This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer
File:                     0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer (raw, json)
Hash identifier:          icIKRVyX6kvr3tQjGaz27Mm5dJcck1iu43MtAqwffrY=
Subject key identifier:   0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       748253A3B0719C1B204328EE1B0D90658ED2C504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 13 Sep 2025 18:12:07 +0000
Certificate not after:    Sat 12 Sep 2026 18:17:07 +0000
Subordinate resources:    IP: 103.76.108.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:82:53:a3:b0:71:9c:1b:20:43:28:ee:1b:0d:90:65:8e:d2:c5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep 13 18:12:07 2025 GMT
            Not After : Sep 12 18:17:07 2026 GMT
        Subject: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:94:8b:f3:d5:e3:87:d9:66:c5:48:f6:4c:
                    cd:0c:6e:f1:e6:56:cc:22:8d:6b:70:3a:74:13:d1:
                    dc:4b:ef:6d:99:0c:c8:c3:3a:c2:e6:58:01:0e:43:
                    67:0b:a2:5d:30:c6:45:2e:20:8d:57:5f:05:5f:6f:
                    4d:e2:8a:6b:91:55:a9:91:a2:09:3b:24:48:b6:4f:
                    89:f0:2e:63:ef:6b:fc:78:25:ae:eb:a4:1c:c8:96:
                    2f:30:dd:7d:76:2f:c9:e6:ed:b8:cb:39:a8:61:79:
                    ff:d7:59:c7:df:11:56:22:4c:0f:ef:39:fe:dc:d9:
                    05:b2:91:26:90:3e:d2:5f:5f:57:bd:15:c7:9e:a7:
                    94:f7:d4:a4:96:91:f8:c4:dd:4d:55:ab:e8:17:bc:
                    8d:d8:f5:06:a5:7d:8b:d2:57:71:bd:00:7c:c7:dc:
                    f2:3b:95:23:5a:64:17:0b:0e:da:c5:e7:d4:d7:27:
                    76:44:02:8b:4e:2e:e1:8a:2f:f6:99:b7:81:b1:4c:
                    9a:09:67:01:68:e8:02:a0:ab:6f:1d:e7:7e:82:88:
                    25:6f:bb:a2:c3:ea:29:1f:b4:ee:4b:bb:b7:95:8c:
                    43:01:c0:4a:a4:74:16:ed:9f:90:8e:79:15:00:80:
                    b2:e0:29:76:f4:1a:6d:12:20:aa:09:1a:be:f2:c2:
                    6a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:fd:ed:3f:c0:f9:71:d3:c5:d8:fa:63:5c:2c:9e:ab:c9:
         d6:75:26:bf:7a:19:f5:fa:c4:18:47:6c:63:19:31:1d:c4:8b:
         96:93:ba:c2:f9:7a:d3:b3:ae:34:d8:4e:94:79:2d:e4:0f:b2:
         9f:27:04:1b:fc:a5:b4:6e:4d:04:9e:5e:c3:3f:6a:19:b2:42:
         08:55:79:50:03:83:eb:05:62:db:48:64:1b:7f:70:e7:0d:ca:
         09:2d:5c:e6:e0:be:88:fa:47:ba:95:e3:5e:16:c6:54:18:fa:
         95:6f:ee:42:0d:08:55:aa:f6:0e:bf:aa:ac:d9:b2:18:f5:36:
         28:33:63:24:ef:7e:4b:7d:e1:64:bc:49:7d:28:0f:bc:2b:83:
         cc:a5:11:c5:72:ea:65:ed:ff:56:f1:46:83:22:2a:12:d8:ce:
         85:59:70:16:d9:1e:3e:70:9a:9b:4c:9a:9e:83:95:ed:c5:a5:
         10:75:17:3c:41:44:fb:e6:d8:40:4e:ef:9c:e6:15:1b:82:85:
         f8:36:32:5e:43:ce:ab:d1:12:fb:c1:ea:f3:b1:f6:24:4a:3f:
         16:4c:ea:3c:79:f7:f0:c6:db:5d:99:a7:8a:ab:b4:65:06:e1:
         5c:c4:3b:23:0f:ca:bd:ef:6f:76:8a:c4:d2:80:df:24:77:9a:
         09:cf:c0:ba
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUdIJTo7BxnBsgQyjuGw2QZY7SxQQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMzE4MTIwN1oX
DTI2MDkxMjE4MTcwN1owMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNERE
OTNDREM3QTUyNzdGRTkzQThFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmLlIvz1eOH2WbFSPZMzQxu8eZWzCKNa3A6dBPR3EvvbZkMyMM6wuZYAQ5D
ZwuiXTDGRS4gjVdfBV9vTeKKa5FVqZGiCTskSLZPifAuY+9r/HglruukHMiWLzDd
fXYvyebtuMs5qGF5/9dZx98RViJMD+85/tzZBbKRJpA+0l9fV70Vx56nlPfUpJaR
+MTdTVWr6Be8jdj1BqV9i9JXcb0AfMfc8juVI1pkFwsO2sXn1NcndkQCi04u4Yov
9pm3gbFMmglnAWjoAqCrbx3nfoKIJW+7osPqKR+07ku7t5WMQwHASqR0Fu2fkI55
FQCAsuApdvQabRIgqgkavvLCag0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFA+62S9I3xVHfk3ZPNx6Unf+k6jrMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9jODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MWFmMDIx
LTFjMDEtNGEyZS1iNWQzLWMxYmJiMTY1MGM0My8wLzBGQkFEOTJGNDhERjE1NDc3
RTRERDkzQ0RDN0E1Mjc3RkU5M0E4RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnTGwwDQYJKoZIhvcNAQELBQADggEBAB3r/e0/wPlx08XY+mNcLJ6rydZ1Jr96
GfX6xBhHbGMZMR3Ei5aTusL5etOzrjTYTpR5LeQPsp8nBBv8pbRuTQSeXsM/ahmy
QghVeVADg+sFYttIZBt/cOcNygktXObgvoj6R7qV414WxlQY+pVv7kINCFWq9g6/
qqzZshj1NigzYyTvfkt94WS8SX0oD7wrg8ylEcVy6mXt/1bxRoMiKhLYzoVZcBbZ
Hj5wmptMmp6Dle3FpRB1FzxBRPvm2EBO75zmFRuChfg2Ml5DzqvREvvB6vOx9iRK
PxZM6jx59/DG212Zp4qrtGUG4VzEOyMPyr3vb3aKxNKA3yR3mgnPwLo=
-----END CERTIFICATE-----