This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer (raw, json) Hash identifier: 6HTP9LzASulpj9nGwMb7eXz1WmbfuDeOvW/BM3CZFGs= Subject key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2FA1D0486133ECDDD66FBFD65E1F97F6061ADE72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft caRepository: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 26 Nov 2025 05:52:29 +0000 Certificate not after: Wed 25 Nov 2026 05:57:29 +0000 Subordinate resources: IP: 103.68.214.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a1:d0:48:61:33:ec:dd:d6:6f:bf:d6:5e:1f:97:f6:06:1a:de:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 26 05:52:29 2025 GMT Not After : Nov 25 05:57:29 2026 GMT Subject: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:85:7c:cf:d2:5a:50:cf:df:32:27:4d:a7: 75:b2:b9:d3:77:33:1c:41:55:2b:2d:e5:ab:1c:0f: 78:85:e6:7b:65:e3:25:8d:4f:db:b3:42:14:42:59: d2:39:9e:05:70:5c:8d:e5:1c:a6:de:71:89:d5:d4: 69:4b:50:70:b9:4c:23:a7:1f:f5:b7:c6:9d:fc:09: 2a:a7:7a:8a:57:bf:48:c5:e3:bd:0c:4e:0e:9e:9a: 3a:d0:1b:8a:64:13:c0:24:d7:69:ae:63:6f:d0:d6: 8b:4c:81:12:34:cb:7b:bd:21:ec:f8:02:08:45:4f: fd:4f:5b:41:18:e8:a7:f1:7e:c3:41:73:ae:52:24: 62:b3:dd:c8:7a:6c:0a:db:26:92:34:1b:44:77:41: e0:8c:7d:8c:39:73:cf:3b:2f:a2:b7:69:0e:ca:f3: 72:70:6c:90:b3:89:eb:f9:51:d0:84:c1:0c:35:b8: 96:9d:59:6b:17:20:14:17:8a:81:85:dd:29:81:a6: 1d:46:f0:ae:7e:bb:50:e9:b9:78:c7:b9:46:45:71: aa:88:b5:f9:21:54:4d:4a:b6:d7:a7:a9:4e:52:c4: ea:17:74:2c:c3:cf:5d:09:9e:26:b8:ac:8f:4d:cd: 8d:cf:3f:d9:70:8d:a5:c3:29:3f:52:af:64:22:29: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.214.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:cc:12:4a:ed:bc:42:53:b1:b0:2e:4c:10:11:a3:2d:62:33: af:71:5a:c6:88:39:e1:b1:b7:d4:b8:bd:92:74:65:08:78:f1: df:6e:db:a4:1f:5a:96:14:c8:0b:51:52:89:3c:37:80:5c:a9: ac:48:2e:e8:18:e0:cd:f4:fe:43:1f:e7:e3:5a:4e:59:1a:99: 5a:a6:b6:20:81:99:8b:13:e7:98:b6:fd:ef:f3:b2:fc:42:31: 75:d5:44:55:42:cd:d0:ed:be:a8:3e:83:39:0e:b0:02:51:97: d9:51:79:b2:1d:e5:d8:85:94:f6:7a:56:c2:78:ae:c8:f5:2f: 1a:ec:43:43:93:2d:ce:5d:52:27:a4:03:f4:01:36:13:34:97: 86:7f:27:ff:f5:6e:92:a1:ef:74:51:e2:aa:fa:0c:39:58:f4: 89:90:32:c8:65:6b:50:6a:75:8c:59:e6:11:cc:8c:65:35:9a: 0f:c5:09:4c:d7:44:6d:b4:d5:05:e1:01:0c:fa:25:59:79:a7: 58:ca:37:95:18:9e:9a:de:0d:c1:cb:1e:21:5e:5a:59:89:c0: 7e:19:d2:22:0e:20:f0:1b:c5:30:f2:80:dc:72:d5:05:f6:9c: 16:6b:e9:72:a8:2d:30:17:b1:32:be:3c:d4:c5:00:14:59:0d: 58:8e:d4:b8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUL6HQSGEz7N3Wb7/WXh+X9gYa3nIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNjA1NTIyOVoX DTI2MTEyNTA1NTcyOVowMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlD MzUxRUIwNDBEMjg0Q0Y3OTFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIrhXzP0lpQz98yJ02ndbK503czHEFVKy3lqxwPeIXme2XjJY1P27NCFEJZ 0jmeBXBcjeUcpt5xidXUaUtQcLlMI6cf9bfGnfwJKqd6ile/SMXjvQxODp6aOtAb imQTwCTXaa5jb9DWi0yBEjTLe70h7PgCCEVP/U9bQRjop/F+w0FzrlIkYrPdyHps CtsmkjQbRHdB4Ix9jDlzzzsvordpDsrzcnBskLOJ6/lR0ITBDDW4lp1ZaxcgFBeK gYXdKYGmHUbwrn67UOm5eMe5RkVxqoi1+SFUTUq216epTlLE6hd0LMPPXQmeJris j03Njc8/2XCNpcMpP1KvZCIpkk8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBkoC49apPvexnnDUesEDShM95G+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlYmY2M2Vk LWQ0NTAtNDc3ZS1iMzFiLWFmOTJiMTcyNmQyZS8wLzE5MjgwQjhGNUFBNEZCREVD Njc5QzM1MUVCMDQwRDI4NENGNzkxQkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnRNYwDQYJKoZIhvcNAQELBQADggEBAD3MEkrtvEJTsbAuTBARoy1iM69xWsaI OeGxt9S4vZJ0ZQh48d9u26QfWpYUyAtRUok8N4BcqaxILugY4M30/kMf5+NaTlka mVqmtiCBmYsT55i2/e/zsvxCMXXVRFVCzdDtvqg+gzkOsAJRl9lRebId5diFlPZ6 VsJ4rsj1LxrsQ0OTLc5dUiekA/QBNhM0l4Z/J//1bpKh73RR4qr6DDlY9ImQMshl a1BqdYxZ5hHMjGU1mg/FCUzXRG201QXhAQz6JVl5p1jKN5UYnpreDcHLHiFeWlmJ wH4Z0iIOIPAbxTDygNxy1QX2nBZr6XKoLTAXsTK+PNTFABRZDViO1Lg= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:11 2025 by rpki-client