This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
File:                     C0CDF72A73FE200131853E0EE6A9B33708242F09.cer (raw, json)
Hash identifier:          A7to1KGB9JWW3D+VDzqLPhxS6s7PWlbrk4b0rGNpn+g=
Subject key identifier:   C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2BA609CD27410A61270839C74251DC0DAD254C68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jan 2026 19:52:26 +0000
Certificate not after:    Wed 13 Jan 2027 19:57:26 +0000
Subordinate resources:    IP: 103.90.62.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a6:09:cd:27:41:0a:61:27:08:39:c7:42:51:dc:0d:ad:25:4c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 14 19:52:26 2026 GMT
            Not After : Jan 13 19:57:26 2027 GMT
        Subject: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:9e:54:7d:3c:99:93:68:c9:a4:42:f4:5e:
                    e6:63:69:6f:3c:5c:1b:41:83:17:ec:42:19:98:bb:
                    53:25:d7:ad:8c:f5:b0:70:2c:85:77:32:e1:e5:3e:
                    5f:ce:db:b7:7e:9d:48:40:75:5c:00:64:d9:48:a2:
                    24:8a:83:f0:3b:46:55:fb:dc:cc:b5:96:ba:63:28:
                    d4:15:6b:7e:19:5e:2c:5a:13:44:3a:97:7f:c9:48:
                    42:20:da:e6:29:7e:ce:2a:b4:6d:c6:27:4f:e4:d5:
                    17:eb:f9:b9:0d:38:98:4d:8f:18:90:c7:5f:e7:5b:
                    74:3c:e6:6a:a8:a4:85:c8:dd:ec:50:7e:39:d5:fc:
                    9b:ac:bb:59:6a:00:40:79:51:2a:8e:c1:9d:99:7f:
                    df:a2:a3:a5:01:cf:9d:6f:fd:cf:59:50:63:df:01:
                    65:5b:0f:49:10:cf:15:80:2c:fa:c7:4e:12:ff:b1:
                    7e:03:8d:61:7c:00:ae:b0:fd:1d:01:c0:77:3d:9e:
                    38:3c:40:8f:6a:ea:37:df:44:03:3e:09:b6:35:f6:
                    ee:94:c1:d0:56:7c:cb:04:33:32:89:08:cc:da:bb:
                    82:5f:7b:ae:33:38:60:40:43:ec:ba:0c:7e:53:40:
                    06:18:ea:ed:46:54:7f:87:37:67:c9:2f:2f:45:e4:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:f4:a1:58:7f:57:97:d3:e9:87:11:94:1f:5d:2f:98:01:
         7d:1a:37:52:7a:0a:32:67:15:ab:32:c6:12:2c:64:bd:a8:5a:
         76:ef:7c:66:4b:9f:50:d5:5c:8d:45:f9:28:99:9e:9c:14:36:
         c0:d6:4d:cf:7c:7f:49:13:73:d4:ed:17:69:7b:72:90:93:0c:
         a8:b1:eb:4d:54:df:e9:48:4b:7c:69:48:49:91:df:58:c3:d7:
         d7:02:2a:5b:d3:44:21:8a:84:da:97:8d:3f:51:06:87:16:d3:
         b5:18:56:de:19:bf:cf:8c:71:28:c0:5d:72:04:df:92:30:93:
         a7:2b:20:f2:41:6b:2c:15:8d:80:52:76:c2:0c:23:00:4e:67:
         46:46:32:ca:65:50:3c:c4:7f:21:e8:9c:22:44:ea:ac:e4:32:
         31:7c:d3:15:b7:e2:9c:f4:4d:d7:de:6d:b7:ba:18:56:b2:57:
         74:6d:02:f8:03:e0:47:be:d6:9f:fe:e1:c6:a4:49:a7:c1:2a:
         f0:72:ae:f1:ef:6b:e7:00:e6:5f:65:d8:f5:64:d2:08:da:ca:
         a1:31:2c:29:65:9d:42:02:33:20:b4:86:02:6f:f6:4e:96:34:
         89:9b:f8:d3:e6:e2:30:6c:7f:19:67:63:2f:69:48:7a:09:a9:
         8b:1f:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----