This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
File: 146B42876A5C2AB0705F67F1A3918D76984989AF.cer (raw, json)
Hash identifier: kmOI07yMKdGCDOqM3JPShuenyiXK4Q9iuHkL0VQTR0I=
Subject key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2814DCACD5B33E021F57FCEDFD9250BB9745931B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
caRepository: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 13 May 2025 04:23:18 +0000
Certificate not after: Tue 12 May 2026 04:28:18 +0000
Subordinate resources: IP: 103.190.30.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:14:dc:ac:d5:b3:3e:02:1f:57:fc:ed:fd:92:50:bb:97:45:93:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 13 04:23:18 2025 GMT
Not After : May 12 04:28:18 2026 GMT
Subject: CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:0d:e3:18:94:b4:1c:ee:22:bf:b9:84:62:
c8:4a:5f:50:ac:a7:01:e7:1c:36:25:07:5b:a0:43:
aa:0b:ee:90:ba:76:80:38:57:71:08:bd:f6:61:16:
e2:c1:18:53:b0:cf:75:fb:16:b1:2d:29:c8:d8:87:
88:78:be:50:c3:fa:09:23:f4:e6:d9:4d:08:c2:7e:
58:84:d5:5d:c6:51:6f:0f:0c:92:f9:16:17:97:33:
f4:89:ef:32:f1:2c:ed:07:39:b1:9c:8f:0b:13:b7:
47:3d:86:31:b6:01:5e:c1:68:b0:e0:4a:23:0d:f4:
87:cb:57:46:13:74:e4:0a:3c:8b:9a:51:c2:8c:3d:
3a:bf:4f:a4:bb:7d:12:28:8b:0a:f7:23:72:5f:91:
b5:c4:95:e9:a1:3f:ae:81:5d:4f:d2:9f:f8:74:ab:
78:b8:e5:ba:8f:6c:ac:26:56:f5:4f:2a:4d:d8:31:
04:38:28:11:8d:ed:95:e1:82:d2:d2:47:d6:d9:96:
16:45:9a:d6:d5:9e:c5:e1:de:31:aa:01:33:bb:72:
48:ca:77:66:86:b1:14:10:ea:3e:7e:b9:5c:f9:d9:
3c:70:a9:c5:6c:70:e6:b3:f4:4e:8e:5a:e3:53:fe:
54:21:c5:f7:22:93:9e:42:f4:f9:b0:ee:67:08:eb:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.190.30.0/23
Signature Algorithm: sha256WithRSAEncryption
26:6b:2a:9a:97:78:fd:c1:91:67:a2:f2:bd:b4:0f:2f:54:10:
a7:70:35:df:21:65:8c:f9:5e:d1:b7:15:cc:df:50:44:b8:e5:
a1:01:10:be:71:fc:d9:03:db:d9:2e:66:89:93:80:0e:0e:f1:
cb:c0:33:bc:cb:3e:88:67:85:1d:c3:4e:ce:09:98:af:fa:bb:
14:c9:3c:ec:56:b0:44:a4:7e:43:bb:0b:70:eb:32:31:6a:5e:
fc:fb:b7:1f:fb:10:61:28:0f:ff:e5:71:bc:b3:f1:05:55:06:
ab:e6:6e:c5:f2:52:22:ae:b2:57:41:c4:d7:81:c8:24:a0:f9:
13:7c:f8:21:0f:af:c0:d2:7d:f3:4d:27:98:94:28:e0:02:47:
16:08:8a:4a:43:f2:c6:a0:3d:5d:2a:07:b1:5a:a0:78:5c:c7:
eb:f6:96:e4:7b:4d:08:a4:f9:64:d8:1b:c2:22:5a:d8:50:77:
ed:83:34:15:75:77:03:d3:b2:cf:88:31:1d:9f:65:cf:b1:c7:
56:5e:4e:4c:1a:29:5d:42:1c:65:4b:40:fa:f4:c1:e7:7d:44:
01:f3:d6:95:3f:77:a9:72:ad:fc:a6:2e:46:1b:ac:46:4c:86:
c0:fd:ce:5f:1d:00:4d:c2:94:c0:35:1e:77:ed:ec:9a:e7:4c:
88:ee:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:59:36 2025 by rpki-client