXyZnShuEIs2iBmQ4/nPMNlep6XsPQy gAY0s/ZYOsv1leVdLxLB3OnJhp0c6LAQKFzw5QqPw4m3eaOWNnTPBcpGPQZIL2Vq hazgZ9fNzNn+txAO6AbSwimV/BPT8mwS4rhY4p30294q8fUnM1JuFxq6piMb8KWW PXiB6VYnq0kOzPvHLIePjlu2cN0J4yjyXqdg1IzII8mLbwNOTaCyMdqHu1KMMTFl +DdSJJjhzujj9FZI/BFlIJtqOI0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLWVBPR4pCJsFtlwBKb5gVPNGdLgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNGZiZmIw LTkzZWUtNGVhNi1iNGNmLTA3ZDc2OWI4OGEyMi8wL0I1OTUwNEY0NzhBNDIyNkMx NkQ5NzAwNEE2Rjk4MTUzQ0QxOUQyRTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnegUwDwQCAAIwCQMHACABDfZ7ADANBgkqhkiG9w0BAQsFAAOCAQEAD/+v+9J5 i/TaAuzJH361kZHFSKrZM4KwwWccuiFiiDnfTfwJBV59sxKuAGK1OEgYcc0UdHEc tCA6XBeYtTjFL3gagZFNiEUHv/Y06MiDcb7KL+RnI0e7BFvvNgtdR+q+WRDL2b/F 9OWDs6fuoxYIvThWodLNyzctMo7tPJugL6u/dT7gMcffiVR5HTz3yW1RaPNHj9HU g1SqOYaojPMteTW/YLjtlDzluT4cSzDbTkjLZbsDw/GBNV94tL7/7NzSQ+NFNjSd IbubHwTOVvIJgCwe0Vw942UIl/hccZzHYHAfgbtYCtg776z9EIsFvmN5WJt5V4io 4aIyk9TlNm8bzg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:06:09 2026 by rpki-client