This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer (raw, json) Hash identifier: TZwYsTo7R4ZGDDFT13bYTzA2Ruoh+hX8FqArDFKz/n0= Subject key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F31FB7C1B226CCCAFDD1B9583305EAD928A1CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft caRepository: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 22:52:48 +0000 Certificate not after: Mon 18 Jan 2027 22:57:48 +0000 Subordinate resources: IP: 103.130.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:31:fb:7c:1b:22:6c:cc:af:dd:1b:95:83:30:5e:ad:92:8a:1c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 19 22:52:48 2026 GMT Not After : Jan 18 22:57:48 2027 GMT Subject: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:b6:b9:9b:14:1b:57:b5:ec:4c:e9:52:eb: 60:b1:7d:ad:51:75:89:ef:5a:48:06:e5:90:3a:03: 50:60:d8:31:f4:a1:30:0d:05:90:33:4a:d5:bb:24: b7:e4:e3:24:84:e2:f1:9d:f4:45:a0:7f:30:c1:c0: f5:61:70:71:97:0f:ff:b5:f5:83:ea:e8:74:8e:4b: e3:c1:f8:36:70:3a:af:f0:3a:e2:39:4e:29:93:7c: f5:83:cf:47:a4:fb:9e:1d:ad:01:ff:ac:7a:9a:a3: ec:09:a6:6b:66:79:b3:b5:ad:77:7a:7a:95:87:0e: d3:c2:22:34:3a:de:3c:7a:f4:1e:69:71:aa:14:32: 61:bb:ef:cd:df:de:f3:99:9f:ad:9d:77:13:f5:97: 89:bf:84:f4:b6:51:cf:a8:77:10:4e:65:e1:98:5f: a2:4a:af:c1:41:68:58:80:63:6a:13:97:c1:41:a3: 0a:cb:e0:60:e7:45:4c:64:d9:5e:10:b3:f5:e2:d2: d7:9c:4e:8f:1a:e4:97:a0:cf:64:5c:52:40:0a:6d: e6:55:b0:56:13:c2:aa:0c:0e:05:3b:57:4a:19:ac: 64:c1:ed:9c:04:c0:73:53:10:30:3b:50:15:09:48: 91:42:46:e9:68:01:e5:13:e5:1e:ea:94:45:c8:35: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.116.0/23 Signature Algorithm: sha256WithRSAEncryption 90:f9:ed:a0:bc:81:6b:ec:88:d7:73:4f:02:1e:ea:bc:e5:7b: a2:ca:17:a4:06:91:fc:34:27:b3:ed:d3:c3:11:ab:f6:b8:70: 06:67:4d:12:58:4e:0c:43:eb:61:e8:92:a1:e9:4b:40:82:c5: b9:d0:fc:56:ce:93:f6:58:d7:81:5f:37:02:8e:43:e0:db:1d: 83:bf:df:2b:8d:84:e0:03:f7:e9:75:50:ba:4b:7a:16:1c:46: 08:35:28:8e:30:3b:7c:d2:aa:ea:41:3d:09:8d:8c:02:2b:b7: ef:b4:d8:14:c8:88:f2:57:bf:44:6c:9c:d8:53:c4:bd:b6:b7: d4:c1:ab:81:38:b4:48:73:fc:5a:c8:7f:b3:d4:cb:43:6d:2e: 55:a2:89:36:aa:0a:7f:e4:38:13:d9:11:ea:13:50:bb:2f:8c: 43:9a:7b:08:46:a5:a1:bf:1e:8a:7e:68:85:84:8b:46:2b:1e: 91:c4:49:42:26:e1:ce:3f:09:25:2b:19:e1:60:34:c3:bf:41: 88:04:92:95:5a:7f:fd:2e:97:98:f6:f4:92:da:60:64:e4:29: a9:bb:6f:b3:c0:6c:ab:73:ad:0c:f0:43:6f:da:42:5c:8c:3b: ac:72:3c:6c:89:91:d0:aa:6a:45:64:06:1b:a8:fa:c6:21:19: 60:13:87:fb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDzH7fBsibMyv3RuVgzBerZKKHKMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExOTIyNTI0OFoX DTI3MDExODIyNTc0OFowMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0 Q0Q0MTZEMzI4MkFEREZCQkZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnPtrmbFBtXtexM6VLrYLF9rVF1ie9aSAblkDoDUGDYMfShMA0FkDNK1bsk t+TjJITi8Z30RaB/MMHA9WFwcZcP/7X1g+rodI5L48H4NnA6r/A64jlOKZN89YPP R6T7nh2tAf+sepqj7Amma2Z5s7Wtd3p6lYcO08IiNDrePHr0HmlxqhQyYbvvzd/e 85mfrZ13E/WXib+E9LZRz6h3EE5l4ZhfokqvwUFoWIBjahOXwUGjCsvgYOdFTGTZ XhCz9eLS15xOjxrkl6DPZFxSQApt5lWwVhPCqgwOBTtXShmsZMHtnATAc1MQMDtQ FQlIkUJG6WgB5RPlHuqURcg1/0cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNlH6L6uAaZxDjJM1BbTKCrd+7/pMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmZmRjMmI3 LWYzMDUtNGUwNy1hYWM1LTQ2OWU5MTEzYjBiNC8wL0Q5NDdFOEJFQUUwMUE2NzEw RTMyNENENDE2RDMyODJBRERGQkJGRTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFngnQwDQYJKoZIhvcNAQELBQADggEBAJD57aC8gWvsiNdzTwIe6rzle6LKF6QG kfw0J7Pt08MRq/a4cAZnTRJYTgxD62HokqHpS0CCxbnQ/FbOk/ZY14FfNwKOQ+Db HYO/3yuNhOAD9+l1ULpLehYcRgg1KI4wO3zSqupBPQmNjAIrt++02BTIiPJXv0Rs nNhTxL22t9TBq4E4tEhz/FrIf7PUy0NtLlWiiTaqCn/kOBPZEeoTULsvjEOaewhG paG/Hop+aIWEi0YrHpHESUIm4c4/CSUrGeFgNMO/QYgEkpVaf/0ul5j29JLaYGTk Kam7b7PAbKtzrQzwQ2/aQlyMO6xyPGyJkdCqakVkBhuo+sYhGWATh/s= -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:32 2026 by rpki-client