This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
File:                     CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer (raw, json)
Hash identifier:          EA22JTWG18wI8CcgT0Yvdbp+N6ZfXygn/dZJvFCzH+Y=
Subject key identifier:   CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       74C85E3D978C7DFE7D817A5FD1EF86D6EA23270C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jan 2026 02:14:41 +0000
Certificate not after:    Wed 20 Jan 2027 02:19:41 +0000
Subordinate resources:    IP: 157.15.62.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 13:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c8:5e:3d:97:8c:7d:fe:7d:81:7a:5f:d1:ef:86:d6:ea:23:27:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jan 21 02:14:41 2026 GMT
            Not After : Jan 20 02:19:41 2027 GMT
        Subject: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:3a:63:29:13:c5:b1:5a:31:c7:ab:47:d7:
                    ab:8c:b2:19:5c:c5:13:2d:f4:e1:84:d9:2c:5c:3a:
                    28:58:df:ce:e5:44:ab:50:fd:1d:a4:a1:16:72:14:
                    a1:65:76:d8:8e:82:a0:53:ec:01:8c:28:34:3c:04:
                    bf:c8:5f:a3:73:f9:6f:f5:be:bc:01:80:f2:ed:c6:
                    9a:ff:10:8d:74:24:54:a5:00:7a:49:ff:a2:f4:f8:
                    2a:f3:7f:be:8b:05:b5:86:8a:7d:37:64:7e:51:eb:
                    ee:62:98:c5:1a:09:a4:0a:5d:16:2e:e6:6d:2a:8b:
                    42:8c:40:21:70:d5:55:40:6f:5a:70:d8:b2:9f:c2:
                    b3:95:f8:81:b3:a6:49:1b:fb:75:ff:68:ec:61:91:
                    ec:fb:60:8a:dd:4a:99:b5:a6:87:38:d6:83:1d:38:
                    18:5b:20:c9:e1:0e:1a:34:e4:da:f5:9d:f9:c1:4b:
                    0c:b3:07:a5:75:84:6c:67:59:66:e7:68:6c:5e:03:
                    a5:ce:7a:91:b4:c8:c0:e7:88:01:f0:fb:cf:78:27:
                    54:3e:79:ca:03:7a:c9:33:45:60:6d:3a:da:1c:86:
                    b4:52:5f:c0:8b:3e:92:36:fd:40:7b:7a:1c:ed:c0:
                    d4:be:94:e8:2d:1b:ad:d3:ab:6e:4a:44:f3:67:14:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:55:71:f3:ab:f9:68:ec:fb:3e:67:7c:48:f9:8a:86:d3:
         8c:87:6d:d2:09:12:b1:15:e0:f7:36:b9:d0:2b:79:e7:96:fd:
         04:29:8f:5a:b4:da:c0:87:c8:f4:70:d5:45:49:60:14:7d:4c:
         2e:d6:70:ce:20:6f:a6:e2:38:6a:0e:61:4e:ec:8c:f8:0a:24:
         71:7c:08:69:cb:ad:e2:81:1c:b6:41:ca:eb:66:c5:b0:61:ed:
         14:21:44:30:25:9f:61:95:1a:97:8f:de:53:3c:7e:b7:6a:b2:
         1d:85:59:8f:65:32:c5:17:82:e2:9f:78:47:cc:d9:7d:0c:42:
         e6:6c:64:27:0b:8e:f1:58:62:e2:c8:7c:d7:d8:cb:b4:40:b2:
         70:11:96:d2:03:85:ba:b8:78:b8:09:d6:02:c8:ea:79:da:77:
         fe:25:8b:02:29:ad:6e:bd:47:62:d7:ee:64:11:24:32:a8:3f:
         7f:9a:3a:b5:93:4b:a5:32:24:6d:e7:49:e3:e0:54:61:5d:4a:
         8d:51:e7:6d:80:97:d9:e4:4e:0f:14:f2:ae:1c:e1:6a:be:38:
         b3:0a:71:6b:28:d7:8e:1e:17:11:b1:cc:d2:c2:76:36:a0:e0:
         c1:04:3a:5f:dd:e3:98:23:50:c8:0b:18:3f:70:96:92:39:97:
         f8:e6:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:31:40 2026 by rpki-client