This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer
File:                     B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer (raw, json)
Hash identifier:          5yMLf44NWY+x0QL/gkYfUm9nIG1pufE6yIPVXRCaeKk=
Subject key identifier:   B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       3930D37C7306AB2DAA90DC623DCC90392B13EE13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jan 2026 16:58:34 +0000
Certificate not after:    Wed 13 Jan 2027 17:03:34 +0000
Subordinate resources:    IP: 157.20.36.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 13:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:30:d3:7c:73:06:ab:2d:aa:90:dc:62:3d:cc:90:39:2b:13:ee:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jan 14 16:58:34 2026 GMT
            Not After : Jan 13 17:03:34 2027 GMT
        Subject: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:aa:a6:24:4c:31:27:43:8b:11:3d:d4:4b:
                    8f:21:05:7f:9d:fe:58:ff:32:48:27:fa:d5:e8:b7:
                    b8:54:ff:e5:0e:a5:cd:24:ea:b6:b2:d7:16:2b:c1:
                    dc:2d:e4:94:73:0d:99:70:ed:74:87:1d:f8:75:2a:
                    65:ff:92:6a:e7:17:62:9a:29:00:54:14:df:12:a2:
                    92:af:16:84:e5:1e:03:a9:59:5a:b1:ab:6f:76:cc:
                    e9:43:82:2d:1c:ce:12:fd:62:23:7d:dc:ad:10:ad:
                    f5:3c:71:fb:dc:11:41:fc:11:1d:da:69:f9:58:c1:
                    3c:f3:a4:82:91:99:6b:ed:8c:12:16:49:88:14:22:
                    50:41:4c:e3:42:2f:72:c2:72:f1:f6:ff:91:fc:54:
                    9b:12:09:43:e6:11:bd:da:56:07:eb:c0:52:7b:f7:
                    a9:79:84:85:5e:ef:f9:06:38:af:47:7d:01:b4:15:
                    d2:99:69:ed:c9:a4:80:a3:29:ac:38:68:be:bb:75:
                    79:c7:2d:68:b8:6d:37:14:29:40:2f:54:7c:47:b8:
                    7f:e2:0b:91:23:ff:e5:54:1d:94:9c:68:d7:4f:68:
                    64:46:bf:1f:9f:14:9a:e8:05:f7:de:c0:61:be:41:
                    89:0f:cf:34:16:d9:ff:cc:3d:71:b6:64:b6:6e:7e:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:64:57:89:30:d4:63:4e:e5:56:cd:c4:3d:9f:13:86:e3:
         4a:85:7f:7f:6b:83:53:9b:94:f7:28:ea:b8:cc:3f:2a:f9:f2:
         a0:43:d1:39:6d:3e:60:ab:9a:62:bb:7e:29:de:af:8c:e9:50:
         60:17:7f:f5:68:42:83:61:88:70:e9:b0:ba:7e:ff:f9:8f:6e:
         cf:12:01:e0:9b:22:df:b6:d1:a6:3a:e6:18:ab:78:31:34:68:
         f0:f4:6c:eb:f3:1b:19:fc:b2:8f:7f:a2:02:4a:25:4c:1e:98:
         eb:7d:21:ed:d2:0c:d9:07:ae:a7:c2:03:95:e5:be:f3:4f:7f:
         eb:23:55:a7:eb:c1:07:9d:95:16:ec:42:d4:b4:9b:b9:fa:ac:
         31:5d:d6:68:eb:0f:d9:a7:d9:46:50:b0:59:b4:e4:a4:e4:ca:
         77:56:d0:7d:85:18:f3:a1:bd:ee:29:7e:4a:19:7e:0d:3b:ab:
         45:e2:16:af:6c:1a:29:19:89:fa:86:90:ea:97:5d:a6:48:2a:
         2c:2b:3e:71:f4:9a:2b:90:76:df:76:38:1d:48:c0:c2:82:f6:
         3d:cd:51:ed:b7:85:06:7b:13:07:95:19:ab:c4:c5:86:43:19:
         89:e5:3f:cb:58:af:b7:b7:57:d4:8b:ee:1b:d4:f0:97:1e:23:
         ac:58:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:31:59 2026 by rpki-client