This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.cer (raw, json) Hash identifier: a9tVXHEmIj99iFI36vjNJFeM6h007fViMp6L7/ZYJiQ= Subject key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3D1A8DEA87B82F5603B96EDC3103389CEFBE26F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft caRepository: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 21 Dec 2025 12:31:01 +0000 Certificate not after: Sun 20 Dec 2026 12:36:01 +0000 Subordinate resources: IP: 103.141.244.0/23 IP: 2001:df1:1d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1a:8d:ea:87:b8:2f:56:03:b9:6e:dc:31:03:38:9c:ef:be:26:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 21 12:31:01 2025 GMT Not After : Dec 20 12:36:01 2026 GMT Subject: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:0f:9c:64:32:a0:f9:22:ad:5c:19:6c:6b: 27:b3:d1:0a:e0:69:9a:3f:e9:fb:b8:f4:ec:68:7c: 13:4d:44:a8:ff:06:df:43:dc:33:57:16:de:79:e5: ef:2c:0a:ad:f5:21:87:26:60:9c:98:a4:ba:80:f9: 94:aa:c5:77:60:cb:3c:1d:af:5b:e3:8c:88:5a:fb: 36:58:e9:3a:81:18:48:6f:47:f0:8d:6a:60:9c:6a: 5c:77:8b:4d:ff:03:6c:54:df:57:c6:83:ed:9d:72: 5e:5f:1b:72:95:94:bd:68:5a:9c:4c:91:00:c8:f6: c6:d0:68:16:5b:d3:a0:3b:19:00:b2:21:14:3d:04: 5c:d4:e3:5b:cc:8a:92:d4:f0:ec:b5:93:ae:d3:99: 2f:32:f2:f1:6a:35:9e:d4:ad:68:86:0d:63:c6:47: fd:ff:e1:c0:4c:79:82:0a:b1:eb:a6:c4:1a:25:b5: 04:06:d5:3c:90:a1:f0:57:e6:4e:3d:d4:fb:e8:62: 0c:19:7b:8e:b8:b9:e1:f7:dc:9b:d6:54:87:7d:02: 0a:e5:ba:63:a3:d0:9a:5a:94:5d:05:7f:7e:0c:57: df:d3:6c:58:d1:f5:47:38:fd:fc:dd:41:d8:5a:13: 5e:27:24:08:cc:d8:1b:37:31:3a:5a:8f:31:f6:97: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.244.0/23 IPv6: 2001:df1:1d80::/48 Signature Algorithm: sha256WithRSAEncryption 1c:a2:db:1f:ae:e4:e7:70:c2:ef:b9:8d:0a:f2:11:9d:2f:40: 25:6c:0c:78:ee:76:cd:25:b8:2d:01:48:00:0f:0d:4d:17:d4: 6d:cb:f6:85:f2:7b:03:54:c5:5b:c0:9a:71:ba:70:69:0d:84: 59:89:de:8d:44:90:b7:8b:69:bb:0b:41:6a:37:d7:57:40:3f: e2:a5:87:27:e0:15:ab:f5:99:ab:a1:d8:84:8b:74:09:cf:b4: 6f:bf:61:61:42:3c:01:16:a9:0d:9d:07:f4:b3:29:76:6c:c0: 09:63:ec:c6:cc:96:8b:ff:cc:a9:90:83:ff:8a:72:1f:11:25: c3:dd:07:ab:f5:4a:56:10:60:be:c8:8d:04:75:df:ce:92:23: b0:41:ce:fe:e1:e9:34:51:80:99:aa:cd:3e:f2:85:97:03:53: a4:6a:89:a5:d1:cb:eb:d6:11:7d:91:71:de:85:00:19:4b:03: 4e:a0:de:22:b1:d0:f9:36:ca:5f:5f:16:8e:4f:f0:48:65:8e: c9:1b:b3:11:2e:27:5a:54:ec:4e:77:dc:70:88:7c:46:21:a0: 83:8d:f6:9c:bd:b4:ea:e4:4d:67:04:47:3f:6e:27:49:6d:78: 6e:2f:b1:f9:cd:bf:c7:05:01:72:59:98:e6:f6:7d:8d:bb:73: 48:71:3c:6c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUPRqN6oe4L1YDuW7cMQM4nO++JvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyMTEyMzEwMVoX DTI2MTIyMDEyMzYwMVowMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4 QTg3MjNERUJBREE4MjdCNUIwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALA5D5xkMqD5Iq1cGWxrJ7PRCuBpmj/p+7j07Gh8E01EqP8G30PcM1cW3nnl 7ywKrfUhhyZgnJikuoD5lKrFd2DLPB2vW+OMiFr7NljpOoEYSG9H8I1qYJxqXHeL Tf8DbFTfV8aD7Z1yXl8bcpWUvWhanEyRAMj2xtBoFlvToDsZALIhFD0EXNTjW8yK ktTw7LWTrtOZLzLy8Wo1ntStaIYNY8ZH/f/hwEx5ggqx66bEGiW1BAbVPJCh8Ffm Tj3U++hiDBl7jri54ffcm9ZUh30CCuW6Y6PQmlqUXQV/fgxX39NsWNH1Rzj9/N1B 2FoTXickCMzYGzcxOlqPMfaXEBUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBuhrdc0eXwDg2KKhyPeutqCe1sCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZWQ4M2Jk LTg5ODYtNDQyOS1hMDExLWFjNTkwNzI0ZDU4Ni8wLzFCQTFBREQ3MzQ3OTdDMDM4 MzYyOEE4NzIzREVCQURBODI3QjVCMDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnjfQwDwQCAAIwCQMHACABDfEdgDANBgkqhkiG9w0BAQsFAAOCAQEAHKLbH67k 53DC77mNCvIRnS9AJWwMeO52zSW4LQFIAA8NTRfUbcv2hfJ7A1TFW8CacbpwaQ2E WYnejUSQt4tpuwtBajfXV0A/4qWHJ+AVq/WZq6HYhIt0Cc+0b79hYUI8ARapDZ0H 9LMpdmzACWPsxsyWi//MqZCD/4pyHxElw90Hq/VKVhBgvsiNBHXfzpIjsEHO/uHp NFGAmarNPvKFlwNTpGqJpdHL69YRfZFx3oUAGUsDTqDeIrHQ+TbKX18Wjk/wSGWO yRuzES4nWlTsTnfccIh8RiGgg432nL206uRNZwRHP24nSW14bi+x+c2/xwUBclmY 5vZ9jbtzSHE8bA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:30:04 2026 by rpki-client