This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
File:                     FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer (raw, json)
Hash identifier:          JEeNrxhnd641OjDqvGKesv2ugZMmZMKvrxmv8RuqOPc=
Subject key identifier:   FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4796EFA829798B527C4E868A675E6A283D21252E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 24 Dec 2025 01:58:01 +0000
Certificate not after:    Wed 23 Dec 2026 02:03:01 +0000
Subordinate resources:    IP: 103.145.108.0/23
                          IP: 2405:8440::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:96:ef:a8:29:79:8b:52:7c:4e:86:8a:67:5e:6a:28:3d:21:25:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 24 01:58:01 2025 GMT
            Not After : Dec 23 02:03:01 2026 GMT
        Subject: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:9a:66:bd:e5:ff:8d:3e:d3:5a:40:b2:2e:
                    dd:0d:1c:bd:c2:75:c5:ee:70:58:f3:14:8e:ec:7c:
                    4f:3b:1d:7d:7f:7b:4d:d3:c9:22:fc:54:1a:f2:79:
                    aa:fd:aa:84:bc:49:6d:83:86:85:7d:21:73:db:09:
                    ea:7c:c2:1f:57:c9:b4:7a:28:1f:9b:d4:af:fe:ca:
                    23:cc:b4:3a:28:30:ab:bc:2e:43:ef:5b:48:24:63:
                    6e:e9:28:d9:6b:39:0f:52:ca:ef:2c:7c:fd:d6:42:
                    bc:73:61:ea:98:98:f7:df:90:f8:60:ca:ad:6a:ef:
                    9c:47:3e:73:a6:36:8c:68:9d:30:97:d1:79:75:6d:
                    ef:ed:76:94:2f:1f:b9:50:24:23:6f:c4:ea:0e:91:
                    70:5a:b4:0f:9b:48:45:5d:10:29:f9:3e:48:f1:f7:
                    86:c2:0c:e6:cf:44:28:19:7a:80:3c:ff:12:61:46:
                    8d:13:ad:68:9c:fe:df:91:33:e2:04:65:c4:b8:60:
                    74:35:8d:5c:6d:20:ef:65:70:ac:f0:23:97:6e:3c:
                    ce:57:b0:9b:84:ba:b4:b8:01:3a:51:49:f6:86:09:
                    62:41:47:d6:78:42:a0:b0:a6:b5:03:b6:ec:cb:83:
                    d8:8d:bf:ab:47:73:f6:0a:22:36:6d:27:1e:85:7e:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.108.0/23
                IPv6:
                  2405:8440::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:61:82:2d:f0:29:c7:06:a2:c1:d9:a4:e8:ae:8e:9b:83:fb:
         32:20:ff:83:3f:d6:80:39:81:46:bb:41:2b:ac:e8:5e:f0:8b:
         30:df:d2:70:e6:25:a4:0d:45:5b:f2:f6:7f:53:34:fe:c5:e6:
         6e:bb:39:85:f4:53:ad:0b:e4:f7:61:27:3c:38:f6:54:50:dc:
         a0:92:ad:b2:cf:1f:04:dd:1d:c8:1c:2f:49:80:0e:c9:f0:15:
         2c:ab:21:9d:05:e3:b4:61:d3:1c:3a:c1:3c:4f:6c:90:72:5e:
         a0:36:8a:7b:53:fd:2f:99:f9:a5:54:18:00:83:d4:4c:25:ba:
         69:ac:41:b9:6c:f1:5b:07:a6:2d:19:5f:67:14:8f:13:c6:ce:
         1a:17:6c:88:6d:2e:26:65:5d:88:80:4f:ba:f2:d3:61:ff:88:
         d2:bd:0d:de:75:b4:31:71:45:99:c9:fd:aa:6a:5f:4d:3d:ff:
         b6:de:89:9f:cf:37:75:77:40:10:0e:ee:00:74:91:97:fd:10:
         41:e5:91:50:db:69:40:e8:bc:05:b2:05:1a:0a:c1:09:ac:91:
         01:9a:f8:a9:ab:62:7f:99:f5:c5:1d:65:a8:36:0d:d6:fd:d9:
         8c:f1:38:62:2e:88:98:35:f5:7d:98:f4:7b:1f:92:b1:5c:38:
         2e:d5:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:07:48 2026 by rpki-client