This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer (raw, json) Hash identifier: PrCe2cWkxsD0rrKLmuWjOeQ/vHqF+TWqfccGXZxYE0k= Subject key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3FDA89B8175753B6E190A8E8A2DA97092955A3FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft caRepository: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Dec 2025 05:31:46 +0000 Certificate not after: Fri 18 Dec 2026 05:36:46 +0000 Subordinate resources: IP: 36.50.224.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:da:89:b8:17:57:53:b6:e1:90:a8:e8:a2:da:97:09:29:55:a3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 19 05:31:46 2025 GMT Not After : Dec 18 05:36:46 2026 GMT Subject: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:3d:bf:76:ef:13:4c:2f:8f:b5:af:a7:96: 0e:3a:36:77:c3:3a:61:8a:e9:71:d1:5b:7a:3f:df: 97:c9:aa:22:da:2b:2f:0e:50:d1:d0:30:f8:30:73: fe:3e:45:74:51:91:62:96:5f:50:14:40:80:4a:31: e4:9d:c2:b7:d3:60:45:d0:9d:27:cf:12:a0:53:af: 99:89:cb:9e:b0:cc:53:d2:2f:7b:d4:73:ed:b0:70: 67:f9:51:43:5e:f4:78:b8:b4:b7:07:cc:d5:67:b6: 91:f7:4b:b7:fa:9c:21:57:3a:d8:25:63:58:2e:f5: 03:74:23:f1:24:bd:9e:39:c8:c8:fb:f5:3d:c8:ba: 8c:a6:e5:4a:b3:df:03:67:29:2b:62:1b:31:f0:cb: b2:2f:d8:c8:98:de:55:07:d3:d6:24:58:ae:7b:51: ee:13:95:93:3f:a7:16:1d:d7:bb:cd:c2:e3:89:47: 79:e0:e9:0c:42:9a:98:67:f1:ce:39:1e:ae:50:1f: 40:d9:86:18:65:53:ab:33:4a:14:1e:3a:b4:83:12: 44:8e:bd:35:82:16:f6:be:ad:e6:98:ba:c3:53:a1: 93:db:f7:fd:87:6d:fd:9b:37:a0:3f:38:71:97:30: ed:80:80:83:93:e8:51:9d:7c:c1:27:9d:98:0b:b1: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.224.0/23 Signature Algorithm: sha256WithRSAEncryption 17:2a:87:37:e2:60:a5:41:d9:4f:ba:b7:4a:c2:cb:f4:3c:ca: f6:16:0c:1e:5c:f0:da:d3:82:9e:a9:9d:9d:4c:19:9a:cf:0d: 81:92:17:89:d7:d7:a0:f7:b2:96:2a:2e:3f:5c:df:1e:84:e2: 30:71:a7:bd:53:31:87:1c:d7:a2:81:85:d2:dd:fb:63:d6:0b: 0b:a9:42:f1:b3:2a:bd:23:e7:9f:54:d5:6f:58:65:84:3f:db: b9:98:1a:5b:29:49:23:9c:16:e5:8d:2f:65:19:2b:c4:d0:67: 1e:15:27:13:95:dc:4b:12:f3:36:80:c3:d1:1e:78:ac:2d:4e: a5:c9:98:c2:ed:cc:60:35:39:d5:51:7e:51:b0:a9:e3:75:d4: 79:a0:87:c9:c5:71:88:f1:42:74:92:43:08:87:9d:cd:9e:13: 4a:ef:b2:60:31:58:f6:08:66:d8:47:af:d8:1d:71:4d:d1:95: 15:87:b6:23:d4:e9:c7:27:37:ef:0b:d0:a7:d7:d9:8b:1f:2a: 5b:a9:d6:36:2b:31:de:3d:14:85:53:3c:6c:75:d8:75:d3:e8: 41:97:47:78:e1:8d:1a:74:7a:03:61:5e:9b:e7:e9:f9:3e:d1: 73:3c:d6:9a:a5:62:8e:19:c6:72:8d:0a:e0:90:aa:ec:8b:ac: 9a:d1:a2:65 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUP9qJuBdXU7bhkKjootqXCSlVo/8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxOTA1MzE0NloX DTI2MTIxODA1MzY0NlowMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdD M0ExNkZCRTVGNjlCMUNEODgzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKCPb927xNML4+1r6eWDjo2d8M6YYrpcdFbej/fl8mqItorLw5Q0dAw+DBz /j5FdFGRYpZfUBRAgEox5J3Ct9NgRdCdJ88SoFOvmYnLnrDMU9Ive9Rz7bBwZ/lR Q170eLi0twfM1We2kfdLt/qcIVc62CVjWC71A3Qj8SS9njnIyPv1Pci6jKblSrPf A2cpK2IbMfDLsi/YyJjeVQfT1iRYrntR7hOVkz+nFh3Xu83C44lHeeDpDEKamGfx zjkerlAfQNmGGGVTqzNKFB46tIMSRI69NYIW9r6t5pi6w1Ohk9v3/Ydt/Zs3oD84 cZcw7YCAg5PoUZ18wSedmAuxCKkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPXXHsd5IqkIDxfDoW++X2mxzYgyMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhZTgzNjcz LTA5NmEtNDQwYy1iMjdhLTliZTY0YjEzYjRlNS8wL0Y1RDcxRUM3NzkyMkE5MDgw RjE3QzNBMTZGQkU1RjY5QjFDRDg4MzIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEkMuAwDQYJKoZIhvcNAQELBQADggEBABcqhzfiYKVB2U+6t0rCy/Q8yvYWDB5c 8NrTgp6pnZ1MGZrPDYGSF4nX16D3spYqLj9c3x6E4jBxp71TMYcc16KBhdLd+2PW CwupQvGzKr0j559U1W9YZYQ/27mYGlspSSOcFuWNL2UZK8TQZx4VJxOV3EsS8zaA w9EeeKwtTqXJmMLtzGA1OdVRflGwqeN11Hmgh8nFcYjxQnSSQwiHnc2eE0rvsmAx WPYIZthHr9gdcU3RlRWHtiPU6ccnN+8L0KfX2YsfKlup1jYrMd49FIVTPGx12HXT 6EGXR3jhjRp0egNhXpvn6fk+0XM81pqlYo4ZxnKNCuCQquyLrJrRomU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:07:41 2026 by rpki-client