This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer File: C42304B7D0E216E2F73305D25EBA185E1A321586.cer (raw, json) Hash identifier: 8/daAK+bbG8psrm9AKDCvye8oapqd9y8dqKCsL5GJiU= Subject key identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6850A3212436CC332084E884C16149AA1B7429B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft caRepository: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 Jan 2026 06:48:59 +0000 Certificate not after: Wed 20 Jan 2027 06:53:59 +0000 Subordinate resources: IP: 114.141.56.0/21 IP: 2403:af00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:50:a3:21:24:36:cc:33:20:84:e8:84:c1:61:49:aa:1b:74:29:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 21 06:48:59 2026 GMT Not After : Jan 20 06:53:59 2027 GMT Subject: CN=C42304B7D0E216E2F73305D25EBA185E1A321586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:09:3e:ca:3f:c8:1b:28:c6:d5:34:cf:c7: ff:64:1e:3a:76:27:6b:f7:b1:20:86:0d:a3:20:c9: d8:aa:54:46:1c:a6:a5:37:94:a5:fe:0e:1f:16:d6: b5:48:a9:44:4d:42:79:ba:93:92:66:f3:a3:5e:22: ef:84:60:06:af:4e:15:47:0b:7a:09:d7:b9:03:68: 21:52:a8:da:f6:48:bf:7e:e7:fd:e2:b4:3f:fa:6a: 78:4f:ba:08:2a:3a:af:96:b5:66:8f:56:60:d4:48: 80:5c:1a:ee:3c:7e:16:a6:9a:70:d8:3c:6b:64:a5: 9e:de:7a:12:00:ef:34:83:cf:11:e6:9b:cc:43:a5: 1f:29:4f:5f:1a:a0:68:70:e4:17:9a:f0:8c:0f:16: f6:2c:96:70:9a:db:5e:08:ca:07:25:97:b2:33:00: e8:1f:b2:3c:6d:41:3b:45:3e:23:53:26:f3:03:16: bd:ec:73:74:dd:d0:f1:e9:ac:f2:ef:6e:4d:b3:8a: a0:de:22:7a:70:ca:9e:50:4e:fe:ac:f7:bc:19:3c: 45:ef:e5:55:11:eb:5c:7d:bf:26:35:3c:b1:25:88: 1b:c9:d0:e8:48:26:b4:a0:96:34:8d:b5:4a:c0:bc: 4a:a5:f9:69:b1:ca:ac:0d:ae:2f:7a:5b:19:f4:4f: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.141.56.0/21 IPv6: 2403:af00::/32 Signature Algorithm: sha256WithRSAEncryption 9b:8a:a0:a5:70:e2:08:5d:14:16:d3:ed:3f:c9:03:93:a8:f4: a9:f2:06:9b:4c:34:e2:a2:da:04:b3:8b:b1:b0:9b:63:0c:96: a0:f9:60:28:53:ff:da:1a:c2:a9:b7:d9:34:31:b3:5a:b5:ac: 34:05:ea:ed:48:83:50:3a:95:0c:fd:b3:32:00:90:4d:c8:bb: f0:1d:1c:61:b1:2f:9b:8c:31:92:66:8f:64:66:e3:15:9f:52: 92:fd:cd:81:a7:bc:1b:9e:8a:b2:6d:16:84:bd:43:cb:0c:2b: f8:e2:56:d9:bb:4d:eb:13:ef:04:30:3a:80:7a:8e:a5:8a:2b: 49:e5:a1:56:3e:ea:36:99:9e:47:09:22:97:86:bb:55:8b:6a: 07:7a:af:2e:25:dc:18:e2:72:b9:2b:0d:d3:bf:2e:1b:93:3d: dc:5f:e6:65:2f:4f:c9:c3:1d:c7:ae:27:57:3c:43:ca:fe:d9: 7f:40:ad:0b:a4:f5:d3:2e:6f:c8:d5:bc:c1:70:54:66:c1:70: 47:59:50:ae:3b:ab:d6:5a:01:21:21:e5:f1:a6:cd:01:29:5b: a6:a2:b7:52:4c:16:16:de:a3:43:47:fe:06:0d:c3:c2:f1:23: 92:d9:c4:5e:b9:cb:00:c9:9e:1f:b4:c1:48:c1:46:70:91:2d: 05:c8:b5:5d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUaFCjISQ2zDMghOiEwWFJqht0KbMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyMTA2NDg1OVoX DTI3MDEyMDA2NTM1OVowMzExMC8GA1UEAxMoQzQyMzA0QjdEMEUyMTZFMkY3MzMw NUQyNUVCQTE4NUUxQTMyMTU4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxZCT7KP8gbKMbVNM/H/2QeOnYna/exIIYNoyDJ2KpURhympTeUpf4OHxbW tUipRE1CebqTkmbzo14i74RgBq9OFUcLegnXuQNoIVKo2vZIv37n/eK0P/pqeE+6 CCo6r5a1Zo9WYNRIgFwa7jx+FqaacNg8a2Slnt56EgDvNIPPEeabzEOlHylPXxqg aHDkF5rwjA8W9iyWcJrbXgjKByWXsjMA6B+yPG1BO0U+I1Mm8wMWvexzdN3Q8ems 8u9uTbOKoN4ienDKnlBO/qz3vBk8Re/lVRHrXH2/JjU8sSWIG8nQ6EgmtKCWNI21 SsC8SqX5abHKrA2uL3pbGfRP+/sCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMQjBLfQ4hbi9zMF0l66GF4aMhWGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NWE5NmI4MS1kMTI4LTQ5NjUtYTE3Ny1mYWNmMzQxZTdmODkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1YTk2Yjgx LWQxMjgtNDk2NS1hMTc3LWZhY2YzNDFlN2Y4OS8wL0M0MjMwNEI3RDBFMjE2RTJG NzMzMDVEMjVFQkExODVFMUEzMjE1ODYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BANyjTgwDQQCAAIwBwMFACQDrwAwDQYJKoZIhvcNAQELBQADggEBAJuKoKVw4ghd FBbT7T/JA5Oo9KnyBptMNOKi2gSzi7Gwm2MMlqD5YChT/9oawqm32TQxs1q1rDQF 6u1Ig1A6lQz9szIAkE3Iu/AdHGGxL5uMMZJmj2Rm4xWfUpL9zYGnvBueirJtFoS9 Q8sMK/jiVtm7TesT7wQwOoB6jqWKK0nloVY+6jaZnkcJIpeGu1WLagd6ry4l3Bji crkrDdO/LhuTPdxf5mUvT8nDHceuJ1c8Q8r+2X9ArQuk9dMub8jVvMFwVGbBcEdZ UK47q9ZaASEh5fGmzQEpW6ait1JMFhbeo0NH/gYNw8LxI5LZxF65ywDJnh+0wUjB RnCRLQXItV0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:43 2026 by rpki-client