This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer (raw, json) Hash identifier: GdTW/sx/rtceEC1RA6LMzLUfyogTIjJqY1IRMoaTT1A= Subject key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 777A1D8C52B85F6D53F62E16B628AA8F1287330E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft caRepository: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 20 Jan 2026 12:22:13 +0000 Certificate not after: Tue 19 Jan 2027 12:27:13 +0000 Subordinate resources: IP: 157.20.95.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7a:1d:8c:52:b8:5f:6d:53:f6:2e:16:b6:28:aa:8f:12:87:33:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 20 12:22:13 2026 GMT Not After : Jan 19 12:27:13 2027 GMT Subject: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:af:8a:55:ed:c7:2b:59:ae:74:47:f3:b1: 78:db:03:f9:e7:87:4d:f2:26:1a:34:e2:46:96:99: 42:c6:6a:72:f1:ef:79:7e:9c:ab:00:c3:71:65:01: f6:73:ac:8c:41:38:0b:a2:83:de:b8:fb:09:7d:a1: 1a:85:38:ac:28:fa:10:93:c5:4f:ee:c8:52:5f:60: 40:6d:c9:2c:dd:0a:1f:c6:6a:4b:38:91:c7:16:d1: c0:92:8d:e5:44:da:dc:ca:d6:55:f0:29:a6:bd:18: 78:44:0c:25:95:a2:3c:76:f0:dc:0f:4d:23:c3:2a: 57:f9:85:15:f8:71:d1:77:db:21:36:d3:bf:11:02: 24:08:2d:37:3e:ee:50:9d:ce:97:c2:26:27:23:6f: 6e:bf:84:68:37:50:cd:b5:36:e9:0e:17:a4:fc:26: c4:a9:e4:ef:75:8e:11:c0:cd:1f:0a:99:78:bb:49: 91:74:36:0f:a7:79:72:40:e5:eb:85:36:0c:dc:35: 80:2b:59:23:aa:b1:36:8d:06:a7:a6:93:ff:7d:ae: 89:16:d1:ac:bc:93:71:c3:a0:f0:39:f9:f5:03:7c: 83:8c:24:6e:e4:2c:76:82:12:94:67:96:f2:f0:c6: 19:ad:04:f0:9a:d3:90:93:9f:97:32:74:cf:0a:4f: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.95.0/24 Signature Algorithm: sha256WithRSAEncryption 74:07:2e:e6:82:9b:2b:c6:f5:0a:51:1b:e9:33:01:d3:4b:b1: 06:67:79:ef:c7:19:fd:0a:72:a1:8d:b1:79:43:ac:57:68:69: e9:66:8f:40:a8:35:85:e9:7c:71:f7:43:24:1f:d6:31:3a:2f: ef:ff:12:9c:26:8d:dc:4b:a0:57:97:c8:4a:64:9f:a6:bb:d5: 47:c5:13:a4:ba:c6:0e:3a:3f:95:ba:9b:bd:08:0d:6f:c6:eb: eb:fc:2a:c4:7c:be:02:2f:e8:69:b9:e8:d1:9c:fe:7e:82:c3: a5:e4:8b:66:28:6f:d0:a9:a5:42:30:dd:4b:97:07:9e:54:f7: 9f:bf:e2:1c:46:16:bb:d1:5f:6b:29:29:b9:d5:a1:90:f3:da: f1:c0:eb:44:b7:c8:e1:df:6f:60:7b:d2:3e:0c:84:49:a4:46: cc:d1:ad:d5:21:1e:10:bd:32:75:34:1a:f2:69:0a:31:0a:ce: 3c:34:4b:67:44:70:12:eb:31:75:97:00:26:00:2b:60:87:9c: 1f:2d:13:61:49:a0:b0:24:59:d7:51:a3:8f:21:58:bf:b4:82: 5d:a2:62:db:ac:06:bf:97:03:14:d5:ed:c4:35:aa:14:53:a2: 0e:14:2b:17:ec:3c:ef:b1:a5:64:17:73:54:2f:a0:95:95:7c: 66:2e:84:d8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUd3odjFK4X21T9i4WtiiqjxKHMw4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEyMDEyMjIxM1oX DTI3MDExOTEyMjcxM1owMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFD NDhFQUYyM0VGMjEwQkE4RkRDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAir4pV7ccrWa50R/OxeNsD+eeHTfImGjTiRpaZQsZqcvHveX6cqwDDcWUB 9nOsjEE4C6KD3rj7CX2hGoU4rCj6EJPFT+7IUl9gQG3JLN0KH8ZqSziRxxbRwJKN 5UTa3MrWVfAppr0YeEQMJZWiPHbw3A9NI8MqV/mFFfhx0XfbITbTvxECJAgtNz7u UJ3Ol8ImJyNvbr+EaDdQzbU26Q4XpPwmxKnk73WOEcDNHwqZeLtJkXQ2D6d5ckDl 64U2DNw1gCtZI6qxNo0Gp6aT/32uiRbRrLyTccOg8Dn59QN8g4wkbuQsdoISlGeW 8vDGGa0E8JrTkJOflzJ0zwpPhP0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP0Y4+y18ihcB1HEjq8j7yELqP3MMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhZTEzYmFj LTkxYzEtNDYzYi04MzMzLTY0ZWVjNmQyNzk3ZS8wL0ZEMThFM0VDQjVGMjI4NUMw NzUxQzQ4RUFGMjNFRjIxMEJBOEZEQ0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdFF8wDQYJKoZIhvcNAQELBQADggEBAHQHLuaCmyvG9QpRG+kzAdNLsQZnee/H Gf0KcqGNsXlDrFdoaelmj0CoNYXpfHH3QyQf1jE6L+//EpwmjdxLoFeXyEpkn6a7 1UfFE6S6xg46P5W6m70IDW/G6+v8KsR8vgIv6Gm56NGc/n6Cw6Xki2Yob9CppUIw 3UuXB55U95+/4hxGFrvRX2spKbnVoZDz2vHA60S3yOHfb2B70j4MhEmkRszRrdUh HhC9MnU0GvJpCjEKzjw0S2dEcBLrMXWXACYAK2CHnB8tE2FJoLAkWddRo48hWL+0 gl2iYtusBr+XAxTV7cQ1qhRTog4UKxfsPO+xpWQXc1QvoJWVfGYuhNg= -----END CERTIFICATE-----Generated at Wed Jan 21 10:30:44 2026 by rpki-client