This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer
File: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer (raw, json)
Hash identifier: b72O222m3MHg0czWIcHMvxzK0Ippd8oPBDTdCJkIRyw=
Subject key identifier: 11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4DF340FB76EE2DDE21D484BC426E4AFEA97EC31A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft
caRepository: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 01 Dec 2025 08:39:32 +0000
Certificate not after: Mon 30 Nov 2026 08:44:32 +0000
Subordinate resources: IP: 103.247.242.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f3:40:fb:76:ee:2d:de:21:d4:84:bc:42:6e:4a:fe:a9:7e:c3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 1 08:39:32 2025 GMT
Not After : Nov 30 08:44:32 2026 GMT
Subject: CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:da:a3:67:ef:b0:b0:df:c4:fe:a0:85:da:
fe:94:db:d5:1c:a3:09:ea:29:6c:9a:7c:c5:fa:8b:
ae:5e:72:46:85:59:87:ec:d8:7e:45:dc:f0:a2:10:
14:d9:53:70:03:04:30:97:b7:13:bb:f6:72:5d:64:
f9:b5:a4:f4:35:69:05:ea:12:31:2c:a0:59:b8:b9:
96:71:37:27:f6:bc:dd:2b:df:9a:d2:93:c6:fd:7d:
63:3e:53:3f:3d:5f:61:ca:cc:c4:98:30:5a:20:02:
20:d8:a1:3b:54:ac:b2:94:ce:1a:4e:fe:b2:4a:2a:
9c:01:8b:e7:a7:bb:46:d1:0f:c9:ce:53:f5:ad:f4:
03:24:97:ef:61:3e:e4:df:ce:ea:55:71:78:af:a2:
b6:a4:9f:f2:3b:40:11:ba:b1:02:6a:78:3d:7f:77:
b5:49:f2:50:e5:c0:23:71:1e:40:23:70:a7:27:65:
ed:7f:99:3a:6c:1b:bc:82:88:45:6d:d3:bb:98:ed:
dc:75:d8:f1:46:35:c2:99:7a:7b:c7:e9:02:af:24:
c1:96:ed:ac:d0:9d:f0:1b:a3:7f:c9:94:7b:4c:fe:
c2:b6:c0:91:66:e2:df:80:a3:c3:b8:2a:28:93:78:
4d:f5:aa:13:fe:93:1a:af:5b:0a:de:98:f7:77:93:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.242.0/23
Signature Algorithm: sha256WithRSAEncryption
19:65:09:56:00:92:66:ef:4f:c1:be:aa:98:2f:ea:2e:4e:0f:
ba:70:ed:49:53:28:3b:50:f1:5e:26:01:be:bf:b1:6f:6c:82:
42:fc:ea:5d:64:b9:c6:6b:03:61:ae:71:e7:97:3a:53:a1:b3:
64:6e:4c:90:0e:d9:6e:95:c8:f7:85:c9:f5:84:c8:0d:64:b5:
b4:c3:f4:d7:3e:b6:a9:d6:c4:15:de:e7:6e:de:66:ab:62:ec:
85:c1:f9:d6:a1:f3:94:c1:d7:d9:09:40:de:7b:e1:e8:bc:e5:
22:52:6b:25:a3:9d:fc:a3:aa:8a:e2:d9:57:fc:f9:4c:23:83:
e2:37:19:83:01:f8:a9:a4:1b:8c:69:fb:ef:1e:2c:5e:e4:6e:
6a:8d:a5:d0:49:88:e3:e7:ee:4b:85:d0:44:55:56:0c:20:9c:
8f:31:7d:e2:21:e6:f4:3f:34:e8:19:0a:8c:41:ae:af:67:37:
7a:c6:f5:b9:7d:27:d1:66:c9:c7:dc:7a:b5:34:a8:3a:d1:b7:
2a:60:c3:00:13:14:59:96:13:e7:b7:7c:f0:80:67:72:94:7a:
11:96:1e:9f:28:95:9f:6b:45:32:f7:5c:a5:b5:ac:c5:fa:0c:
63:b8:14:42:ca:cc:9c:16:cc:e9:71:92:24:2e:36:d5:65:e1:
bf:f7:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:34 2025 by rpki-client