This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
File: F61D0A85B56D8F824658A8287BE8D4F659680324.cer (raw, json)
Hash identifier: ptKXOjEowzBng4atTFuGfHmVYmjQEHBKVL0gmnVcZsM=
Subject key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 710C19DF96EA69C59AA66CD6D5706934A7DD85DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
caRepository: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 31 Dec 2025 09:05:58 +0000
Certificate not after: Wed 30 Dec 2026 09:10:58 +0000
Subordinate resources: IP: 103.186.96.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0c:19:df:96:ea:69:c5:9a:a6:6c:d6:d5:70:69:34:a7:dd:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 31 09:05:58 2025 GMT
Not After : Dec 30 09:10:58 2026 GMT
Subject: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:7d:53:1e:5a:cd:9e:6f:20:c1:e0:72:fc:
69:56:12:7a:f8:ef:e2:5c:4d:28:e3:9d:60:69:df:
64:20:74:a6:56:e5:cc:ff:d8:39:f3:ef:33:51:b8:
e3:6d:90:9e:d9:03:a6:e1:d2:bc:9e:9c:2d:6c:5f:
cd:ee:85:4e:0e:89:0e:04:9c:d0:97:d5:23:f2:47:
13:b7:16:01:7c:6a:62:af:9a:9b:cd:13:9c:b4:b9:
0a:2e:9f:58:92:c1:85:aa:e4:cb:2b:fe:ee:f0:98:
20:cb:84:87:30:ed:db:9c:15:cf:d2:b3:b2:0a:8b:
07:93:bb:8e:32:33:35:c6:f4:65:6e:36:cb:6b:ed:
9f:12:97:19:9b:3d:31:69:fd:e8:5a:88:ec:d5:a7:
c8:63:d5:5f:ab:b2:df:1d:82:55:d9:7d:9d:72:e1:
f5:0f:2a:41:b4:a4:71:77:d1:1c:df:c9:9c:41:2a:
c9:10:cc:75:59:38:f0:10:6a:d8:8a:75:91:0a:53:
7c:2e:76:d4:0d:dd:fb:5c:5d:36:fc:11:ba:26:dc:
26:9e:22:e9:13:87:4d:14:6c:95:91:fe:a6:cf:c4:
59:25:74:48:00:42:5c:f6:9a:15:af:a6:b4:97:c7:
30:f9:18:0a:1b:a3:e3:4e:a8:1b:5b:2f:a4:26:4a:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.186.96.0/23
Signature Algorithm: sha256WithRSAEncryption
38:97:98:ca:18:c1:63:b2:93:b5:f2:36:82:4c:9c:de:56:39:
2b:3e:78:cc:28:d6:97:de:41:db:87:11:13:aa:44:3c:a5:3c:
cb:eb:8b:bc:9a:20:bc:e8:e4:54:60:b7:9a:ac:fd:f6:d7:85:
b4:e9:01:00:2e:58:c4:19:11:3b:cb:df:7d:5c:8f:f9:42:1b:
89:ab:b0:55:35:ce:7f:3a:b1:ae:53:e5:52:3e:8d:c6:8d:6a:
31:a0:b4:56:38:5f:51:a0:ad:c8:39:23:b2:f9:5f:6b:7c:06:
a1:46:d7:3a:c1:7a:1e:11:d0:80:60:72:b0:45:c3:f8:c0:5e:
0d:07:01:9d:7b:7a:e3:2d:15:4d:6b:e9:84:74:71:86:6e:d5:
ed:97:60:cd:cd:56:b1:43:52:67:e1:69:8c:d8:12:09:12:37:
d4:72:41:12:53:db:17:2f:06:7d:ca:a9:c2:10:d3:30:d1:c0:
a6:aa:25:28:78:99:d3:67:a1:ac:79:c1:b0:ba:e7:55:aa:d4:
7d:a4:b0:ee:89:88:5f:c3:26:a5:47:3e:8e:be:7f:3c:96:88:
ac:4b:2e:0c:8e:f1:e3:df:7f:fa:2e:6f:35:14:9e:ec:e1:b8:
bd:f0:9e:a0:d4:22:90:a7:c7:6e:96:69:d6:88:ab:82:56:22:
35:a0:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:06:54 2026 by rpki-client