This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
File: 1635F5E419798341BDC615D4E1C6AE340C34BEED.cer (raw, json)
Hash identifier: hNCNMTe6pZyCCaCm1Dhw+ZO7e845MLdh2eQEuqLJidA=
Subject key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 70BBDFD083148357AD408074E4A23F00EB9C22B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
caRepository: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 03 Jun 2025 07:14:01 +0000
Certificate not after: Tue 02 Jun 2026 07:19:01 +0000
Subordinate resources: IP: 202.127.96.0/20
IP: 210.79.208.0/20
IP: 2406:5c00::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:bb:df:d0:83:14:83:57:ad:40:80:74:e4:a2:3f:00:eb:9c:22:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 3 07:14:01 2025 GMT
Not After : Jun 2 07:19:01 2026 GMT
Subject: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:ef:c6:6f:af:a6:3d:53:cd:c7:8e:80:d1:
c2:ec:cb:44:46:b6:bc:ed:b8:15:08:ec:2a:bf:ec:
77:e8:7a:09:e2:da:ab:45:7c:93:96:b2:59:90:1b:
e6:db:77:9a:28:68:e7:4b:39:75:02:3b:5b:59:f3:
32:b8:a8:ce:1b:01:8f:54:1c:3c:6e:cf:47:89:bc:
57:f1:17:fe:9b:7b:5b:d0:2b:00:06:f9:ba:9b:cb:
c1:5e:89:95:82:c7:fd:47:01:bc:80:af:16:c9:e2:
39:a0:78:11:fe:b6:ce:30:da:ed:89:98:5e:07:21:
68:c3:a7:9e:b9:44:f2:eb:a5:8b:0a:0a:26:c9:64:
43:e7:c3:4d:f2:de:91:a9:b4:e5:79:11:e0:70:e5:
8c:76:ac:24:20:6b:0b:23:50:db:0f:aa:b7:4f:00:
ba:e1:1f:89:8a:02:f2:2a:ad:0a:77:2d:c4:d1:f1:
6a:3b:c9:d9:ab:47:7a:2b:43:91:ad:04:a9:2f:59:
da:2d:26:be:e2:15:c9:7c:d3:b4:e2:61:23:b8:27:
82:b0:98:14:44:a1:2d:86:b7:83:58:0e:59:a1:aa:
20:f8:ee:63:ca:81:cd:34:9b:cb:7f:3c:f7:68:cf:
33:14:9f:e5:8e:1b:a2:80:e8:52:65:f1:64:f5:d6:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.127.96.0/20
210.79.208.0/20
IPv6:
2406:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
0d:fa:ab:79:ab:d0:b8:48:0e:88:31:33:69:eb:f2:bb:5d:5b:
93:fa:6e:a6:02:a6:14:3e:75:b7:e9:37:e4:73:5d:7e:1c:2b:
cb:c4:a7:8f:dd:4f:4c:fa:14:28:d8:b6:ea:e6:cf:61:3e:ab:
83:44:ee:6a:7a:cd:c9:70:a2:fc:e2:2f:48:a7:d9:b8:2a:d7:
fb:16:9d:fd:46:55:cb:7f:e5:78:a2:86:fd:07:90:59:7a:57:
25:7a:6d:82:97:f1:19:a9:90:8f:34:6b:db:7e:18:c8:1e:93:
ed:8d:8b:7f:e5:3f:f4:7a:7b:97:f0:66:93:a7:47:a5:c8:c1:
2e:3b:df:7c:31:ee:ca:89:d7:2c:72:ea:63:9c:61:8e:f7:0c:
05:1e:99:c4:20:47:92:d5:87:55:54:91:91:2f:d5:1d:81:60:
8b:a3:9b:93:2f:eb:7e:f3:a8:2a:09:2d:37:de:a8:38:9f:b0:
2d:26:77:4a:ce:d9:1a:7c:4a:bf:9e:c2:20:35:09:48:aa:14:
eb:2e:06:fe:1f:ba:8b:30:99:c8:7c:38:54:1b:9f:53:57:0b:
1e:15:72:2b:7d:72:51:b7:ca:88:54:2d:46:ab:36:c6:71:c0:
21:0e:03:79:3b:28:ee:32:18:e4:f2:35:0a:44:73:db:62:a7:
08:02:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:25 2025 by rpki-client