This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer File: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer (raw, json) Hash identifier: qbpQAOXqaoG1WIlh85oVSIKEAK6lDrRGGHHZbjd+4QE= Subject key identifier: 88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4CAD6128C0A00998EA9FB739F4982AFDFE83D422 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft caRepository: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 31 Dec 2025 03:20:18 +0000 Certificate not after: Wed 30 Dec 2026 03:25:18 +0000 Subordinate resources: IP: 138.252.139.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ad:61:28:c0:a0:09:98:ea:9f:b7:39:f4:98:2a:fd:fe:83:d4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Dec 31 03:20:18 2025 GMT Not After : Dec 30 03:25:18 2026 GMT Subject: CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:fb:82:bc:67:10:f4:72:6d:07:73:8c:0b: ce:79:af:b5:ef:ea:f7:6e:bb:bf:08:60:89:3c:1a: 14:4b:8d:a9:2d:e2:21:46:bb:48:b0:02:92:f7:d4: 47:9d:ab:cc:b6:eb:c7:cf:06:a6:02:3c:0c:38:bf: 0f:9f:30:64:92:a8:40:4b:60:62:8d:a4:39:09:eb: c0:2a:12:ef:4c:9c:9b:ac:31:9c:78:a1:f5:c7:0a: 32:f0:f3:ea:72:25:fb:7c:2f:3b:38:e8:fd:6a:aa: ae:23:d3:f8:ab:96:a0:e0:30:63:d2:f0:61:98:8e: 41:67:c4:73:ac:a5:71:28:d2:a6:55:8a:96:75:eb: b4:15:62:c6:14:41:00:c7:bc:9f:d9:41:70:ef:d2: 8a:a0:5a:3e:29:f4:82:e7:8e:20:b4:8c:cf:4d:37: 34:e4:7d:ce:c6:74:20:23:cd:d1:81:fd:b9:2f:88: b0:5a:8e:5a:e7:01:49:2f:c6:d5:73:5d:89:ea:d5: cf:27:a9:0b:f8:00:8c:80:1d:aa:14:22:e6:25:75: 52:e4:11:a4:1c:30:8f:9a:d4:c0:66:3a:c7:c6:b9: ae:64:a7:dc:9c:5c:9f:38:fd:29:a8:b0:09:07:15: 4d:06:74:3e:3e:63:1d:fc:ab:be:4f:35:45:d4:e7: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.139.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:68:0e:02:a7:39:aa:48:70:04:73:7c:39:b4:ed:c8:d4:9a: 23:e2:37:b1:66:59:ac:ed:14:2e:0a:99:7e:77:7a:38:74:2c: 85:8f:25:27:58:a7:ac:79:2b:4e:3f:2e:18:1d:c3:09:a2:90: b3:db:a2:f0:73:40:ba:04:b3:8f:1f:6c:ac:2d:49:54:e6:6c: 8a:aa:65:aa:7f:7b:a2:f7:78:d1:c0:af:92:03:de:04:90:f1: b5:99:a2:73:70:7b:9b:12:c7:77:ed:5a:fe:8d:e1:6a:fc:50: 4d:ad:2f:ff:53:c7:aa:15:b7:fe:c0:a1:57:a7:57:07:6c:79: a6:db:89:ea:50:ca:e4:fb:ab:06:9b:02:c2:6a:92:a9:19:dd: 54:01:73:31:a6:6c:90:f8:b3:54:32:ca:63:f3:eb:01:61:39: 85:eb:fd:96:b1:54:bc:f3:71:de:c6:05:d3:3a:89:da:55:52: c1:e5:5d:8b:48:b7:eb:89:f3:f4:55:5b:01:a9:bd:bb:77:0a: ca:49:c8:d4:83:8f:07:0e:77:a9:f8:50:3f:64:07:2b:c5:c4: a2:02:b9:a7:c5:74:ee:8e:26:e7:46:67:f4:62:90:df:2d:2a: b8:30:4d:16:5a:3f:d8:9f:9d:6d:79:9d:b7:de:f5:21:d4:b3: b9:44:a3:d6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTK1hKMCgCZjqn7c59Jgq/f6D1CIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTIzMTAzMjAxOFoX DTI2MTIzMDAzMjUxOFowMzExMC8GA1UEAxMoODg1QjdDMDA4Q0U0NDAzNkNBMDY1 OUZEOEUxMzc5MzIxQzBBQjVGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnD+4K8ZxD0cm0Hc4wLznmvte/q9267vwhgiTwaFEuNqS3iIUa7SLACkvfU R52rzLbrx88GpgI8DDi/D58wZJKoQEtgYo2kOQnrwCoS70ycm6wxnHih9ccKMvDz 6nIl+3wvOzjo/WqqriPT+KuWoOAwY9LwYZiOQWfEc6ylcSjSplWKlnXrtBVixhRB AMe8n9lBcO/SiqBaPin0gueOILSMz003NOR9zsZ0ICPN0YH9uS+IsFqOWucBSS/G 1XNdierVzyepC/gAjIAdqhQi5iV1UuQRpBwwj5rUwGY6x8a5rmSn3Jxcnzj9Kaiw CQcVTQZ0Pj5jHfyrvk81RdTnDP8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIhbfACM5EA2ygZZ/Y4TeTIcCrXyMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkNzhiNTBi LTQ0OWMtNDU0Yi04NTBkLWYyMDgwMzc4OWI1OC8xLzg4NUI3QzAwOENFNDQwMzZD QTA2NTlGRDhFMTM3OTMyMUMwQUI1RjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACK/IswDQYJKoZIhvcNAQELBQADggEBACpoDgKnOapIcARzfDm07cjUmiPiN7Fm WaztFC4KmX53ejh0LIWPJSdYp6x5K04/LhgdwwmikLPbovBzQLoEs48fbKwtSVTm bIqqZap/e6L3eNHAr5ID3gSQ8bWZonNwe5sSx3ftWv6N4Wr8UE2tL/9Tx6oVt/7A oVenVwdseabbiepQyuT7qwabAsJqkqkZ3VQBczGmbJD4s1QyymPz6wFhOYXr/Zax VLzzcd7GBdM6idpVUsHlXYtIt+uJ8/RVWwGpvbt3CspJyNSDjwcOd6n4UD9kByvF xKICuafFdO6OJudGZ/RikN8tKrgwTRZaP9ifnW15nbfe9SHUs7lEo9Y= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:36 2026 by rpki-client