This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer File: 1160709118182E564A6D9E250FF5000EFA5166A5.cer (raw, json) Hash identifier: 0xHkNhUP3OU5O8EiapzaxdAZ/afvUBVQHIHLLVkdhvs= Subject key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6BB3E914CFFA1DB338C58468917E2C6DD73929FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft caRepository: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 31 Dec 2025 12:30:04 +0000 Certificate not after: Wed 30 Dec 2026 12:35:04 +0000 Subordinate resources: IP: 103.86.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b3:e9:14:cf:fa:1d:b3:38:c5:84:68:91:7e:2c:6d:d7:39:29:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 31 12:30:04 2025 GMT Not After : Dec 30 12:35:04 2026 GMT Subject: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a3:7e:40:74:b6:17:27:8f:fb:00:68:79:a5: 3e:0f:59:90:68:4f:e2:db:19:ae:89:64:62:9b:ab: b8:b6:bb:17:7e:18:a0:74:0d:ac:7c:cf:cc:b8:30: 15:cf:84:5c:fe:cc:ca:8c:3b:95:95:c5:84:87:a3: 1e:77:7e:b8:39:44:96:d8:db:52:32:6d:4c:9c:3b: 3e:54:ad:67:df:ec:b4:8e:19:6f:e0:d8:3f:05:ac: d9:95:6f:e4:9c:4b:e6:04:40:ef:d6:8d:9b:19:2b: b9:f3:f6:d2:97:85:a8:52:6d:86:4f:d8:e5:97:82: 69:90:85:a0:12:6f:98:57:a7:51:68:bc:74:c4:92: df:ba:cc:70:c6:70:fc:c7:31:e3:76:2c:8f:38:e7: 85:a7:ac:5f:6e:41:44:bd:69:d9:f6:0a:15:09:e0: 13:85:4f:9e:23:81:27:87:d1:0b:2d:89:ee:35:49: 25:0c:9f:a8:4c:16:9e:5a:cb:88:19:78:31:9a:77: 9c:80:da:0b:01:3c:62:a0:b9:87:d2:75:6e:92:34: 76:25:24:a7:1e:8a:bc:ce:a6:d0:54:dc:43:f4:9e: 69:f1:1d:98:7e:fd:1f:a6:39:6e:fd:1c:b3:1d:0e: a6:2a:b7:ae:5a:98:17:8f:71:43:ee:c0:75:f8:50: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.116.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:ca:6e:0c:40:d5:6d:0c:96:55:84:bd:5c:38:5a:52:93:60: 40:af:1f:8c:18:5e:40:4a:dd:7e:ae:8a:ce:6d:01:03:02:c6: d1:48:58:c3:a9:34:13:3a:99:e6:28:f4:d5:cf:2e:d5:dd:fa: 87:b3:02:d3:72:34:db:ff:89:8b:17:ac:ea:ec:8c:fd:3b:51: 7c:7e:0f:be:1a:6a:40:57:54:a3:bf:75:52:7d:14:bd:3f:6c: 68:62:f3:93:3c:5a:bb:0e:3e:33:62:da:83:21:30:12:3c:fc: 96:f6:13:24:9a:a8:07:a6:01:04:c0:22:88:71:cd:98:f7:e8: ce:23:29:a8:88:f9:9a:4d:73:9a:9d:bf:1c:53:ef:6c:fa:16: c8:9e:65:54:0e:7c:14:a1:d3:59:8a:22:07:c3:38:87:db:61: 52:e1:5a:6a:fb:b0:31:1f:da:ec:7b:18:ec:4e:a0:23:5f:8e: ef:62:83:a4:3e:e7:ed:3b:f4:53:f5:51:71:51:c1:02:8a:5d: 64:f7:29:df:2b:93:a8:34:5c:f4:f3:56:0b:ab:e4:73:f3:3a: d4:95:a0:4a:36:2d:11:9b:f8:a8:50:52:cb:ea:92:af:5f:f0: ae:d2:05:87:4b:4e:a7:1c:c5:82:ba:f0:49:e7:dc:88:18:76: 61:68:42:96 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUa7PpFM/6HbM4xYRokX4sbdc5KfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIzMTEyMzAwNFoX DTI2MTIzMDEyMzUwNFowMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5 RTI1MEZGNTAwMEVGQTUxNjZBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPejfkB0thcnj/sAaHmlPg9ZkGhP4tsZrolkYpuruLa7F34YoHQNrHzPzLgw Fc+EXP7Myow7lZXFhIejHnd+uDlEltjbUjJtTJw7PlStZ9/stI4Zb+DYPwWs2ZVv 5JxL5gRA79aNmxkrufP20peFqFJthk/Y5ZeCaZCFoBJvmFenUWi8dMSS37rMcMZw /Mcx43YsjzjnhaesX25BRL1p2fYKFQngE4VPniOBJ4fRCy2J7jVJJQyfqEwWnlrL iBl4MZp3nIDaCwE8YqC5h9J1bpI0diUkpx6KvM6m0FTcQ/SeafEdmH79H6Y5bv0c sx0Opiq3rlqYF49xQ+7AdfhQa6sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBFgcJEYGC5WSm2eJQ/1AA76UWalMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5NzE4ZjZi LWI1MTYtNDNhZS1iNTg5LTgzYTI1ZmFhMzBiZS8wLzExNjA3MDkxMTgxODJFNTY0 QTZEOUUyNTBGRjUwMDBFRkE1MTY2QTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnVnQwDQYJKoZIhvcNAQELBQADggEBAE/KbgxA1W0MllWEvVw4WlKTYECvH4wY XkBK3X6uis5tAQMCxtFIWMOpNBM6meYo9NXPLtXd+oezAtNyNNv/iYsXrOrsjP07 UXx+D74aakBXVKO/dVJ9FL0/bGhi85M8WrsOPjNi2oMhMBI8/Jb2EySaqAemAQTA IohxzZj36M4jKaiI+ZpNc5qdvxxT72z6FsieZVQOfBSh01mKIgfDOIfbYVLhWmr7 sDEf2ux7GOxOoCNfju9ig6Q+5+079FP1UXFRwQKKXWT3Kd8rk6g0XPTzVgur5HPz OtSVoEo2LRGb+KhQUsvqkq9f8K7SBYdLTqccxYK68Enn3IgYdmFoQpY= -----END CERTIFICATE-----Generated at Mon Feb 2 08:20:30 2026 by rpki-client