This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer (raw, json)
Hash identifier: on9iM6qpTMC6y3sDAzTRIEV8uFQaJMwzRmM4ExfVvFs=
Subject key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1BFEBE779EA354716C92405B744F3A0AE18BB858
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
caRepository: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 15 Jan 2026 22:18:45 +0000
Certificate not after: Thu 14 Jan 2027 22:23:45 +0000
Subordinate resources: IP: 103.183.6.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fe:be:77:9e:a3:54:71:6c:92:40:5b:74:4f:3a:0a:e1:8b:b8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 15 22:18:45 2026 GMT
Not After : Jan 14 22:23:45 2027 GMT
Subject: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:7c:9e:05:cb:40:5c:4a:70:34:c4:1b:67:
76:cf:02:ba:c4:a0:ef:52:14:3a:fa:dc:97:69:24:
3a:12:43:e6:95:38:e7:8e:38:be:76:5f:e6:87:96:
0a:3e:6d:ef:b8:b4:f5:00:43:b1:64:49:61:2f:c6:
86:2c:e7:b5:85:65:d2:2a:66:c7:62:cd:ad:f6:86:
47:0b:84:c9:c4:4e:c8:4f:4a:0c:08:47:2a:d9:87:
8a:f0:b0:cd:1e:87:ea:13:ca:2b:77:3c:94:3a:6a:
a9:08:fc:6f:5d:f8:da:0f:4a:b6:ad:3d:4f:fd:dd:
64:b8:df:e2:fa:84:f4:a9:08:00:88:7b:51:6a:49:
f0:74:d2:d1:75:3b:97:7b:e0:91:b2:38:2e:b1:39:
1b:4c:4f:55:39:c1:f9:35:29:d9:16:91:c3:f3:d5:
63:6e:ca:b5:13:bb:8e:71:d0:fb:81:ca:fa:88:8b:
76:28:25:c1:60:4c:1a:44:7f:59:13:60:8b:75:50:
0a:3e:96:ae:fc:8b:81:fd:fa:7e:d5:79:e2:e4:8c:
3a:3e:3f:54:a9:60:87:af:69:a4:d8:1d:76:06:9b:
bd:40:e5:56:d7:0e:53:f1:69:a4:07:e7:b1:5c:50:
36:52:95:a9:f8:cf:71:f0:0d:2f:3b:8f:25:f0:ed:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.183.6.0/23
Signature Algorithm: sha256WithRSAEncryption
86:9f:05:46:56:2e:f3:28:3f:24:d3:4d:28:59:86:6f:a8:5c:
c3:1b:a5:2e:1d:b3:27:a0:d5:63:50:74:fb:be:1b:76:b2:de:
cd:6f:c1:b5:9b:05:21:8f:7d:32:0a:2e:a0:19:63:7c:61:a9:
1d:09:17:90:0f:13:d1:9a:da:b7:c1:ea:65:db:11:01:68:0f:
74:33:ca:de:9d:be:e7:5e:86:8c:0f:40:71:cc:b8:2f:75:1c:
aa:ed:9b:cf:d8:15:b4:3b:79:09:69:9e:8c:dc:40:f3:0d:b3:
a6:d6:39:84:f6:9f:e3:ba:3f:59:3d:40:96:42:f9:54:aa:14:
d4:8d:76:a5:0d:a2:62:c7:05:86:b9:c5:36:9c:8a:ce:4c:3e:
59:c4:21:cd:2c:1e:9a:e2:06:74:0d:32:e0:ba:0c:9d:b9:d7:
30:c7:69:b1:6a:e4:f5:f8:cb:8d:22:7f:29:af:4b:c6:25:61:
96:73:a9:c1:ac:f2:5b:28:f9:44:bb:19:6a:99:c4:40:25:8b:
e1:35:78:4a:89:d1:91:fc:8e:da:ec:2e:1b:84:fc:e4:2a:92:
f1:cd:55:7f:7b:a5:e7:07:a0:f6:6f:88:cd:dd:37:cd:b4:9a:
51:81:03:13:7e:38:cc:a8:31:28:3a:e5:80:3f:b9:cc:44:5a:
27:b1:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:06:27 2026 by rpki-client