This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
File: 11D0290B4630192458231FFEA93A463483E71D15.cer (raw, json)
Hash identifier: k5nfS4JXwfzA3QJ8/wPUV68L7CFEOyMA4ROKuB8Vf9s=
Subject key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7F7B43ECBB52D66EAFAF210DD4BE75C7F3D676DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
caRepository: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 11 Nov 2025 00:28:22 +0000
Certificate not after: Tue 10 Nov 2026 00:33:22 +0000
Subordinate resources: IP: 103.82.92.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7b:43:ec:bb:52:d6:6e:af:af:21:0d:d4:be:75:c7:f3:d6:76:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 00:28:22 2025 GMT
Not After : Nov 10 00:33:22 2026 GMT
Subject: CN=11D0290B4630192458231FFEA93A463483E71D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:cd:fe:7e:52:1c:38:d2:a8:7c:eb:23:ed:
96:b4:b7:84:95:84:22:fc:97:db:e6:18:0a:b3:34:
7a:84:76:d8:bd:2a:cb:6e:5f:20:ad:9d:2c:eb:d5:
4b:0a:6c:75:d4:5c:be:24:57:85:3e:61:b2:59:dd:
22:b3:45:47:b2:ed:4d:ec:29:f2:59:15:e0:e0:bc:
52:c2:67:8b:5b:b5:ba:00:b6:85:e4:3b:7b:35:8e:
30:07:aa:72:f0:d2:1a:a2:4d:9d:4a:fe:dc:24:8c:
74:84:2a:23:ff:96:8c:02:c7:a0:c2:09:f6:ae:b6:
9b:3e:23:58:77:1f:c9:fb:76:36:65:0a:e3:30:79:
8e:6e:3f:b3:e6:fb:68:f0:5f:41:ff:f0:f7:56:5e:
f1:01:6c:da:ad:41:e1:6a:1f:cd:5a:1c:24:0d:1e:
f7:4b:d4:88:a2:7c:2a:8c:5c:6e:44:e6:31:8b:ec:
a8:32:97:39:1f:ff:c0:46:db:85:92:39:39:fc:f8:
bb:ba:40:ef:84:c9:03:25:21:ca:77:78:4c:6a:fa:
65:ae:e8:7e:8c:04:c8:28:88:43:8e:6d:11:a1:20:
d9:49:24:9b:bf:4f:4a:56:00:ac:d2:3e:61:24:09:
ef:68:01:92:30:79:06:d6:89:a9:32:43:ec:eb:33:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.92.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:3f:21:7d:8c:34:9a:c3:07:12:a6:88:bd:b2:22:83:7e:47:
4c:47:b5:0b:d0:ad:2d:71:dd:4e:0d:d2:33:e0:80:86:e8:e1:
4b:e6:3f:2c:67:d7:03:fe:01:4e:2f:aa:7b:e1:a1:ce:dd:f3:
c9:5e:15:a5:1c:81:be:55:2b:e7:b6:6e:d8:59:9e:33:b8:e5:
4b:d4:4c:f1:5e:85:1c:20:43:e7:e5:9f:2d:6b:13:a2:52:42:
9f:1f:6f:c7:82:ba:59:7e:d1:28:8a:9e:42:a9:42:35:45:6f:
bd:64:67:8a:65:97:6b:f9:68:a5:35:cb:02:87:27:22:e7:44:
3b:5e:88:2d:79:49:a0:e1:06:aa:66:07:01:91:cd:99:bf:8c:
08:f0:f6:6d:df:fa:28:45:02:e9:bb:50:94:1a:0a:4f:93:4c:
ce:39:89:b8:39:f5:f7:6b:ac:a6:03:6b:fd:c6:b8:f8:c3:31:
03:ad:81:78:39:53:6c:95:86:cc:f4:11:02:68:be:e9:36:6f:
95:a1:a8:52:9e:f3:38:f5:d7:15:f8:98:c0:09:89:32:6b:a1:
a7:23:a2:32:0b:5a:4c:07:f3:d3:df:9c:64:87:f3:a7:0c:57:
55:70:ae:ef:29:7c:cb:22:70:13:7d:2f:61:a9:58:39:4c:58:
18:05:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:06 2025 by rpki-client