This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer
File:                     B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer (raw, json)
Hash identifier:          vumAyfibiMoeWV9L5TE8vd8dPcrZ2Ypq2tG5Xsfok+o=
Subject key identifier:   B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       424BB68A3130874C10E0D472738DBD7AD4519A45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jan 2026 13:26:41 +0000
Certificate not after:    Wed 13 Jan 2027 13:31:41 +0000
Subordinate resources:    IP: 103.186.94.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4b:b6:8a:31:30:87:4c:10:e0:d4:72:73:8d:bd:7a:d4:51:9a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 14 13:26:41 2026 GMT
            Not After : Jan 13 13:31:41 2027 GMT
        Subject: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:33:ca:79:ed:3e:ae:08:4f:83:c0:7b:e8:
                    f2:db:56:47:69:8f:98:cf:fb:ef:82:7d:ed:5c:32:
                    3e:7a:92:64:cc:a1:7e:b4:90:ed:ad:4d:6c:d0:f5:
                    a0:23:26:2f:f2:66:42:7d:01:76:50:ae:43:0a:22:
                    f0:4b:83:a7:aa:36:06:fc:29:a6:33:cd:de:59:05:
                    bc:dd:1d:99:e0:f1:54:da:43:a2:b8:64:08:11:d5:
                    ec:35:8b:29:50:06:fd:06:56:2a:c7:be:4b:92:51:
                    67:18:89:a1:a7:6c:d7:dc:59:a0:76:d6:d8:dc:b6:
                    f9:c4:13:6c:4c:8e:57:ad:b6:bb:f6:55:bf:5f:fb:
                    0a:80:c9:44:c0:01:bc:02:34:80:10:64:39:4a:5d:
                    0e:66:5d:4e:a0:99:63:29:56:80:d9:8e:e2:41:c0:
                    12:1b:49:5e:34:cf:53:2b:72:36:0e:7b:42:87:94:
                    70:b9:27:71:f3:16:0b:5d:99:95:fa:da:70:eb:ad:
                    50:78:24:15:9d:85:ca:58:00:c4:2f:f4:f2:54:56:
                    9a:6b:53:b7:df:da:8b:99:15:ff:ec:cd:55:00:99:
                    26:23:23:10:e2:84:fa:1a:c9:24:f6:b0:2e:68:34:
                    31:11:74:e7:fb:0b:e8:1a:07:5c:c8:10:1c:ff:dc:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:5d:70:c9:a5:3d:57:52:22:ad:3f:e2:fd:80:d6:fd:e9:
         85:a6:04:09:46:26:e6:d8:c1:dd:52:af:c6:d2:9d:3d:81:cb:
         b0:2b:3e:5e:c3:dd:00:b3:1f:0e:ef:92:32:04:eb:61:ac:52:
         9e:fc:94:84:0a:ab:8b:13:ba:60:fa:18:20:ee:87:a9:9b:cc:
         32:f6:04:0c:0e:e6:84:52:4a:b3:70:97:35:d6:9a:02:ab:3e:
         43:63:d6:9c:a8:5b:fb:68:0f:05:22:8a:75:43:44:aa:b4:09:
         e2:8b:33:16:20:a1:57:c2:cc:20:7c:15:a6:a9:9e:6b:c0:a2:
         62:55:ac:00:a5:5b:ed:06:8c:33:0f:97:6b:77:90:7c:43:a4:
         41:b0:b0:2d:ab:88:f7:26:f2:45:c7:20:dd:de:88:bc:eb:b2:
         1b:ee:eb:86:ad:6d:6b:15:b0:77:96:a0:30:8a:a0:bb:6d:08:
         e8:85:71:ee:88:06:64:d2:f8:34:14:1f:7d:49:5b:04:97:56:
         4d:b5:bb:e3:8f:c0:bf:ee:86:3f:19:fb:17:1d:aa:46:27:9a:
         bb:a0:6a:50:a2:dd:9a:76:81:b0:e9:6f:44:a2:94:48:8e:9c:
         00:d4:4e:c3:0d:99:eb:e1:27:64:4d:18:b1:91:94:d8:70:98:
         ce:d8:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:37 2026 by rpki-client