This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer
File:                     D018BF43793F56145B87233DD668DE3BDEEFFE13.cer (raw, json)
Hash identifier:          dT5dZXZe8eRtSWH0AsOBi3XAfsohOuwtNmP5+KSKVm4=
Subject key identifier:   D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3ABA379C2DEF0F21179B23D672AFEE40F964F833
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 24 Jan 2026 08:34:01 +0000
Certificate not after:    Sat 23 Jan 2027 08:39:01 +0000
Subordinate resources:    IP: 103.84.192.0/22
                          IP: 2001:df0:3500::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:37:9c:2d:ef:0f:21:17:9b:23:d6:72:af:ee:40:f9:64:f8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 24 08:34:01 2026 GMT
            Not After : Jan 23 08:39:01 2027 GMT
        Subject: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:1f:6a:9a:5c:57:a1:c7:e6:c7:b8:6e:d2:
                    0f:16:8d:b7:0e:37:48:9a:48:93:bd:7b:31:b3:1a:
                    30:07:62:ac:c9:3a:3b:c4:ca:ce:4b:4e:0d:87:bf:
                    cf:17:a3:e7:e9:bc:a6:0b:43:7f:ed:c3:df:a6:14:
                    aa:ee:35:45:2b:62:cc:4f:f5:c0:b4:8e:89:94:0c:
                    1c:a1:cc:54:57:b6:f3:de:ae:08:6a:2d:eb:3c:d7:
                    14:67:1f:83:84:0f:de:ae:eb:9c:6e:b8:66:63:2c:
                    7b:78:be:1d:da:b1:01:ad:92:9f:aa:36:e1:ee:c2:
                    68:51:14:99:42:64:72:c8:df:d2:cd:c9:68:7a:a0:
                    09:f4:20:12:bb:c1:07:c3:01:15:1d:d9:70:cc:9e:
                    02:d3:cd:de:12:a2:b3:6b:87:97:7b:ca:f9:36:47:
                    e6:0c:05:6f:e5:de:1d:23:d9:3e:5f:69:66:b7:74:
                    f2:97:55:71:8d:5b:ee:42:2c:77:db:cf:dc:80:bd:
                    1e:f6:81:4f:e5:07:2f:03:63:9f:c1:e8:08:75:ac:
                    f1:a1:5c:65:88:48:c8:b5:59:a2:6e:fe:c3:8b:47:
                    de:69:02:47:57:73:30:8f:46:93:37:20:57:e2:fb:
                    54:f7:c6:73:cc:8f:44:cc:fe:e3:ca:e5:7e:07:4b:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.192.0/22
                IPv6:
                  2001:df0:3500::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:9f:27:41:db:86:db:ee:14:e1:c1:7c:46:c9:c5:62:8d:
         93:b6:b1:91:90:17:76:f9:aa:02:9c:76:80:4d:2b:49:29:1a:
         a2:c5:99:8c:f1:d5:c1:81:e6:6f:50:81:0f:5f:6f:a1:3d:81:
         7c:a0:c7:b4:b6:ff:e4:f0:1e:1f:cd:62:49:d0:ee:eb:7a:ae:
         2b:30:ed:4f:e3:9b:11:6b:e2:35:9a:b1:43:27:19:48:d3:e7:
         9a:74:c8:a9:df:7d:08:75:d8:7b:d0:83:ab:9a:d4:89:48:4b:
         e7:a9:91:22:a8:f8:c2:18:06:2d:1b:95:95:75:aa:77:e0:e9:
         85:c3:a0:e0:22:ee:d8:85:a6:5b:74:23:54:34:c8:b2:7b:a4:
         e7:99:26:30:dd:fb:3a:65:9c:b8:58:ef:25:e1:72:5a:20:18:
         6e:da:8c:fc:a2:50:47:3e:ef:96:4c:6c:07:f2:7a:0f:87:cf:
         af:56:c9:87:9c:48:ce:bd:2f:9e:c5:31:07:4a:fe:57:c4:6c:
         41:64:cb:a0:00:0c:53:73:85:13:5b:c7:b5:86:c0:70:bd:97:
         b7:dc:bd:8b:0e:83:70:ce:95:f2:dd:34:ac:98:18:50:08:cc:
         00:b3:b2:70:79:96:b1:57:6a:de:3a:75:9b:ad:66:e7:57:4d:
         46:46:1b:ec
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUOro3nC3vDyEXmyPWcq/uQPlk+DMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyNDA4MzQwMVoX
DTI3MDEyMzA4MzkwMVowMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcy
MzNERDY2OERFM0JERUVGRkUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANx8H2qaXFehx+bHuG7SDxaNtw43SJpIk717MbMaMAdirMk6O8TKzktODYe/
zxej5+m8pgtDf+3D36YUqu41RStizE/1wLSOiZQMHKHMVFe2896uCGot6zzXFGcf
g4QP3q7rnG64ZmMse3i+HdqxAa2Sn6o24e7CaFEUmUJkcsjf0s3JaHqgCfQgErvB
B8MBFR3ZcMyeAtPN3hKis2uHl3vK+TZH5gwFb+XeHSPZPl9pZrd08pdVcY1b7kIs
d9vP3IC9HvaBT+UHLwNjn8HoCHWs8aFcZYhIyLVZom7+w4tH3mkCR1dzMI9Gkzcg
V+L7VPfGc8yPRMz+48rlfgdLxFUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFNAYv0N5P1YUW4cjPdZo3jve7/4TMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by84OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5YWQzMTRh
LTc2NTctNDkwMS1iN2RkLTNiOWE5YmZjNmU5Yy8wL0QwMThCRjQzNzkzRjU2MTQ1
Qjg3MjMzREQ2NjhERTNCREVFRkZFMTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAJnVMAwDwQCAAIwCQMHACABDfA1ADANBgkqhkiG9w0BAQsFAAOCAQEAH0+fJ0Hb
htvuFOHBfEbJxWKNk7axkZAXdvmqApx2gE0rSSkaosWZjPHVwYHmb1CBD19voT2B
fKDHtLb/5PAeH81iSdDu63quKzDtT+ObEWviNZqxQycZSNPnmnTIqd99CHXYe9CD
q5rUiUhL56mRIqj4whgGLRuVlXWqd+DphcOg4CLu2IWmW3QjVDTIsnuk55kmMN37
OmWcuFjvJeFyWiAYbtqM/KJQRz7vlkxsB/J6D4fPr1bJh5xIzr0vnsUxB0r+V8Rs
QWTLoAAMU3OFE1vHtYbAcL2Xt9y9iw6DcM6V8t00rJgYUAjMALOycHmWsVdq3jp1
m61m51dNRkYb7A==
-----END CERTIFICATE-----