This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
File: 07087494011A8BD71E0AB56E4A29820B0C265D45.cer (raw, json)
Hash identifier: f7TDzJMcEHsEcMMl1GipLiZjLWVgBgtDGzD6KkqJBRw=
Subject key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 029C86763D8026AD64A866A70EF5B8BDC418D9D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
caRepository: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 29 Jan 2026 18:08:33 +0000
Certificate not after: Thu 28 Jan 2027 18:13:33 +0000
Subordinate resources: IP: 103.89.248.0/24
IP: 2001:df0:c300::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:9c:86:76:3d:80:26:ad:64:a8:66:a7:0e:f5:b8:bd:c4:18:d9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 29 18:08:33 2026 GMT
Not After : Jan 28 18:13:33 2027 GMT
Subject: CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:ee:8e:cb:e4:18:ea:f4:bb:67:66:4f:88:
f5:74:c8:67:fe:1c:21:d5:ef:9d:14:12:cd:31:55:
9c:95:8d:e5:af:2e:0d:d7:90:3e:ea:00:c6:71:80:
cf:7f:80:90:91:c4:ea:b9:76:6b:b4:7f:ed:e0:ba:
e5:bd:63:81:64:3b:e3:92:a4:95:b5:77:3a:21:e3:
55:ec:66:d6:40:5a:a3:59:07:ee:1f:52:e2:df:ae:
cf:ee:de:5f:cc:4b:71:29:83:e8:ae:82:4f:1c:41:
24:a5:57:7a:f1:7e:b3:2e:6f:c1:d4:dd:57:ca:09:
a3:79:b5:1d:75:53:5e:a1:65:bf:54:61:97:12:fb:
57:cc:69:43:2e:2a:e1:64:ab:cf:b6:0d:93:9b:9e:
88:8c:a2:a8:36:98:81:7a:a4:bd:90:3c:1e:59:c6:
d8:4f:2a:a4:6e:75:4c:7f:92:45:d2:29:58:e8:bf:
dc:e4:82:70:04:e6:c2:b0:d9:5c:89:6b:4d:81:9e:
06:8d:ed:08:97:9e:c6:16:b2:52:fb:19:b2:d7:81:
23:a1:98:8f:d1:6d:02:30:cb:19:17:eb:69:39:48:
b4:ec:8e:c0:3e:45:05:ee:f3:eb:f0:82:46:4d:a3:
d8:ce:74:e5:bf:95:1d:73:19:55:71:14:06:c1:a0:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.248.0/24
IPv6:
2001:df0:c300::/48
Signature Algorithm: sha256WithRSAEncryption
95:1b:c0:71:91:8b:05:25:47:95:8e:bd:03:3b:db:31:10:36:
f2:2c:d3:0d:cc:e5:e0:0b:c8:bd:b9:ed:1e:52:e5:82:0f:c7:
30:46:46:45:94:71:d2:89:69:19:8b:d1:90:db:5e:b0:15:98:
d0:4f:79:79:61:cd:80:c8:82:14:bb:48:89:35:36:e9:7a:1f:
61:c5:8a:09:74:66:91:3d:a7:13:22:11:f2:85:28:78:d9:4f:
1c:dd:25:04:6a:4e:be:bb:b9:36:30:5c:20:a4:02:ee:f0:65:
ba:03:50:6b:86:b6:18:76:42:f9:24:8b:f1:07:8e:49:37:9d:
b2:c0:87:84:f3:da:ac:9f:11:62:f7:3a:95:ab:44:98:93:5a:
06:56:bc:98:e4:f2:63:9e:8b:ba:09:e3:8a:35:9c:a0:37:93:
61:02:81:0c:2f:6f:41:18:00:2a:1e:e4:8d:58:42:29:22:06:
02:27:10:22:38:f7:84:02:23:5c:f3:1e:32:c8:77:44:76:2d:
20:bb:d2:b6:c5:a7:76:7e:1e:3a:c3:af:a3:67:fb:3f:65:da:
6f:07:20:c1:9f:88:04:22:ff:8f:bd:3d:a1:d9:17:aa:81:b7:
f8:18:2b:0f:93:5b:8d:06:05:19:b0:8e:38:14:a9:d7:5c:89:
f4:59:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:20:28 2026 by rpki-client