This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer
File:                     C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer (raw, json)
Hash identifier:          2xLMTPEmtQNiyqBzQTVIgCxR6hdhIYiS3roFzHIsdis=
Subject key identifier:   C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3DC0CB5F6A73A0365C800F8CABD4300E2418711A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Jan 2026 23:47:31 +0000
Certificate not after:    Wed 06 Jan 2027 23:52:31 +0000
Subordinate resources:    IP: 210.79.142.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c0:cb:5f:6a:73:a0:36:5c:80:0f:8c:ab:d4:30:0e:24:18:71:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  7 23:47:31 2026 GMT
            Not After : Jan  6 23:52:31 2027 GMT
        Subject: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:06:39:06:87:dc:2e:e8:de:c3:cb:6e:b4:
                    b3:c6:62:fb:2d:6a:9c:cb:62:04:72:e8:78:b7:5f:
                    1c:f1:44:27:90:5a:fd:a3:7a:c3:ec:04:9f:33:ef:
                    69:5e:3d:05:70:63:76:99:da:41:3e:e4:0c:6a:9d:
                    63:de:aa:4f:8c:dd:75:07:61:9f:78:f0:7c:47:10:
                    75:d0:47:90:56:f1:76:49:91:dc:68:65:59:01:eb:
                    ba:37:fd:2f:bd:82:d1:01:16:01:54:71:38:b1:28:
                    8b:27:eb:9c:37:48:7d:30:11:0d:80:18:6a:11:c2:
                    de:cf:92:db:56:d5:24:5c:02:2f:d2:47:42:4e:2a:
                    95:28:05:4c:ae:4a:ed:c8:d7:0b:aa:de:94:8c:9b:
                    f9:3c:6a:db:fa:5a:ea:01:13:84:44:d8:35:19:f9:
                    5e:b0:ef:ae:79:f0:60:31:7b:de:cc:4e:46:44:78:
                    3b:40:0e:62:0c:04:32:18:e5:88:2b:d0:07:52:98:
                    2c:8a:81:1e:36:0d:40:ca:a1:c6:15:1d:5a:70:aa:
                    15:8a:63:b9:07:bd:6a:6a:05:b9:75:a1:51:27:0f:
                    5d:35:01:a5:b6:b2:64:1d:fc:4e:d7:3d:65:35:68:
                    06:d0:53:af:7c:e2:a3:9c:e5:a6:f7:b4:b0:3c:34:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:59:f9:ca:24:69:42:8e:5e:27:dd:d6:51:f5:47:db:aa:
         d2:28:fc:9e:f2:cf:0f:2a:9e:b8:f1:2d:26:a3:19:35:ed:62:
         1b:8c:9e:fd:b5:99:b1:10:8f:1f:d8:a6:13:2e:5d:f1:3b:cb:
         3c:06:df:c4:b5:c3:0a:7e:2c:6a:89:c9:ce:e9:ad:c3:57:5a:
         2b:f7:72:f5:67:b3:24:d9:5d:9f:59:b4:b1:5b:f8:48:90:35:
         1a:0b:69:be:da:47:92:e2:09:99:7c:a5:7f:e6:9b:85:5f:64:
         62:c0:41:e9:ae:5e:dd:2e:a5:35:b3:fd:41:b5:f6:48:41:35:
         45:a9:ff:a0:e9:57:20:f2:92:90:26:98:55:11:4b:ca:19:32:
         6f:38:44:1f:1f:4c:f5:7f:83:52:c8:c0:b2:52:c4:65:1b:a2:
         fb:e4:bd:b1:88:ec:7b:a4:2b:d5:43:dc:40:a7:f6:09:81:d9:
         54:e7:d9:8a:38:bf:fc:87:88:d4:57:af:34:04:be:81:23:49:
         b2:7f:2f:22:87:43:62:49:f6:11:37:26:fe:44:d2:bd:8d:14:
         3f:1a:4f:27:b1:4b:46:d1:bd:5b:b9:01:6f:75:a6:ac:64:66:
         16:81:30:0a:5d:36:89:8b:8d:ee:d8:9e:4a:b0:66:6d:dd:ac:
         73:bf:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:55 2026 by rpki-client