This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer (raw, json)
Hash identifier: sC/2gouwb77NrPho/WAhDN4mL42iHvpsTHNCFd8k0s4=
Subject key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 667FA8453697EBD5F0C4FF07D7354D3BF1FB99C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
caRepository: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 08:58:53 +0000
Certificate not after: Wed 27 Jan 2027 09:03:53 +0000
Subordinate resources: IP: 103.112.5.0/24
IP: 103.112.44.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7f:a8:45:36:97:eb:d5:f0:c4:ff:07:d7:35:4d:3b:f1:fb:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 28 08:58:53 2026 GMT
Not After : Jan 27 09:03:53 2027 GMT
Subject: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:8a:4b:52:23:be:59:70:4f:f6:cb:c0:21:
a7:84:dd:16:3f:72:3e:c2:45:07:c4:3e:a3:5d:c4:
d6:49:8c:4f:a3:e8:16:f5:60:9e:9b:8c:54:1f:59:
db:b2:c6:2f:9e:8e:95:90:09:4a:c4:67:90:90:19:
3d:54:51:a6:68:74:ec:b4:66:e6:8a:2e:86:94:af:
99:b2:80:14:34:e7:88:cf:cc:72:c8:c5:62:cb:97:
50:93:90:5c:f9:4a:fe:bd:91:d8:2d:23:ca:90:3b:
ca:38:12:3e:16:45:6a:f3:f1:91:b6:ef:ee:e6:ff:
7f:84:b7:99:fd:3c:ac:06:3c:00:36:b9:2e:42:77:
5f:d4:58:d2:3a:b7:66:00:96:be:be:0d:30:1d:9f:
ac:7b:f2:87:cf:c8:6b:2c:f2:fa:c0:53:cf:8d:05:
a6:3a:6c:9b:46:d1:d8:f0:99:a0:9c:be:1c:72:72:
63:73:22:8a:4f:84:eb:8d:f9:66:07:9a:44:30:cb:
93:9f:71:36:ea:44:11:73:ae:59:f1:82:40:ab:de:
cd:80:f2:8b:01:13:46:08:ad:9e:ba:86:04:32:d7:
d5:21:f0:61:27:57:e0:87:84:e8:c4:93:cd:27:8d:
0c:b6:2d:7d:b0:61:45:41:ae:8f:5b:10:ec:80:e7:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.112.5.0/24
103.112.44.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:92:0a:9f:05:1d:2e:a7:f6:be:85:f3:ad:4a:c1:73:1a:ec:
e9:88:eb:b3:ac:bc:a9:6c:3d:59:53:f0:e5:87:0e:b0:fd:3f:
0c:b9:ef:54:c9:1c:2d:8d:99:0c:9a:a9:25:e7:3e:9d:a2:01:
be:f9:6f:34:11:b2:a0:3c:b9:dd:69:93:17:56:8a:d3:00:e2:
1b:98:9d:e5:53:bc:63:9c:19:bf:7a:cd:c3:0b:1d:f9:7e:41:
1d:f0:72:02:fb:33:9d:e4:66:e5:f7:0f:03:6b:00:cb:f9:d7:
77:32:29:ed:a6:0e:09:69:c9:18:8c:86:aa:8e:55:55:9b:3d:
c5:6f:79:21:ae:28:13:c6:05:13:83:b2:67:ed:87:7d:3e:79:
19:90:6a:c9:ca:e3:6b:10:c4:98:2e:a1:13:65:40:0d:9a:61:
41:47:e4:15:fb:1a:27:58:94:dd:9d:6d:32:5a:68:07:87:d0:
42:54:f6:60:14:7a:ed:8d:de:02:97:3c:57:c7:b6:38:16:25:
a9:79:75:10:96:c3:5e:c6:1b:8e:da:6e:3f:5a:ae:db:11:9a:
21:73:96:5b:1d:35:74:6b:6d:35:2f:ba:0b:86:35:0a:d5:b0:
a5:ce:7c:d3:20:d3:4c:35:1b:4e:88:67:1d:bd:61:83:2b:2a:
64:b0:0b:c8
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUZn+oRTaX69XwxP8H1zVNO/H7mcAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyODA4NTg1M1oX
DTI3MDEyNzA5MDM1M1owMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1
NjFGRkEyQTI0MkFFQjhGNDg1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANLCiktSI75ZcE/2y8Ahp4TdFj9yPsJFB8Q+o13E1kmMT6PoFvVgnpuMVB9Z
27LGL56OlZAJSsRnkJAZPVRRpmh07LRm5oouhpSvmbKAFDTniM/McsjFYsuXUJOQ
XPlK/r2R2C0jypA7yjgSPhZFavPxkbbv7ub/f4S3mf08rAY8ADa5LkJ3X9RY0jq3
ZgCWvr4NMB2frHvyh8/Iayzy+sBTz40Fpjpsm0bR2PCZoJy+HHJyY3Miik+E6435
ZgeaRDDLk59xNupEEXOuWfGCQKvezYDyiwETRgitnrqGBDLX1SHwYSdX4IeE6MST
zSeNDLYtfbBhRUGuj1sQ7IDnJtMCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFA0IAPFRbaV72blWH/oqJCrrj0hTMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8yNDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0MWJjM2Vj
LTg2YjgtNGFmYi04YThmLWEwYTg2YTRjMjljNi8wLzBEMDgwMEYxNTE2REE1N0JE
OUI5NTYxRkZBMkEyNDJBRUI4RjQ4NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BABncAUDBAFncCwwDQYJKoZIhvcNAQELBQADggEBACuSCp8FHS6n9r6F861KwXMa
7OmI67OsvKlsPVlT8OWHDrD9Pwy571TJHC2NmQyaqSXnPp2iAb75bzQRsqA8ud1p
kxdWitMA4huYneVTvGOcGb96zcMLHfl+QR3wcgL7M53kZuX3DwNrAMv513cyKe2m
DglpyRiMhqqOVVWbPcVveSGuKBPGBRODsmfth30+eRmQasnK42sQxJguoRNlQA2a
YUFH5BX7GidYlN2dbTJaaAeH0EJU9mAUeu2N3gKXPFfHtjgWJal5dRCWw17GG47a
bj9artsRmiFzllsdNXRrbTUvuguGNQrVsKXOfNMg00w1G06IZx29YYMrKmSwC8g=
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:28:44 2026 by rpki-client