This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer File: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer (raw, json) Hash identifier: Vi+xNgNpKZp2G716DYzpSU+/LBDcaTkH88ABzkyMTD8= Subject key identifier: EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0193386FAA8561BAFD93FD94050C1F04F59E46B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft caRepository: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 24 Dec 2025 15:26:18 +0000 Certificate not after: Wed 23 Dec 2026 15:31:18 +0000 Subordinate resources: IP: 103.186.26.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:38:6f:aa:85:61:ba:fd:93:fd:94:05:0c:1f:04:f5:9e:46:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 24 15:26:18 2025 GMT Not After : Dec 23 15:31:18 2026 GMT Subject: CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:d0:5e:f1:f4:6c:bc:01:d6:38:2b:6a:9f: 37:66:ab:49:be:db:4c:46:d6:0e:9c:73:74:4b:27: e9:0a:51:dd:86:46:85:34:21:14:9c:49:1b:75:17: f0:0a:cc:3f:9b:d6:34:56:37:f0:63:87:42:a0:b8: 6c:e8:2c:57:d8:df:29:24:e1:fc:69:f9:e6:f2:3f: 7e:d0:a4:6e:61:03:bd:17:31:d4:c5:b7:2b:50:0d: 74:88:0e:ba:ce:01:1d:d0:13:ae:ac:37:66:03:9e: 77:61:2b:3b:c4:84:3a:de:a4:bf:b1:39:bf:ab:60: d6:c0:44:20:68:15:a4:7b:ae:6b:fd:43:0e:50:3d: eb:c0:52:c3:da:8f:b2:fa:c7:be:93:49:e8:0f:ac: 03:a9:08:1a:8b:a0:92:87:a4:46:ba:79:cb:df:85: e0:d1:f7:a4:cb:6b:f2:91:bc:b4:b9:7f:b5:28:d8: 69:37:8e:e2:21:8d:ff:97:81:27:da:34:5f:b8:7f: 92:20:c9:37:f5:b6:77:d0:b7:34:dc:09:63:7c:9b: d7:8e:8b:af:b0:b8:c3:18:1b:b3:6e:69:7b:c6:cb: fc:f3:96:2f:18:59:c3:f3:5e:12:db:e5:0c:d1:a1: 23:5a:75:f9:84:8b:45:79:6a:12:39:95:1b:b3:61: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.26.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:48:f7:ad:14:5c:b5:3f:1b:ae:fe:e5:cb:1a:55:92:6a:da: 29:cd:98:57:99:2e:7c:78:13:01:48:14:4a:10:98:c9:fa:ca: fb:d3:e1:01:b5:32:8e:52:66:2f:d6:7e:d1:db:9c:e4:9a:3a: ae:b6:38:fc:e7:1f:a0:b3:ad:bb:7f:fe:e4:10:44:d8:48:e9: 08:57:5a:bd:0a:30:5f:f4:8d:38:bf:f4:85:6c:a1:5d:6c:d0: d8:7c:cf:93:17:5f:a3:c7:c8:ab:75:86:9d:31:71:36:0e:fe: 56:47:57:dd:b1:92:c5:48:0a:8a:d2:b1:4b:da:27:a5:20:7b: 23:95:de:cd:97:9e:72:04:61:6f:5c:7e:bd:b6:98:71:6f:33: 08:83:8b:ec:d6:86:a4:d3:18:cc:69:ea:1a:8b:1e:16:60:2b: 06:35:69:16:05:aa:40:74:33:30:81:d3:5d:a3:7c:2d:97:57: f1:4a:23:20:1c:82:ea:f2:6b:a7:a4:a1:7d:77:d9:b9:0f:de: ec:c3:87:eb:21:59:86:f6:ee:c9:49:00:a8:02:33:7f:51:8d: 7c:96:43:11:a5:71:54:33:1b:2a:b0:e7:b6:86:37:3d:ae:ab: 8f:4b:73:11:4a:bc:85:55:5d:96:fe:e9:5a:08:7b:ac:d1:9d: 77:d1:c8:34 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAZM4b6qFYbr9k/2UBQwfBPWeRrcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyNDE1MjYxOFoX DTI2MTIyMzE1MzExOFowMzExMC8GA1UEAxMoRUY4MDVGM0YwMEZENUY1RjA5OTFF NDYwMjBCQkNGQTRDMTZCODE2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbm0F7x9Gy8AdY4K2qfN2arSb7bTEbWDpxzdEsn6QpR3YZGhTQhFJxJG3UX 8ArMP5vWNFY38GOHQqC4bOgsV9jfKSTh/Gn55vI/ftCkbmEDvRcx1MW3K1ANdIgO us4BHdATrqw3ZgOed2ErO8SEOt6kv7E5v6tg1sBEIGgVpHuua/1DDlA968BSw9qP svrHvpNJ6A+sA6kIGougkoekRrp5y9+F4NH3pMtr8pG8tLl/tSjYaTeO4iGN/5eB J9o0X7h/kiDJN/W2d9C3NNwJY3yb146Lr7C4wxgbs25pe8bL/POWLxhZw/NeEtvl DNGhI1p1+YSLRXlqEjmVG7NhUm8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO+AXz8A/V9fCZHkYCC7z6TBa4FlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYzFlODY1Zi1kNWExLTRhZjctYTcxOS0wYzI2ZTc0ZmNkNjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjMWU4NjVm LWQ1YTEtNGFmNy1hNzE5LTBjMjZlNzRmY2Q2MS8wL0VGODA1RjNGMDBGRDVGNUYw OTkxRTQ2MDIwQkJDRkE0QzE2QjgxNjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuhowDQYJKoZIhvcNAQELBQADggEBAH9I960UXLU/G67+5csaVZJq2inNmFeZ Lnx4EwFIFEoQmMn6yvvT4QG1Mo5SZi/WftHbnOSaOq62OPznH6Czrbt//uQQRNhI 6QhXWr0KMF/0jTi/9IVsoV1s0Nh8z5MXX6PHyKt1hp0xcTYO/lZHV92xksVICorS sUvaJ6UgeyOV3s2XnnIEYW9cfr22mHFvMwiDi+zWhqTTGMxp6hqLHhZgKwY1aRYF qkB0MzCB012jfC2XV/FKIyAcgurya6ekoX132bkP3uzDh+shWYb27slJAKgCM39R jXyWQxGlcVQzGyqw57aGNz2uq49LcxFKvIVVXZb+6VoIe6zRnXfRyDQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:46 2026 by rpki-client