This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer (raw, json) Hash identifier: zAB/mO4Q5E7tj1jf/wCztjka46v5Uf0iLCNviLdDXss= Subject key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 542BB6EDAAA7281F8703CECD13910CC6689C8FD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft caRepository: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 12:39:33 +0000 Certificate not after: Tue 16 Jun 2026 12:44:33 +0000 Subordinate resources: IP: 103.214.100.0/22 IP: 2404:c380::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2b:b6:ed:aa:a7:28:1f:87:03:ce:cd:13:91:0c:c6:68:9c:8f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 17 12:39:33 2025 GMT Not After : Jun 16 12:44:33 2026 GMT Subject: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:27:59:83:e1:6b:bd:7a:f9:19:ed:c4:fa: 6b:8b:e6:c5:d2:45:6c:84:0f:b7:a6:34:7c:95:55: a2:40:e5:b3:27:b0:14:76:ae:71:8b:a9:8e:86:75: 1a:87:34:b1:7d:61:93:4e:17:0d:7d:df:93:51:5f: 91:83:71:bc:5a:e1:95:95:42:6e:6b:15:c5:03:1e: 83:a7:4e:a9:fe:81:23:e8:64:0e:00:20:16:5b:61: a7:9c:18:dc:89:0e:ae:32:ce:b6:c7:bf:ac:24:08: 24:d1:8c:48:53:c1:15:a3:0a:6b:4e:4d:a4:b9:b6: 89:f0:4f:54:91:e0:4a:4d:76:3d:d5:2e:61:9e:51: 5e:30:98:4f:59:04:1b:99:af:84:28:5f:c8:17:61: 54:af:c2:ed:28:65:b2:9f:1c:13:e7:84:2e:6d:18: 48:f0:ce:04:d7:40:ff:ae:40:7c:0f:0a:9a:64:65: 4f:fa:87:d2:06:7f:93:44:a3:b8:d3:6b:2c:bb:7b: ce:ed:fa:9e:71:31:af:e1:e7:cd:d1:c5:5f:ae:54: 0a:d7:d1:2b:e4:b3:4c:08:4a:96:8b:cf:a0:a8:6a: 44:61:84:b0:4f:3d:52:af:a4:68:49:c8:5c:e0:c3: 13:7c:59:26:2a:3a:4e:72:03:8a:5b:5b:f1:48:c1: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.100.0/22 IPv6: 2404:c380::/32 Signature Algorithm: sha256WithRSAEncryption 34:4b:7c:09:9a:a9:50:20:93:1e:44:34:46:b6:a0:d6:b7:6c: a9:10:97:e5:6c:1f:06:21:dd:7e:7e:8b:13:95:10:36:03:11: 40:05:03:17:cc:0e:d3:35:96:23:a6:87:0e:70:68:c1:36:c2: 49:6a:1a:a9:cc:36:0f:74:f9:95:df:31:72:fa:f9:e6:8d:d8: 19:a7:3d:60:e5:25:d0:d8:0a:cd:59:25:d0:3d:ad:4a:a2:71: ac:b0:2e:9d:9f:7f:65:c1:ae:10:35:6d:04:c9:c1:17:5a:dd: 30:2c:ef:aa:ea:26:82:1d:3a:54:8b:30:c6:67:2c:31:de:f3: 0e:77:96:9e:b7:7a:3b:a6:52:0b:84:f9:0a:9c:08:4c:17:2c: 91:96:bb:18:5b:99:45:31:b0:79:ff:f9:86:d9:d9:32:04:40: f6:96:c4:ae:7a:06:75:8b:ff:28:4a:02:ef:fa:07:fa:9b:a8: 7d:22:fa:29:f7:da:2a:9a:56:bb:3c:d6:fa:02:89:e3:49:b0: 3d:be:05:ed:f3:b2:29:63:59:aa:bc:a3:da:d3:20:a8:20:f9: 97:06:62:8c:4c:0d:ed:a8:fa:0b:81:29:b1:f3:83:ed:59:b1: 90:d1:80:97:30:9a:0c:cc:56:d1:71:d1:1d:6e:06:6e:64:e7: ec:75:ed:59 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUVCu27aqnKB+HA87NE5EMxmicj9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNzEyMzkzM1oX DTI2MDYxNjEyNDQzM1owMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBG MEVGOTU5MDMzM0QzOEQwNDQxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZJJ1mD4Wu9evkZ7cT6a4vmxdJFbIQPt6Y0fJVVokDlsyewFHaucYupjoZ1 Goc0sX1hk04XDX3fk1FfkYNxvFrhlZVCbmsVxQMeg6dOqf6BI+hkDgAgFlthp5wY 3IkOrjLOtse/rCQIJNGMSFPBFaMKa05NpLm2ifBPVJHgSk12PdUuYZ5RXjCYT1kE G5mvhChfyBdhVK/C7Shlsp8cE+eELm0YSPDOBNdA/65AfA8KmmRlT/qH0gZ/k0Sj uNNrLLt7zu36nnExr+HnzdHFX65UCtfRK+SzTAhKlovPoKhqRGGEsE89Uq+kaEnI XODDE3xZJio6TnIDiltb8UjBmacCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBMrvfnZ8m8AHMDw75WQMz040EQQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZTUxODc1 LTUwODctNDI2NC1hOGJkLTQxNTZmNTViYWFhYi8wLzEzMkJCREY5RDlGMjZGMDAx Q0MwRjBFRjk1OTAzMzNEMzhEMDQ0MTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn1mQwDQQCAAIwBwMFACQEw4AwDQYJKoZIhvcNAQELBQADggEBADRLfAmaqVAg kx5ENEa2oNa3bKkQl+VsHwYh3X5+ixOVEDYDEUAFAxfMDtM1liOmhw5waME2wklq GqnMNg90+ZXfMXL6+eaN2BmnPWDlJdDYCs1ZJdA9rUqicaywLp2ff2XBrhA1bQTJ wRda3TAs76rqJoIdOlSLMMZnLDHe8w53lp63ejumUguE+QqcCEwXLJGWuxhbmUUx sHn/+YbZ2TIEQPaWxK56BnWL/yhKAu/6B/qbqH0i+in32iqaVrs81voCieNJsD2+ Be3zsiljWaq8o9rTIKgg+ZcGYoxMDe2o+guBKbHzg+1ZsZDRgJcwmgzMVtFx0R1u Bm5k5+x17Vk= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:08 2025 by rpki-client