This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer
File:                     11489A5805B7FE2710AE32C3077C3450579D1288.cer (raw, json)
Hash identifier:          2Q/sKfLid2Khk1A+kUuunlPOEIaNBQKXoIpQ0nPY8OU=
Subject key identifier:   11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6612F0BC5DFC0102E1972CC2AAF3D2EAEF6000FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Oct 2025 08:58:19 +0000
Certificate not after:    Thu 29 Oct 2026 09:03:19 +0000
Subordinate resources:    IP: 103.113.26.0/24
                          IP: 2001:df4:c700::/48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 18:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:12:f0:bc:5d:fc:01:02:e1:97:2c:c2:aa:f3:d2:ea:ef:60:00:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 30 08:58:19 2025 GMT
            Not After : Oct 29 09:03:19 2026 GMT
        Subject: CN=11489A5805B7FE2710AE32C3077C3450579D1288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:46:7e:42:75:d1:fb:ae:45:00:5e:ee:86:
                    c0:ca:4f:ae:b4:86:43:9b:b3:59:b2:cf:6e:e9:a5:
                    47:50:65:11:79:af:9a:67:65:43:5a:85:2a:28:fb:
                    cc:32:7d:78:6d:20:78:96:cf:c6:5f:c1:c3:d5:d1:
                    50:14:e7:5a:e9:77:b7:74:52:e5:43:60:d1:6d:0f:
                    56:4b:6f:18:05:80:4e:a5:a4:4b:c1:29:e8:8b:47:
                    d9:58:54:11:90:c0:60:a7:e9:cc:85:ba:3b:90:0b:
                    3d:04:e3:f6:f3:6e:d3:76:2b:1b:af:f3:e4:a8:13:
                    2f:7a:dc:33:0a:ad:c6:85:c8:89:8a:1d:bf:71:b4:
                    7b:13:aa:0b:f4:f8:9b:d0:cc:77:80:71:5f:e6:23:
                    a0:2d:c6:23:24:e7:7c:49:d3:99:8d:39:ae:e8:bd:
                    2e:5e:b0:4c:45:5b:21:8c:c6:9d:89:20:08:fa:cd:
                    3c:12:10:f0:77:75:a6:46:19:31:71:27:0b:b5:ff:
                    1b:9b:7b:60:e4:4c:e8:35:9b:a5:33:0d:0d:79:df:
                    7e:86:e2:67:ad:32:89:ec:ed:bc:96:a5:72:7f:c1:
                    b4:73:2e:26:55:2e:3e:41:f6:9a:72:91:90:c2:7e:
                    c1:72:f1:3b:9a:76:c2:75:40:04:98:16:80:46:29:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.26.0/24
                IPv6:
                  2001:df4:c700::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:a7:74:72:b0:9b:05:44:49:52:1a:cf:cb:5c:12:be:3b:
         b8:53:20:e0:77:23:9e:49:37:76:92:b5:86:96:ce:f8:6c:fa:
         6c:0d:ed:dd:4b:1d:04:02:e5:a2:ef:11:61:15:66:32:a5:57:
         82:cf:9c:2e:fa:37:ec:8e:6e:c1:7f:0f:25:b7:d7:e4:18:19:
         32:3b:87:e6:2f:70:bd:66:36:0a:f9:ec:48:5d:e6:30:6f:e1:
         c1:cc:f6:47:7d:78:1a:f6:55:d4:f9:e3:74:e8:b0:b6:9b:bd:
         e2:df:91:79:aa:5a:5a:41:8c:fe:15:ec:77:8a:b7:98:26:ba:
         a7:90:fc:51:1e:08:50:f9:18:fb:b2:94:29:ac:64:72:a6:6a:
         1c:d0:f7:93:39:0b:c1:d7:78:e4:eb:5f:b8:0c:65:0d:d5:f9:
         2a:39:24:77:5f:2c:65:2a:00:fd:f1:c6:29:25:10:82:97:d3:
         1e:1a:dc:fa:8f:c6:b0:6f:58:d9:3c:f4:29:37:00:44:13:fc:
         17:c0:28:b8:3c:68:d9:9b:4a:ea:33:9b:55:bc:82:d2:ef:7e:
         df:56:a8:b4:77:97:3c:8f:12:b4:be:3a:58:92:50:d1:9d:55:
         dc:6e:1a:b7:56:98:5b:6d:16:d2:50:27:ca:77:79:8b:4e:14:
         28:e7:08:84
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUZhLwvF38AQLhlyzCqvPS6u9gAPswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAzMDA4NTgxOVoX
DTI2MTAyOTA5MDMxOVowMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUz
MkMzMDc3QzM0NTA1NzlEMTI4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANIFRn5CddH7rkUAXu6GwMpPrrSGQ5uzWbLPbumlR1BlEXmvmmdlQ1qFKij7
zDJ9eG0geJbPxl/Bw9XRUBTnWul3t3RS5UNg0W0PVktvGAWATqWkS8Ep6ItH2VhU
EZDAYKfpzIW6O5ALPQTj9vNu03YrG6/z5KgTL3rcMwqtxoXIiYodv3G0exOqC/T4
m9DMd4BxX+YjoC3GIyTnfEnTmY05rui9Ll6wTEVbIYzGnYkgCPrNPBIQ8Hd1pkYZ
MXEnC7X/G5t7YORM6DWbpTMNDXnffobiZ60yieztvJalcn/BtHMuJlUuPkH2mnKR
kMJ+wXLxO5p2wnVABJgWgEYpel0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFBFImlgFt/4nEK4ywwd8NFBXnRKIMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9kYWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYmNlNzFl
LTRlZTQtNDU5MC05NGZiLTM3ZmZkOWYwZDZiNy8wLzExNDg5QTU4MDVCN0ZFMjcx
MEFFMzJDMzA3N0MzNDUwNTc5RDEyODgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BABncRowDwQCAAIwCQMHACABDfTHADANBgkqhkiG9w0BAQsFAAOCAQEAdPWndHKw
mwVESVIaz8tcEr47uFMg4Hcjnkk3dpK1hpbO+Gz6bA3t3UsdBALlou8RYRVmMqVX
gs+cLvo37I5uwX8PJbfX5BgZMjuH5i9wvWY2CvnsSF3mMG/hwcz2R314GvZV1Pnj
dOiwtpu94t+ReapaWkGM/hXsd4q3mCa6p5D8UR4IUPkY+7KUKaxkcqZqHND3kzkL
wdd45OtfuAxlDdX5Kjkkd18sZSoA/fHGKSUQgpfTHhrc+o/GsG9Y2Tz0KTcARBP8
F8AouDxo2ZtK6jObVbyC0u9+31aotHeXPI8StL46WJJQ0Z1V3G4at1aYW20W0lAn
ynd5i04UKOcIhA==
-----END CERTIFICATE-----