This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer (raw, json)
Hash identifier: LGW5HaeoWLkV2SzIxddWU+CpeHi4VX9PQVABOeF3kFU=
Subject key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 18A6EED97C1721EB0F4A57499F36A0ADF7B554D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
caRepository: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 22 Dec 2025 08:00:17 +0000
Certificate not after: Mon 21 Dec 2026 08:05:17 +0000
Subordinate resources: IP: 103.162.220.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 13:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a6:ee:d9:7c:17:21:eb:0f:4a:57:49:9f:36:a0:ad:f7:b5:54:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 22 08:00:17 2025 GMT
Not After : Dec 21 08:05:17 2026 GMT
Subject: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:0d:44:25:77:ac:74:04:eb:87:b7:ef:af:
a4:c1:b5:fe:6c:51:4b:91:81:cd:b9:ad:6d:dd:f2:
88:1e:e7:76:01:c9:e4:e6:55:a3:10:8c:29:b0:f5:
6e:6b:7b:a1:23:0b:5a:c4:48:b6:18:41:e1:25:e1:
41:b0:f8:5d:6c:a4:8a:89:dc:47:7e:4a:4f:f4:b1:
5d:cf:5e:36:98:c2:d5:6a:1a:21:8d:1f:9d:0a:ff:
48:02:bb:67:12:c5:ce:5a:bd:ae:55:9d:f7:87:78:
d8:f5:aa:62:22:ca:67:6a:a2:e7:b4:e3:9f:45:57:
c0:81:22:90:fa:b8:ee:09:ae:f0:e2:63:ae:67:ed:
e3:31:17:6e:50:b2:8b:6d:c2:56:dc:91:13:e6:db:
a1:9c:b9:ac:93:34:60:4b:48:2f:5f:4e:93:cf:12:
e3:e1:93:b9:a2:a2:fd:52:97:56:7c:b3:cf:cf:cc:
1b:f4:b0:e2:ba:16:9b:db:76:2e:cb:26:b6:fc:8e:
18:34:ae:7f:54:2a:07:73:3b:99:a4:ae:03:1d:3f:
b2:0b:fe:fe:e4:04:b7:0f:a5:a2:46:71:27:ff:8b:
ee:cc:a6:41:af:56:6a:50:86:36:94:29:b2:82:c7:
49:98:fb:56:5c:89:53:12:50:33:fe:b3:43:e9:08:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.220.0/23
Signature Algorithm: sha256WithRSAEncryption
74:fa:0a:ef:c9:64:cc:0a:3a:c8:bb:4d:59:81:b0:2c:ce:4d:
d2:05:6f:a5:b6:8f:26:91:38:f4:a6:b2:a4:43:a1:fc:1b:6c:
8a:1b:60:10:fb:eb:f7:f5:b4:77:6b:ab:a7:0f:3f:15:e5:ad:
a7:aa:d1:04:5c:19:f3:62:79:6f:e3:88:7c:82:99:74:c7:23:
25:85:68:e2:8d:08:49:fb:98:13:57:e8:bc:67:c4:7a:29:01:
e0:84:5b:76:96:96:ba:8b:b7:8a:cd:55:b4:ca:77:4e:c2:1f:
28:0f:68:d6:68:76:1f:f1:06:13:53:5c:4b:50:d0:33:36:c3:
60:05:f9:3f:24:fe:f2:bc:78:8d:e8:32:9a:10:41:5a:a0:41:
f6:27:cc:dd:d4:0d:98:49:5c:3c:02:f1:bb:9c:ef:f3:99:de:
00:a1:1a:80:47:a1:8b:e7:2f:58:03:ff:90:31:35:97:2f:3e:
52:d0:20:91:15:fe:66:8f:26:de:38:8b:f1:63:27:0f:cc:a0:
03:4b:8c:87:29:21:0c:a9:ba:17:d2:5e:47:1e:62:3b:03:86:
3d:79:08:b5:55:80:9a:7b:93:0e:3b:b6:9c:34:f8:db:99:be:
c9:e6:b4:ba:bf:45:54:2e:ef:a2:6c:ce:50:df:6d:3d:c2:0a:
e7:02:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:44:15 2026 by rpki-client