This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer (raw, json) Hash identifier: +oFCyn+ldPIIj3jyf37szQIVm3dv9gfw4sze0n62gfk= Subject key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0C29C153ED4F954B41DB559E1E7B9964C15F0BAC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft caRepository: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Nov 2025 09:18:00 +0000 Certificate not after: Wed 04 Nov 2026 09:23:00 +0000 Subordinate resources: IP: 160.191.235.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:29:c1:53:ed:4f:95:4b:41:db:55:9e:1e:7b:99:64:c1:5f:0b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Nov 5 09:18:00 2025 GMT Not After : Nov 4 09:23:00 2026 GMT Subject: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:25:03:7f:14:33:d2:91:e0:bb:9f:7d:f5: b6:cc:03:ba:32:28:84:7b:92:76:48:76:8d:03:3d: b1:23:d0:c1:7f:dc:dd:6a:3a:85:5d:3d:d2:02:ea: 4c:a7:e0:50:55:30:bf:6b:e5:22:16:4b:e0:79:65: 2e:7c:aa:e1:35:b9:d1:cc:aa:c7:a2:41:85:c8:17: 0e:41:f1:cf:98:ff:86:9a:e2:cd:97:95:e6:c9:5d: f5:ef:32:05:e1:5d:0d:a6:89:bf:1d:36:bb:fb:bc: 80:ce:8a:02:80:fb:ca:42:41:b5:09:80:1f:cb:f7: c3:6c:5f:56:c6:c9:fd:68:2d:3b:54:46:49:1e:86: 2a:e6:a2:7b:0f:dd:82:ce:de:c4:00:b8:b0:71:7e: 47:5c:62:e6:de:59:f4:09:e2:a3:8c:a9:e2:1f:37: 32:20:f6:16:63:ca:c9:af:c0:a0:8e:73:d6:09:5c: ba:42:fa:62:53:e4:46:af:00:27:9b:69:e6:30:03: 7f:0c:6e:74:f5:45:3d:f8:81:95:f8:a4:2f:81:34: 9f:46:6c:59:b1:cb:6b:51:ed:73:90:3c:5d:c1:a4: c6:9f:1f:bd:86:ba:1c:d1:c4:00:e1:cb:50:bc:45: 48:62:ea:83:1e:30:0a:f8:9c:e5:9a:8d:20:af:0f: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.235.0/24 Signature Algorithm: sha256WithRSAEncryption 52:18:93:db:39:2f:89:fe:e9:78:69:10:5c:60:68:43:2d:12: a6:f3:88:99:e4:79:73:1d:31:8a:f6:99:44:41:41:92:91:58: 28:b1:74:cb:e6:41:a2:9d:33:64:bb:7e:8c:3f:c4:ab:50:d3: c2:c5:de:6c:09:21:27:e9:19:d5:ce:3d:52:03:4f:63:1a:8f: a7:5a:b9:e7:c9:53:b4:39:03:26:0b:8d:d1:1a:45:64:96:ea: 2c:53:c1:6d:8e:56:95:65:0e:08:96:14:c3:73:d1:22:97:c0: dd:9f:1c:6a:f9:ee:70:0a:4b:f1:5a:c9:94:0a:41:33:25:d1: b2:93:80:1d:f3:56:b5:13:9e:63:90:4b:46:5a:26:14:92:10: 1a:41:8c:6c:69:bd:a2:e4:06:24:5b:7a:ea:e3:1b:61:ba:5c: a6:0d:67:8c:47:5f:ff:9d:89:42:46:b3:3a:52:19:90:58:9b: 1b:93:92:69:5c:e2:de:79:78:7d:f7:07:21:54:4b:21:af:60: 63:8f:98:01:21:26:ee:e5:d9:7f:5f:2c:2b:48:49:84:74:e0: 34:b0:98:2b:42:73:d5:5f:37:9c:40:30:d4:82:46:e9:9c:41: 57:a1:bd:cb:1e:2a:a2:2e:98:40:89:ec:0d:e1:91:c9:91:3b: 20:dc:18:43 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDCnBU+1PlUtB21WeHnuZZMFfC6wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTEwNTA5MTgwMFoX DTI2MTEwNDA5MjMwMFowMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2 NDdBQzg2QjE0QkIyN0U0MzBDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoEJQN/FDPSkeC7n331tswDujIohHuSdkh2jQM9sSPQwX/c3Wo6hV090gLq TKfgUFUwv2vlIhZL4HllLnyq4TW50cyqx6JBhcgXDkHxz5j/hprizZeV5sld9e8y BeFdDaaJvx02u/u8gM6KAoD7ykJBtQmAH8v3w2xfVsbJ/WgtO1RGSR6GKuaiew/d gs7exAC4sHF+R1xi5t5Z9Anio4yp4h83MiD2FmPKya/AoI5z1glcukL6YlPkRq8A J5tp5jADfwxudPVFPfiBlfikL4E0n0ZsWbHLa1Htc5A8XcGkxp8fvYa6HNHEAOHL ULxFSGLqgx4wCvic5ZqNIK8PJgMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIswFnzaIP5+3PxkeshrFLsn5DDIMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zM2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRm LTM4MjMtNDhhZi05NTNkLWFhYTg3M2IwZmI2YS8wLzhCMzAxNjdDREEyMEZFN0VE Q0ZDNjQ3QUM4NkIxNEJCMjdFNDMwQzgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgv+swDQYJKoZIhvcNAQELBQADggEBAFIYk9s5L4n+6XhpEFxgaEMtEqbziJnk eXMdMYr2mURBQZKRWCixdMvmQaKdM2S7fow/xKtQ08LF3mwJISfpGdXOPVIDT2Ma j6dauefJU7Q5AyYLjdEaRWSW6ixTwW2OVpVlDgiWFMNz0SKXwN2fHGr57nAKS/Fa yZQKQTMl0bKTgB3zVrUTnmOQS0ZaJhSSEBpBjGxpvaLkBiRbeurjG2G6XKYNZ4xH X/+diUJGszpSGZBYmxuTkmlc4t55eH33ByFUSyGvYGOPmAEhJu7l2X9fLCtISYR0 4DSwmCtCc9VfN5xAMNSCRumcQVehvcseKqIumECJ7A3hkcmROyDcGEM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:09 2025 by rpki-client