This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer (raw, json) Hash identifier: s2wzdLHaehMQC54xHRqx8CfIRrvXAoiw50/V1PTIp+Q= Subject key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2D88311908C1E22E1BCB4221ADC18A9A1CD77EF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Aug 2025 05:58:14 +0000 Certificate not after: Wed 12 Aug 2026 06:03:14 +0000 Subordinate resources: IP: 103.209.1.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:88:31:19:08:c1:e2:2e:1b:cb:42:21:ad:c1:8a:9a:1c:d7:7e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 13 05:58:14 2025 GMT Not After : Aug 12 06:03:14 2026 GMT Subject: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:60:f5:b6:ad:a5:2d:8f:2d:e0:78:25:77: 45:04:bf:a3:fc:b9:68:e5:50:b4:8b:93:15:7e:f4: f3:81:14:02:f4:05:6e:01:57:dd:51:6d:51:c4:a1: ad:8f:65:b7:0a:73:b4:7f:31:cf:f3:db:43:f2:ec: 2a:58:74:f6:2b:4e:ef:60:89:99:41:38:dc:b7:fa: 52:27:ea:7e:bc:d7:af:e2:be:b9:e7:71:2c:53:cc: 19:82:c3:3f:5b:e4:d6:15:d3:34:ec:47:99:b6:18: a3:e6:44:db:ba:2c:cb:5b:40:80:09:cd:e3:3b:fb: bf:d1:2b:a4:a0:30:85:82:ab:88:6a:11:29:4a:fa: 97:62:4c:54:2b:42:5c:75:68:b2:04:0d:ad:c8:ac: d2:f4:47:f5:25:5f:ea:2d:07:92:4f:f1:8f:8c:0e: c5:87:95:99:33:56:98:46:e3:e0:a3:1f:f1:bc:6f: 81:04:8b:d8:9d:0d:22:aa:58:30:ed:d8:61:bb:af: 7e:6d:25:af:30:39:ab:3e:00:25:32:86:3e:6d:67: 8e:f3:90:7f:3e:93:a1:93:d0:a9:9a:b6:15:e3:18: 76:a3:0d:49:df:9c:27:2a:ce:ad:d8:a8:1f:b5:ce: 05:77:55:eb:4b:c0:20:d0:1e:b5:a9:fa:75:fc:b4: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.1.0/24 Signature Algorithm: sha256WithRSAEncryption 15:23:52:40:c9:9f:31:e6:f4:56:70:9a:e7:67:e2:33:3e:04: 54:4a:e0:f0:99:e7:91:93:5d:cd:84:10:8d:06:f5:c8:57:9d: 2b:00:49:6b:72:98:fe:19:0f:20:27:d5:94:f3:78:41:e0:9a: d7:f2:69:00:02:62:da:93:d5:d3:cb:e6:78:2f:b5:e2:6b:ec: 8a:b2:03:65:df:7c:63:86:68:4f:e4:3e:60:31:46:33:53:6f: 53:cd:b8:2e:53:03:d8:20:8c:2c:2e:73:91:00:1f:da:3e:1f: 1b:24:23:cd:ea:f0:1e:33:a6:b3:ec:d1:cd:11:1b:94:7a:a6: b0:17:01:c9:64:bd:25:54:25:56:31:8c:31:57:09:05:45:68: 32:83:6c:c2:cf:d5:52:9b:4c:3d:e8:e8:9a:d7:52:ee:4a:78: ff:0c:fe:88:58:70:79:ad:86:56:bc:1f:f7:95:d3:27:5c:93: 63:cf:a4:84:b2:65:92:58:c0:12:b9:e7:77:cb:cf:83:99:cd: 4f:1d:ce:c4:5e:b2:a8:5c:76:0a:8d:c6:a7:f9:19:ee:a1:33: de:d0:42:7a:91:a2:86:66:8e:96:a0:48:7a:7d:df:ef:b5:bb: 0e:01:b2:5b:0b:45:19:f8:6e:96:85:3c:35:cc:a8:7e:b5:b9: c8:b9:6f:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULYgxGQjB4i4by0IhrcGKmhzXfvEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxMzA1NTgxNFoX DTI2MDgxMjA2MDMxNFowMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFC NUQ0QjJBQjg4NDIyQTNENEJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbfYPW2raUtjy3geCV3RQS/o/y5aOVQtIuTFX7084EUAvQFbgFX3VFtUcSh rY9ltwpztH8xz/PbQ/LsKlh09itO72CJmUE43Lf6UifqfrzXr+K+uedxLFPMGYLD P1vk1hXTNOxHmbYYo+ZE27osy1tAgAnN4zv7v9ErpKAwhYKriGoRKUr6l2JMVCtC XHVosgQNrcis0vRH9SVf6i0Hkk/xj4wOxYeVmTNWmEbj4KMf8bxvgQSL2J0NIqpY MO3YYbuvfm0lrzA5qz4AJTKGPm1njvOQfz6ToZPQqZq2FeMYdqMNSd+cJyrOrdio H7XOBXdV60vAINAetan6dfy04x8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBFf2l822R7pOPq11LKriEIqPUu/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMjY3ODI1 LTUxYWYtNDU2ZC1iNDVhLWFlOTNjNWYyNzBlZS8wLzExNUZEQTVGMzZEOTFFRTkz OEZBQjVENEIyQUI4ODQyMkEzRDRCQkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn0QEwDQYJKoZIhvcNAQELBQADggEBABUjUkDJnzHm9FZwmudn4jM+BFRK4PCZ 55GTXc2EEI0G9chXnSsASWtymP4ZDyAn1ZTzeEHgmtfyaQACYtqT1dPL5ngvteJr 7IqyA2XffGOGaE/kPmAxRjNTb1PNuC5TA9ggjCwuc5EAH9o+HxskI83q8B4zprPs 0c0RG5R6prAXAclkvSVUJVYxjDFXCQVFaDKDbMLP1VKbTD3o6JrXUu5KeP8M/ohY cHmthla8H/eV0ydck2PPpISyZZJYwBK553fLz4OZzU8dzsResqhcdgqNxqf5Ge6h M97QQnqRooZmjpagSHp93++1uw4BslsLRRn4bpaFPDXMqH61uci5b7Q= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:14 2025 by rpki-client