This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer File: 99A17325620A243689E32E6074D5CFCA91D915EB.cer (raw, json) Hash identifier: zo2hwSMNiBEsLY+icXGjGdQz5g31Kv78Mf+yutM0vb4= Subject key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6D8074F4EE672F68815B7FD03B1978DBFB48B01F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 09:48:42 +0000 Certificate not after: Fri 29 Jan 2027 09:53:42 +0000 Subordinate resources: IP: 157.20.156.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:80:74:f4:ee:67:2f:68:81:5b:7f:d0:3b:19:78:db:fb:48:b0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 30 09:48:42 2026 GMT Not After : Jan 29 09:53:42 2027 GMT Subject: CN=99A17325620A243689E32E6074D5CFCA91D915EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:ca:0b:09:dc:6e:f2:b0:16:5c:93:24:ea: a0:70:cd:71:62:35:4d:6f:e9:e0:eb:e0:f8:b7:0b: 9f:d4:89:de:03:e4:e9:7b:0c:8f:48:66:91:35:d5: d0:6f:45:0c:0c:17:6e:5d:89:eb:b8:f4:4b:29:6e: 26:05:4f:5c:8c:6e:1e:1a:63:76:b5:ae:57:4f:70: 1a:e0:d1:fe:ff:d3:9f:a2:55:26:b4:79:ab:bd:0f: 3d:dd:9f:54:2b:1b:bf:a2:95:ed:68:ea:33:72:c8: 0b:6f:97:7d:56:ae:c1:0d:87:1a:63:e5:08:32:08: 36:f4:ff:fc:e3:89:de:a3:87:dc:b5:24:b5:31:59: d3:ee:f8:29:3c:91:38:c4:55:b4:9f:6a:18:90:3a: f3:1b:d8:cb:c4:d0:c6:ef:19:b6:59:6f:bc:3a:fd: a3:29:f9:bf:72:cd:5b:fe:97:bf:6a:46:dd:8b:44: ea:7c:12:0f:23:19:74:fd:10:ae:b3:2d:13:e3:86: 37:66:b8:97:1a:b7:32:48:06:5b:14:ab:b4:62:8c: 7e:48:ad:32:ee:92:98:5e:25:ef:22:e5:2e:15:80: f6:bd:44:72:6d:dc:af:59:d1:fc:ef:d8:e0:c8:5c: a0:70:48:2c:22:0d:74:6c:9d:6f:26:20:71:c8:d5: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.156.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:18:8f:8a:34:82:b1:3a:7f:80:23:72:05:1d:ec:78:b4:11: ea:c4:80:94:44:93:a5:2a:f2:3b:9b:ba:f1:65:71:8e:60:88: d3:41:45:bc:91:f7:df:7b:5e:c8:5a:28:31:7f:ed:c2:a9:60: cc:38:08:7d:4f:d3:29:92:ea:30:3c:1e:70:0f:c3:82:18:de: 28:f3:d8:51:a5:76:8a:fa:e1:21:a7:14:38:52:7f:d4:44:ee: 3b:f7:21:a2:c9:b4:ff:fc:35:51:c3:7a:ca:47:a1:3c:cb:c4: 18:1c:dc:d0:44:dc:de:f7:77:d9:26:02:70:8e:ab:cf:5c:7d: cb:af:1f:e5:e7:49:be:e2:db:d7:48:d2:f7:e5:a2:dc:e3:66: 6b:f8:d0:04:27:2b:85:5c:43:a2:e0:3e:9d:fb:1f:e2:bd:be: c4:18:d0:37:64:e1:5d:7d:88:4d:bb:fe:2f:de:9a:7b:2d:78: bf:5f:bd:d2:eb:0f:e5:8d:e7:3e:b3:af:33:fd:10:36:68:92: 56:e7:13:8b:b9:a4:1f:04:b4:3d:bb:ae:df:d0:8b:bd:4e:8b: ab:8d:ab:91:d6:37:c2:95:36:22:fc:92:3a:e5:26:82:25:98: 50:78:67:0a:af:14:bf:24:ba:bc:2d:7e:6f:3b:34:f3:04:f0: ad:56:81:97 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbYB09O5nL2iBW3/QOxl42/tIsB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEzMDA5NDg0MloX DTI3MDEyOTA5NTM0MlowMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMy RTYwNzRENUNGQ0E5MUQ5MTVFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOD9ygsJ3G7ysBZckyTqoHDNcWI1TW/p4Ovg+LcLn9SJ3gPk6XsMj0hmkTXV 0G9FDAwXbl2J67j0SyluJgVPXIxuHhpjdrWuV09wGuDR/v/Tn6JVJrR5q70PPd2f VCsbv6KV7WjqM3LIC2+XfVauwQ2HGmPlCDIINvT//OOJ3qOH3LUktTFZ0+74KTyR OMRVtJ9qGJA68xvYy8TQxu8ZtllvvDr9oyn5v3LNW/6Xv2pG3YtE6nwSDyMZdP0Q rrMtE+OGN2a4lxq3MkgGWxSrtGKMfkitMu6SmF4l7yLlLhWA9r1Ecm3cr1nR/O/Y 4MhcoHBILCINdGydbyYgccjVOjcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJmhcyViCiQ2ieMuYHTVz8qR2RXrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkNTliODIy LTVjMDgtNDZmMS1iMjVlLTc1OGRjMThlOTkwNS8wLzk5QTE3MzI1NjIwQTI0MzY4 OUUzMkU2MDc0RDVDRkNBOTFEOTE1RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFJwwDQYJKoZIhvcNAQELBQADggEBAC4Yj4o0grE6f4AjcgUd7Hi0EerEgJRE k6Uq8jubuvFlcY5giNNBRbyR9997XshaKDF/7cKpYMw4CH1P0ymS6jA8HnAPw4IY 3ijz2FGldor64SGnFDhSf9RE7jv3IaLJtP/8NVHDespHoTzLxBgc3NBE3N73d9km AnCOq89cfcuvH+XnSb7i29dI0vflotzjZmv40AQnK4VcQ6LgPp37H+K9vsQY0Ddk 4V19iE27/i/emnsteL9fvdLrD+WN5z6zrzP9EDZoklbnE4u5pB8EtD27rt/Qi71O i6uNq5HWN8KVNiL8kjrlJoIlmFB4ZwqvFL8kurwtfm87NPME8K1WgZc= -----END CERTIFICATE-----Generated at Mon Feb 2 16:00:22 2026 by rpki-client