This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer File: EjRfEVrEtipR9SdMVMgehkY70Lo.cer (raw, json) Hash identifier: Wp7hb+C2SfUBAuE4XUQ/Jwae0yLbDmCADgzA/N/qB9Q= Subject key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4FAF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft caRepository: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 Jan 2026 13:28:03 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: AS: 56868 IP: 82.158.128.0/19 IP: 151.158.4.0/23 IP: 151.158.10.0/23 IP: 151.158.36.0/23 IP: 151.158.42.0/23 IP: 151.158.54.0 -- 151.158.57.255 IP: 151.158.74.0/23 IP: 212.117.48.0/20 IP: 2001:7fa:2::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20399 (0x4faf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Jan 23 13:28:03 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:52:29:99:50:de:58:4d:5d:63:8a:fb:aa:13: a7:1e:f1:b4:f6:4a:9c:0d:58:0d:75:c4:8d:55:7f: ec:04:a2:52:95:61:37:62:b3:ff:c3:46:69:6d:86: ca:9b:40:b0:07:15:9e:63:16:28:fa:00:4c:58:f3: b9:32:8f:ae:2c:b7:64:c7:b9:45:5a:44:5d:6d:c9: 65:c0:6b:1c:6a:e5:f0:91:66:95:ec:11:30:cc:26: 01:35:b9:8f:00:28:44:ca:02:fa:d2:85:95:69:3c: ea:f4:be:f0:a5:78:23:8c:10:51:ba:b0:47:11:f8: ed:04:0f:41:8a:fc:81:07:4c:6b:12:02:ab:f6:7a: 2a:d3:8a:f1:4f:2f:42:fc:90:6a:5a:9c:df:f2:91: 38:a6:6f:ec:bc:64:dc:34:de:05:17:ad:d7:d8:5f: 5f:d1:d0:69:be:47:fe:da:10:96:4d:fc:cb:da:ab: 30:bd:8d:df:ea:20:d6:cb:2b:0c:ba:46:36:ff:02: d0:56:22:64:82:50:55:07:0a:b2:73:f6:32:74:fc: 26:36:6a:a2:ae:23:65:85:0d:2c:09:86:ea:8d:53: 94:f7:c7:95:e2:80:de:a6:79:ca:72:9d:62:c5:95: 9f:e9:9c:45:17:0d:f3:62:4f:6e:e2:2c:32:f5:13: 7f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 56868 sbgp-ipAddrBlock: critical IPv4: 82.158.128.0/19 151.158.4.0/23 151.158.10.0/23 151.158.36.0/23 151.158.42.0/23 151.158.54.0-151.158.57.255 151.158.74.0/23 212.117.48.0/20 IPv6: 2001:7fa:2::/48 Signature Algorithm: sha256WithRSAEncryption b2:89:40:f9:a7:08:b1:21:88:96:38:97:fd:a2:aa:1e:d0:9e: b6:5b:40:ee:86:00:5e:f7:8c:f7:83:1a:04:dd:4a:d2:d5:fe: 10:1d:8b:96:c6:52:71:9c:ca:cd:ff:79:14:6d:ff:d5:c5:7c: 32:08:66:e7:75:41:ce:d5:79:7a:48:2c:cf:6e:aa:bb:90:81: eb:5c:0d:de:68:f3:5e:ef:7a:23:bc:76:ec:71:9b:f0:77:c9: ff:7f:9d:fc:34:4b:59:1d:e2:bf:9a:af:f3:e0:d3:6c:88:0c: 6a:9e:ab:15:95:e7:49:a7:db:a2:57:3e:d4:9e:ae:c1:1e:56: 91:0a:7f:b9:45:f4:03:bb:9c:88:3a:bb:91:69:f2:cd:aa:f0: 4f:6e:e8:56:00:80:1f:27:34:cc:4c:2e:8e:f4:91:b7:2f:5c: 3e:b1:fc:44:c0:70:e7:2d:36:b5:c8:10:3f:67:c9:d1:0b:95: 31:ff:a2:2d:5f:db:73:59:09:b7:5c:0b:1a:5d:41:9d:5e:45: 89:04:70:d7:bc:3f:42:5c:93:53:76:d6:36:25:c1:8a:c3:f5: 74:46:5c:5d:78:a9:12:6f:18:b6:fe:25:11:06:02:49:c3:ae: 19:82:ab:d3:71:c9:a7:5f:81:6a:d7:41:ef:71:db:bb:7b:d7: 35:08:6d:79 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICT68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYwMTIzMTMyODAzWhcNMjYwODMxMDAwMDAwWjBKMRUwEwYD VQQDDAxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDEyMzQ1RjExNUFDNEI2MkE1MUY1 Mjc0QzU0QzgxRTg2NDYzQkQwQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDpUimZUN5YTV1jivuqE6ce8bT2SpwNWA11xI1Vf+wEolKVYTdis//DRmlt hsqbQLAHFZ5jFij6AExY87kyj64st2THuUVaRF1tyWXAaxxq5fCRZpXsETDMJgE1 uY8AKETKAvrShZVpPOr0vvCleCOMEFG6sEcR+O0ED0GK/IEHTGsSAqv2eirTivFP L0L8kGpanN/ykTimb+y8ZNw03gUXrdfYX1/R0Gm+R/7aEJZN/MvaqzC9jd/qINbL Kwy6Rjb/AtBWImSCUFUHCrJz9jJ0/CY2aqKuI2WFDSwJhuqNU5T3x5XigN6mecpy nWLFlZ/pnEUXDfNiT27iLDL1E38xAgMBAAGjggMXMIIDEzAdBgNVHQ4EFgQUEjRf EVrEtipR9SdMVMgehkY70LowHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0 MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw bmljLm5ldC9SUEtJL0NQUy5wZGYwge4GCCsGAQUFBwELBIHhMIHeMDcGCCsGAQUF BzAFhityc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8w MGQGCCsGAQUFBzAKhlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9J RE5JQy1JRC8wLzEyMzQ1RjExNUFDNEI2MkE1MUY1Mjc0QzU0QzgxRTg2NDYzQkQw QkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczovL3JlcG8tcnBraS5pZG5pYy5uZXQv cnJkcC9ub3RpZmljYXRpb24ueG1sMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDe JDBiBggrBgEFBQcBBwEB/wRTMFEwPgQCAAEwOAMEBVKegAMEAZeeBAMEAZeeCgME AZeeJAMEAZeeKjAMAwQBl542AwQBl544AwQBl55KAwQE1HUwMA8EAgACMAkDBwAg AQf6AAIwDQYJKoZIhvcNAQELBQADggEBALKJQPmnCLEhiJY4l/2iqh7QnrZbQO6G AF73jPeDGgTdStLV/hAdi5bGUnGcys3/eRRt/9XFfDIIZud1Qc7VeXpILM9uqruQ getcDd5o817veiO8duxxm/B3yf9/nfw0S1kd4r+ar/Pg02yIDGqeqxWV50mn26JX PtSersEeVpEKf7lF9AO7nIg6u5Fp8s2q8E9u6FYAgB8nNMxMLo70kbcvXD6x/ETA cOctNrXIED9nydELlTH/oi1f23NZCbdcCxpdQZ1eRYkEcNe8P0Jck1N21jYlwYrD 9XRGXF14qRJvGLb+JREGAknDrhmCq9NxyadfgWrXQe9x27t71zUIbXk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:52 2026 by rpki-client