This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
File:                     F61D0A85B56D8F824658A8287BE8D4F659680324.cer (raw, json)
Hash identifier:          ptKXOjEowzBng4atTFuGfHmVYmjQEHBKVL0gmnVcZsM=
Subject key identifier:   F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       710C19DF96EA69C59AA66CD6D5706934A7DD85DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 Dec 2025 09:05:58 +0000
Certificate not after:    Wed 30 Dec 2026 09:10:58 +0000
Subordinate resources:    IP: 103.186.96.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0c:19:df:96:ea:69:c5:9a:a6:6c:d6:d5:70:69:34:a7:dd:85:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 31 09:05:58 2025 GMT
            Not After : Dec 30 09:10:58 2026 GMT
        Subject: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:7d:53:1e:5a:cd:9e:6f:20:c1:e0:72:fc:
                    69:56:12:7a:f8:ef:e2:5c:4d:28:e3:9d:60:69:df:
                    64:20:74:a6:56:e5:cc:ff:d8:39:f3:ef:33:51:b8:
                    e3:6d:90:9e:d9:03:a6:e1:d2:bc:9e:9c:2d:6c:5f:
                    cd:ee:85:4e:0e:89:0e:04:9c:d0:97:d5:23:f2:47:
                    13:b7:16:01:7c:6a:62:af:9a:9b:cd:13:9c:b4:b9:
                    0a:2e:9f:58:92:c1:85:aa:e4:cb:2b:fe:ee:f0:98:
                    20:cb:84:87:30:ed:db:9c:15:cf:d2:b3:b2:0a:8b:
                    07:93:bb:8e:32:33:35:c6:f4:65:6e:36:cb:6b:ed:
                    9f:12:97:19:9b:3d:31:69:fd:e8:5a:88:ec:d5:a7:
                    c8:63:d5:5f:ab:b2:df:1d:82:55:d9:7d:9d:72:e1:
                    f5:0f:2a:41:b4:a4:71:77:d1:1c:df:c9:9c:41:2a:
                    c9:10:cc:75:59:38:f0:10:6a:d8:8a:75:91:0a:53:
                    7c:2e:76:d4:0d:dd:fb:5c:5d:36:fc:11:ba:26:dc:
                    26:9e:22:e9:13:87:4d:14:6c:95:91:fe:a6:cf:c4:
                    59:25:74:48:00:42:5c:f6:9a:15:af:a6:b4:97:c7:
                    30:f9:18:0a:1b:a3:e3:4e:a8:1b:5b:2f:a4:26:4a:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:97:98:ca:18:c1:63:b2:93:b5:f2:36:82:4c:9c:de:56:39:
         2b:3e:78:cc:28:d6:97:de:41:db:87:11:13:aa:44:3c:a5:3c:
         cb:eb:8b:bc:9a:20:bc:e8:e4:54:60:b7:9a:ac:fd:f6:d7:85:
         b4:e9:01:00:2e:58:c4:19:11:3b:cb:df:7d:5c:8f:f9:42:1b:
         89:ab:b0:55:35:ce:7f:3a:b1:ae:53:e5:52:3e:8d:c6:8d:6a:
         31:a0:b4:56:38:5f:51:a0:ad:c8:39:23:b2:f9:5f:6b:7c:06:
         a1:46:d7:3a:c1:7a:1e:11:d0:80:60:72:b0:45:c3:f8:c0:5e:
         0d:07:01:9d:7b:7a:e3:2d:15:4d:6b:e9:84:74:71:86:6e:d5:
         ed:97:60:cd:cd:56:b1:43:52:67:e1:69:8c:d8:12:09:12:37:
         d4:72:41:12:53:db:17:2f:06:7d:ca:a9:c2:10:d3:30:d1:c0:
         a6:aa:25:28:78:99:d3:67:a1:ac:79:c1:b0:ba:e7:55:aa:d4:
         7d:a4:b0:ee:89:88:5f:c3:26:a5:47:3e:8e:be:7f:3c:96:88:
         ac:4b:2e:0c:8e:f1:e3:df:7f:fa:2e:6f:35:14:9e:ec:e1:b8:
         bd:f0:9e:a0:d4:22:90:a7:c7:6e:96:69:d6:88:ab:82:56:22:
         35:a0:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:06:54 2026 by rpki-client