This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer
File:                     09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer (raw, json)
Hash identifier:          bi8hmznpx3lxAwhU/ZOTMQdoDbl7vAO/U8VWiLbcOV8=
Subject key identifier:   09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D7563AE86380722B646822A3DF24D56B64CDCA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Apr 2025 16:04:40 +0000
Certificate not after:    Tue 21 Apr 2026 16:09:40 +0000
Subordinate resources:    IP: 103.143.194.0/23
                          IP: 2405:59c0::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 18:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:75:63:ae:86:38:07:22:b6:46:82:2a:3d:f2:4d:56:b6:4c:dc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 22 16:04:40 2025 GMT
            Not After : Apr 21 16:09:40 2026 GMT
        Subject: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:0f:59:48:aa:dc:8d:1c:13:fa:e5:35:20:
                    e2:0e:d4:4f:ab:c6:ae:02:4e:bd:b3:d8:7f:02:96:
                    4b:fb:38:9b:dd:d8:2f:01:bc:69:ad:3b:4b:cb:4d:
                    f2:14:32:1c:67:bc:1c:27:37:e1:70:29:c8:5f:7b:
                    e4:e7:c8:8a:74:2f:5d:96:e3:05:2a:6f:76:ad:ce:
                    a3:f8:46:de:fd:56:bf:5e:ae:f9:1c:cc:fe:c3:54:
                    3f:12:3e:86:ff:cf:da:c6:3f:30:bf:f9:32:cf:12:
                    6c:1c:64:0f:b1:cf:71:b6:1e:7e:3c:70:24:88:47:
                    4c:c1:a4:94:7d:6b:e0:81:41:5d:f0:d9:28:13:63:
                    6d:67:5e:32:3c:92:69:d2:bb:34:59:73:e2:12:2a:
                    cf:d4:c4:8e:2c:68:3d:1f:0f:9b:2b:bf:05:b1:02:
                    4e:a0:0b:30:42:74:50:f8:cb:e7:dc:5f:1b:a5:77:
                    32:ba:1c:e7:89:fe:f3:e0:e8:ee:ae:7a:91:46:9c:
                    35:a3:f2:04:57:99:31:ca:3d:bd:c6:bc:38:54:dd:
                    7b:eb:46:b5:38:2b:08:e9:46:86:ce:d4:f3:96:fb:
                    1f:1f:fa:bb:0d:76:eb:73:fb:cc:22:54:cf:69:49:
                    c9:c5:39:c4:52:fd:e9:b9:78:35:95:04:b5:7c:11:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.194.0/23
                IPv6:
                  2405:59c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:68:77:1a:3f:ee:74:be:b6:19:fa:5f:26:9e:76:87:59:
         49:82:95:f2:0e:d5:95:ba:76:f7:f5:83:e9:6a:ab:01:36:b1:
         39:61:55:90:1f:6c:5c:8c:82:cd:96:71:50:b9:04:67:fc:14:
         3e:19:83:a3:28:c1:5b:e5:87:8b:f8:d5:25:30:09:bc:91:8c:
         37:58:8e:6f:49:fe:6f:84:0c:2b:d2:84:98:3f:ff:a9:43:e0:
         e6:ea:51:db:37:2b:ac:9f:55:b7:d4:cb:3d:00:db:08:cf:09:
         f1:14:8a:f8:0d:b7:1a:ea:9f:e0:cc:83:0c:34:75:54:df:12:
         7e:c1:e3:c5:4f:e6:2e:1e:49:92:bb:0e:58:84:8f:95:99:15:
         f8:31:91:5a:7a:e2:64:ee:3f:29:31:16:30:4b:39:db:6f:c5:
         08:7a:d1:bb:66:11:43:b8:c4:fb:14:65:c3:35:95:ef:83:35:
         3f:ed:70:58:e3:ee:f7:3f:af:f7:85:a9:8b:bd:31:f3:fb:d6:
         f8:b6:69:86:9a:7c:1a:b1:31:0c:ed:0b:e5:fa:25:41:13:11:
         e5:49:dd:ac:81:12:4e:c6:f0:db:fa:9c:6c:89:83:87:23:4f:
         97:b1:37:91:2a:aa:a3:80:5f:08:c7:95:02:31:65:5f:eb:47:
         30:95:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----