This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
File:                     B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer (raw, json)
Hash identifier:          oR7O1lnWEjzJBScmdmsd94OkQwipCWq5Q11J3I4krDs=
Subject key identifier:   B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       15DB6D46B0A4355F37E9A8FCF8354CB5D218B8E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jan 2026 00:21:42 +0000
Certificate not after:    Wed 13 Jan 2027 00:26:42 +0000
Subordinate resources:    AS: 59153
                          IP: 103.253.212.0/22
                          IP: 202.10.32.0/20
                          IP: 2001:df1:7800::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:db:6d:46:b0:a4:35:5f:37:e9:a8:fc:f8:35:4c:b5:d2:18:b8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 14 00:21:42 2026 GMT
            Not After : Jan 13 00:26:42 2027 GMT
        Subject: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:fe:91:78:fe:87:f0:5a:30:67:6b:5d:7d:
                    da:30:18:76:a7:98:15:3d:be:47:a8:a4:4c:b9:fc:
                    83:85:03:b7:8d:a4:94:60:e3:51:e4:0d:40:93:c4:
                    75:fb:0e:2b:26:53:c0:1d:e4:33:28:4f:2a:88:00:
                    cd:09:24:2e:50:2c:cb:94:2a:fd:ef:a1:9e:93:82:
                    23:12:22:69:10:a9:1c:0f:29:46:1c:7e:2f:80:8f:
                    c0:88:16:82:40:b1:36:35:28:da:eb:74:cf:65:fd:
                    c4:2b:12:3c:50:1e:0a:9f:f2:44:cc:6a:82:24:51:
                    9c:c9:29:db:fc:d4:9d:ca:25:91:fe:8c:4d:bc:56:
                    40:04:6c:5e:82:7b:71:0a:39:ab:80:21:38:67:14:
                    ac:e5:df:70:74:2d:70:f5:96:39:22:59:2b:08:5d:
                    ce:94:d3:46:c6:7e:a4:77:d9:d8:d9:7f:7a:cd:51:
                    bb:72:15:3b:85:44:a5:6f:67:47:3f:7f:df:35:c9:
                    0d:5b:e1:b0:54:26:4f:3b:47:6d:88:4a:38:f0:45:
                    16:f9:5e:e7:d2:f1:c3:76:64:8c:4d:d2:82:f0:70:
                    54:8a:49:00:67:c3:be:37:2e:56:63:60:69:ed:40:
                    06:c0:0c:e5:c9:44:58:4d:0f:7a:1e:93:1f:70:e2:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.212.0/22
                  202.10.32.0/20
                IPv6:
                  2001:df1:7800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59153

    Signature Algorithm: sha256WithRSAEncryption
         42:d0:5d:d2:d4:a0:f3:81:f3:77:da:04:00:e5:f6:b3:8d:f7:
         d4:f6:4a:a1:a3:64:e3:4f:35:ab:46:27:13:56:1c:fa:ff:1d:
         b9:c4:1c:68:55:c3:43:80:01:55:a9:07:94:11:25:e5:8b:78:
         32:61:ad:fa:63:9e:da:0e:c0:11:fd:95:d8:17:21:d1:a7:ba:
         f7:40:e3:2c:57:07:48:c0:f7:bd:85:f0:07:5d:8c:84:50:4d:
         24:70:9d:25:8e:c5:9a:b3:08:2e:79:53:21:96:6b:14:ab:c7:
         1d:94:0d:ef:13:c0:6e:69:cf:09:51:0d:41:30:5a:d3:55:d2:
         a2:34:b7:47:fc:3e:1a:23:47:e9:35:d6:1b:f3:dc:f7:9e:62:
         83:f6:06:33:71:52:ed:4a:52:fe:48:ef:d6:16:9b:ec:2a:b3:
         f1:8c:4d:25:cb:d5:37:55:35:59:bb:df:5c:dd:31:48:db:fd:
         16:3d:23:8e:c1:f1:57:9f:7e:c6:5b:fc:a8:48:7a:22:51:17:
         82:f3:25:18:39:45:b0:7a:88:04:f9:31:b2:38:0f:fc:df:5c:
         a1:e9:66:e3:01:46:b5:b8:83:6e:e4:d1:d0:e3:ca:ae:22:b3:
         c6:55:7d:e9:3e:a4:43:0a:00:9e:c5:c0:0a:0d:c6:6a:74:8e:
         3a:8b:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----