This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer File: D1553F19BBD3B70719E720005FDB3145CC910A1F.cer (raw, json) Hash identifier: EX6/YWYW3VmI7J05QanysCKqwKxUj9r20abf1js0LH4= Subject key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62F710BACD5D6D08E1CB767468CD540948568D36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft caRepository: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 19 Nov 2025 12:38:13 +0000 Certificate not after: Wed 18 Nov 2026 12:43:13 +0000 Subordinate resources: IP: 103.183.58.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f7:10:ba:cd:5d:6d:08:e1:cb:76:74:68:cd:54:09:48:56:8d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 19 12:38:13 2025 GMT Not After : Nov 18 12:43:13 2026 GMT Subject: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:42:01:ee:53:80:86:6c:06:d4:1f:34:32: 13:72:1c:71:77:6f:98:30:26:9e:11:9a:39:8a:ac: 97:1e:89:3e:29:b3:bc:60:ed:fa:19:52:a8:09:e7: 77:72:98:dc:d3:b5:7a:14:24:ba:2f:a7:c9:60:71: df:af:70:18:25:58:64:d0:17:3a:31:d9:e8:95:8b: 3a:b1:c2:0c:62:aa:7d:04:93:1e:4b:d5:ec:8f:f2: 59:95:9f:97:ba:e9:6c:b5:58:ed:b5:eb:57:4f:92: 89:81:06:86:47:5f:e7:6c:86:fe:ef:2f:69:67:11: 40:d7:d2:8c:47:9e:e0:7f:30:73:e8:4a:94:cb:a8: 60:20:e2:53:0d:66:ec:ef:c4:1d:fd:22:36:76:39: 89:65:1c:ce:55:14:be:51:76:d5:c7:ed:12:c4:5e: 00:4d:a2:c7:0b:7b:80:85:10:63:e7:63:18:f4:a5: 2e:0f:71:3f:b7:7e:ed:5b:7e:fa:4f:90:9f:75:f5: e0:16:0b:5b:38:53:56:d9:25:34:52:50:fc:3f:c2: 0d:73:34:2d:39:94:9a:23:42:f0:ad:2d:b0:6f:53: 17:03:1a:c2:ec:8c:39:56:06:bc:14:dd:95:17:03: e9:e3:6e:fe:2b:4a:8e:ac:cd:47:c7:66:14:14:a0: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.58.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:45:05:69:18:5d:65:d7:e5:5a:b1:f2:bb:6f:73:4b:7d:d8: f4:9d:3c:63:8f:c3:c6:7f:4a:f2:6c:3d:d2:5b:b6:e1:99:96: e1:b7:b6:bb:92:0f:4c:c1:45:66:76:96:7a:43:9f:38:a2:3a: 6d:7a:6d:aa:b1:5d:0c:6b:60:b2:fc:a1:a5:93:ef:64:19:b6: 7c:ae:22:3e:17:22:8e:d3:e6:5a:dd:ab:7e:d0:e5:b7:c6:64: 51:d7:38:60:19:87:bb:04:e1:57:01:c2:b2:bb:81:4b:6f:77: e2:ed:cd:93:67:df:1a:d0:64:13:9e:76:42:f2:90:c5:21:9e: cf:05:83:e9:7e:bb:2b:e0:cf:db:7b:5c:55:9c:71:e1:3d:e4: ea:fe:fd:f2:c8:01:69:69:be:25:34:df:e3:a0:a4:41:9c:c4: 65:de:dc:23:d2:cc:40:2f:3c:51:2d:e6:8a:c5:7b:e0:43:d5: 22:22:f1:db:6a:df:7d:f4:79:11:d2:8e:1f:e0:2f:85:31:b2: 84:01:45:79:66:c5:12:57:10:df:70:a4:d1:2a:d3:82:2a:7f: 36:86:76:7a:a1:a5:bf:34:a3:b4:94:e4:47:9a:e5:8e:ef:71: 8c:32:82:3c:94:51:c0:e8:e5:89:f0:98:9d:8d:43:b2:60:65: 96:56:b9:9c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYvcQus1dbQjhy3Z0aM1UCUhWjTYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExOTEyMzgxM1oX DTI2MTExODEyNDMxM1owMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcy MDAwNUZEQjMxNDVDQzkxMEExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMe3QgHuU4CGbAbUHzQyE3IccXdvmDAmnhGaOYqslx6JPimzvGDt+hlSqAnn d3KY3NO1ehQkui+nyWBx369wGCVYZNAXOjHZ6JWLOrHCDGKqfQSTHkvV7I/yWZWf l7rpbLVY7bXrV0+SiYEGhkdf52yG/u8vaWcRQNfSjEee4H8wc+hKlMuoYCDiUw1m 7O/EHf0iNnY5iWUczlUUvlF21cftEsReAE2ixwt7gIUQY+djGPSlLg9xP7d+7Vt+ +k+Qn3X14BYLWzhTVtklNFJQ/D/CDXM0LTmUmiNC8K0tsG9TFwMawuyMOVYGvBTd lRcD6eNu/itKjqzNR8dmFBSgCmECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNFVPxm707cHGecgAF/bMUXMkQofMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5OWI2MDRm LTE1NzgtNGEwYi04ZjdhLTU4ZDlmMTNjOTc2OS8wL0QxNTUzRjE5QkJEM0I3MDcx OUU3MjAwMDVGREIzMTQ1Q0M5MTBBMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntzowDQYJKoZIhvcNAQELBQADggEBAF9FBWkYXWXX5Vqx8rtvc0t92PSdPGOP w8Z/SvJsPdJbtuGZluG3truSD0zBRWZ2lnpDnziiOm16baqxXQxrYLL8oaWT72QZ tnyuIj4XIo7T5lrdq37Q5bfGZFHXOGAZh7sE4VcBwrK7gUtvd+LtzZNn3xrQZBOe dkLykMUhns8Fg+l+uyvgz9t7XFWcceE95Or+/fLIAWlpviU03+OgpEGcxGXe3CPS zEAvPFEt5orFe+BD1SIi8dtq3330eRHSjh/gL4UxsoQBRXlmxRJXEN9wpNEq04Iq fzaGdnqhpb80o7SU5Eea5Y7vcYwygjyUUcDo5YnwmJ2NQ7JgZZZWuZw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:55 2025 by rpki-client