This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer (raw, json) Hash identifier: g4qJicgsxxuptu/L19DnvCbmh//x/VIOI72j1fxJfj0= Subject key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3142ED15B4B217C5D0E3F4EBAAAF3F87FB6E9E54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft caRepository: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 28 Nov 2025 15:08:15 +0000 Certificate not after: Fri 27 Nov 2026 15:13:15 +0000 Subordinate resources: IP: 103.162.141.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:42:ed:15:b4:b2:17:c5:d0:e3:f4:eb:aa:af:3f:87:fb:6e:9e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 28 15:08:15 2025 GMT Not After : Nov 27 15:13:15 2026 GMT Subject: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:6e:8b:32:86:32:7b:e8:2d:88:c0:ad:aa: 9b:46:01:b0:65:3a:a7:6b:9b:1b:bc:d7:d6:af:e2: b0:79:2c:07:a5:a9:0a:3c:23:72:63:ce:92:d8:a8: 10:4e:5a:2c:e2:96:70:94:dc:6f:7c:a9:a0:18:b3: 3f:c6:3f:10:57:45:42:08:58:71:8e:ad:7e:a6:dd: 9c:90:9f:86:de:99:e1:a8:3f:46:e4:47:41:ea:83: d1:90:df:56:5f:52:5a:b9:c9:ef:b4:ce:83:e5:1f: 43:d1:53:c5:45:d8:6a:bf:18:1b:72:dc:9f:07:6f: 43:0a:6e:89:27:ca:e2:17:3a:b4:23:20:2b:65:de: 94:2f:fc:4c:fe:41:77:62:1d:6d:80:eb:fe:13:fa: 60:27:8d:9f:dd:ac:2c:c9:96:f1:ae:ee:96:cd:29: d3:3f:cc:7f:ce:52:24:0a:d1:e8:6f:3a:a9:c0:98: da:b3:02:01:d3:db:63:00:d6:53:ca:2a:d4:1b:b7: a9:3d:e0:09:01:f4:8c:3f:62:23:aa:38:9a:61:ba: b9:46:af:f0:2e:f2:db:cb:94:19:b0:6b:8c:4f:d6: 36:b0:f2:f7:7e:ee:f8:a5:fb:0f:af:a8:94:17:0f: 13:85:18:d9:88:32:e9:c1:b3:37:d7:9f:fc:16:95: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.141.0/24 Signature Algorithm: sha256WithRSAEncryption 91:8d:a4:b9:30:6f:21:01:a3:63:9d:cb:00:10:8a:17:c1:00: bd:fc:c4:17:16:7d:67:61:08:ed:ca:09:13:f2:a6:fd:3a:2a: 2d:9b:d6:f7:c5:24:f1:fd:e4:29:73:e1:93:4d:23:ea:78:da: 99:ed:09:80:f8:98:66:79:36:56:e6:a8:e5:a6:5c:32:a5:63: c2:18:50:fe:47:61:77:3f:eb:ef:48:1b:5b:72:23:cb:bb:95: 60:81:5e:aa:46:8e:1e:26:a9:c5:9b:5d:6d:f0:65:8e:ec:52: 7b:18:de:23:15:d1:fe:88:99:ca:cb:19:fa:e1:e1:aa:c7:8d: a4:ff:04:14:43:96:4a:15:50:04:41:eb:5e:b1:17:35:42:bb: 08:9e:26:34:8f:57:3c:18:d7:35:49:22:55:a4:2a:9e:b4:c3: ce:65:bf:62:dd:d7:e7:62:13:eb:0e:6b:e3:8e:6b:8e:0d:5a: f9:21:f2:10:52:f3:c7:f7:93:90:73:24:aa:aa:39:74:49:a2: fc:94:cd:6a:a3:79:6d:7a:f8:dc:d5:e3:55:65:24:da:46:0f: 85:20:8f:df:06:5c:e5:fe:1a:a2:ba:d0:d2:55:9d:7c:df:47: ff:09:e8:b4:00:92:16:8b:62:2e:3d:4c:fb:89:bc:3f:bc:27: 8f:29:32:89 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMULtFbSyF8XQ4/Trqq8/h/tunlQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyODE1MDgxNVoX DTI2MTEyNzE1MTMxNVowMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4 ODdEODZEQTJDN0NDNzQ2MEI3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8tbosyhjJ76C2IwK2qm0YBsGU6p2ubG7zX1q/isHksB6WpCjwjcmPOktio EE5aLOKWcJTcb3ypoBizP8Y/EFdFQghYcY6tfqbdnJCfht6Z4ag/RuRHQeqD0ZDf Vl9SWrnJ77TOg+UfQ9FTxUXYar8YG3LcnwdvQwpuiSfK4hc6tCMgK2XelC/8TP5B d2IdbYDr/hP6YCeNn92sLMmW8a7uls0p0z/Mf85SJArR6G86qcCY2rMCAdPbYwDW U8oq1Bu3qT3gCQH0jD9iI6o4mmG6uUav8C7y28uUGbBrjE/WNrDy937u+KX7D6+o lBcPE4UY2Ygy6cGzN9ef/BaVg2MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP+Ue+GI01nqft+IfYbaLHzHRgtwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4YTkyMzdh LTcyNmMtNGMxOS05YjRlLTdiOTRiMTQyNGM0Yi8wL0ZGOTQ3QkUxODhEMzU5RUE3 RURGODg3RDg2REEyQzdDQzc0NjBCNzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnoo0wDQYJKoZIhvcNAQELBQADggEBAJGNpLkwbyEBo2OdywAQihfBAL38xBcW fWdhCO3KCRPypv06Ki2b1vfFJPH95Clz4ZNNI+p42pntCYD4mGZ5NlbmqOWmXDKl Y8IYUP5HYXc/6+9IG1tyI8u7lWCBXqpGjh4mqcWbXW3wZY7sUnsY3iMV0f6ImcrL Gfrh4arHjaT/BBRDlkoVUARB616xFzVCuwieJjSPVzwY1zVJIlWkKp60w85lv2Ld 1+diE+sOa+OOa44NWvkh8hBS88f3k5BzJKqqOXRJovyUzWqjeW16+NzV41VlJNpG D4Ugj98GXOX+GqK60NJVnXzfR/8J6LQAkhaLYi49TPuJvD+8J48pMok= -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:01 2025 by rpki-client