This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer (raw, json) Hash identifier: PTzI/YT2Mm+46KDmBipMPH/7qha5IbV/GQ9Q3nbB320= Subject key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29BA615B9BD41795E1D401104BDD54F249A8C673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft caRepository: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 26 Nov 2025 09:17:52 +0000 Certificate not after: Wed 25 Nov 2026 09:22:52 +0000 Subordinate resources: IP: 103.183.250.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ba:61:5b:9b:d4:17:95:e1:d4:01:10:4b:dd:54:f2:49:a8:c6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 26 09:17:52 2025 GMT Not After : Nov 25 09:22:52 2026 GMT Subject: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:df:7a:74:b2:08:6f:fd:3c:2e:37:13:e6:0b: c1:48:ab:ec:72:c8:5d:25:70:c2:35:0b:2a:e4:68: ef:cd:73:c4:0a:cc:93:71:89:99:b6:d5:10:e3:56: f0:41:1b:96:f4:b3:57:02:29:3a:e1:52:94:cf:88: 30:fd:3c:0b:26:0f:de:f9:05:07:84:d6:ed:e8:00: a2:37:f7:21:26:a8:ef:06:92:3e:c1:77:d2:cf:6a: 82:d3:99:78:1e:f4:7c:ca:e4:6d:00:62:76:47:54: 1c:ac:d5:16:e1:72:31:4a:00:da:07:5f:b5:99:d3: 15:a7:2b:79:2e:80:28:94:7f:4f:56:b0:b4:18:cd: d0:b3:ce:bf:56:76:aa:70:74:ac:14:f2:7f:02:8b: c4:6d:f9:22:35:cb:c4:15:19:3f:44:50:34:ba:cc: d5:ae:81:02:74:d7:5e:3d:88:3d:98:84:7e:de:71: 25:4c:ac:fc:1d:44:c9:bb:8e:76:4e:33:af:25:a3: 38:40:f1:8f:e2:41:b5:51:47:98:28:11:7e:3c:60: 03:5c:d1:4f:94:5a:56:4e:79:83:8c:cf:c3:19:57: eb:f9:9b:5f:df:7f:62:be:45:ad:7b:fe:3f:4b:02: 24:62:fb:68:e5:6d:28:9a:1d:e9:c0:bc:c7:68:85: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.250.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:ec:0c:65:7f:3e:74:2d:c8:f3:b3:b6:64:ab:65:0a:d5:c4: 6b:7d:73:ca:10:aa:f6:38:4a:e9:2a:66:c9:22:8d:a2:37:b7: 01:3d:26:e5:e0:ba:db:86:f2:31:8f:46:d8:5c:f9:fd:30:40: 75:5d:87:c6:8f:93:01:e6:5b:76:6a:0f:55:1a:5b:7e:fe:09: 76:0e:fc:a1:80:9e:63:20:fe:8f:32:ff:d4:0b:52:57:f8:31: 39:ca:c2:59:38:23:1b:b4:6d:d6:2a:f8:80:fa:17:9b:f5:c8: 85:cc:78:7f:0e:9d:39:d6:d8:09:e7:39:7d:7c:4f:1f:c7:ca: 72:b6:e1:e3:53:46:23:14:d5:0d:3e:a5:33:48:f2:65:0a:ed: b6:f9:22:0c:43:68:5d:11:66:b8:8d:2a:98:d7:ae:74:05:2b: 3f:81:34:42:71:61:b4:5c:72:f0:60:08:a0:99:10:7d:99:24: 5b:f9:a6:7a:c4:99:ab:6e:46:f1:08:7e:bf:23:12:ca:25:4e: d4:72:37:01:78:ca:99:34:39:b6:19:60:4e:cc:fa:de:95:59: ff:85:8a:a1:6f:8b:ad:1f:7d:1f:a7:0e:13:2c:bb:7b:ac:dc: 3b:97:7d:1e:10:10:66:b1:b2:7b:51:e5:df:2c:98:24:d8:22: ad:8e:f5:85 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKbphW5vUF5Xh1AEQS91U8kmoxnMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNjA5MTc1MloX DTI2MTEyNTA5MjI1MlowMzExMC8GA1UEAxMoRDlEMDczMERCNTEyOTVGRUM1QkQ0 ODBDREQ0MkI1RTg1MTdDOEZEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOnfenSyCG/9PC43E+YLwUir7HLIXSVwwjULKuRo781zxArMk3GJmbbVEONW 8EEblvSzVwIpOuFSlM+IMP08CyYP3vkFB4TW7egAojf3ISao7waSPsF30s9qgtOZ eB70fMrkbQBidkdUHKzVFuFyMUoA2gdftZnTFacreS6AKJR/T1awtBjN0LPOv1Z2 qnB0rBTyfwKLxG35IjXLxBUZP0RQNLrM1a6BAnTXXj2IPZiEft5xJUys/B1EybuO dk4zryWjOEDxj+JBtVFHmCgRfjxgA1zRT5RaVk55g4zPwxlX6/mbX99/Yr5FrXv+ P0sCJGL7aOVtKJod6cC8x2iFzyECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNnQcw21EpX+xb1IDN1CtehRfI/bMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YWUyYjhiMy1kZWM4LTQxY2YtYTE2ZC1lMTE3MTU2MWQ3MjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZTJiOGIz LWRlYzgtNDFjZi1hMTZkLWUxMTcxNTYxZDcyNS8wL0Q5RDA3MzBEQjUxMjk1RkVD NUJENDgwQ0RENDJCNUU4NTE3QzhGREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnt/owDQYJKoZIhvcNAQELBQADggEBAArsDGV/PnQtyPOztmSrZQrVxGt9c8oQ qvY4SukqZskijaI3twE9JuXgutuG8jGPRthc+f0wQHVdh8aPkwHmW3ZqD1UaW37+ CXYO/KGAnmMg/o8y/9QLUlf4MTnKwlk4Ixu0bdYq+ID6F5v1yIXMeH8OnTnW2Ann OX18Tx/HynK24eNTRiMU1Q0+pTNI8mUK7bb5IgxDaF0RZriNKpjXrnQFKz+BNEJx YbRccvBgCKCZEH2ZJFv5pnrEmatuRvEIfr8jEsolTtRyNwF4ypk0ObYZYE7M+t6V Wf+FiqFvi60ffR+nDhMsu3us3DuXfR4QEGaxsntR5d8smCTYIq2O9YU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:59:16 2025 by rpki-client