This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer File: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer (raw, json) Hash identifier: OAZ362QOVAnVn+xUvRc4l/oJHg6Pw/aEtB9w90cHtGg= Subject key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02F99AF560AFBFD20333E1CF4E2DE81CED21488E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft caRepository: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 23 Nov 2025 10:40:50 +0000 Certificate not after: Sun 22 Nov 2026 10:45:50 +0000 Subordinate resources: IP: 103.76.104.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f9:9a:f5:60:af:bf:d2:03:33:e1:cf:4e:2d:e8:1c:ed:21:48:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 23 10:40:50 2025 GMT Not After : Nov 22 10:45:50 2026 GMT Subject: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:4f:21:5f:f0:5b:90:a6:39:2d:a9:40:49: 6b:13:9e:4b:5f:7c:a4:47:71:ff:92:d6:70:4a:96: 79:c8:76:57:85:68:3a:58:a2:13:02:bf:fc:81:09: 35:0d:43:b7:21:13:42:8d:94:89:85:67:68:af:ff: 31:ad:d4:c5:cb:77:ef:be:98:5b:03:d7:00:c6:ea: c7:57:a4:e5:cc:c9:73:bb:68:01:b6:9b:d9:b7:51: fb:36:10:94:0e:ab:8a:a2:78:4b:b5:0f:76:f2:0e: cd:12:2c:01:d4:f5:02:ef:a2:f9:62:14:c0:3e:14: 4a:aa:44:30:43:57:79:7c:76:9a:69:b8:6c:14:f6: da:80:d9:19:df:e5:48:5f:b1:0c:c6:a6:cb:0f:f7: be:44:22:69:5f:78:7d:c9:d3:55:a1:45:52:7c:c8: ba:8f:7a:a6:db:52:6f:18:f4:28:73:dc:22:49:d7: 27:70:e6:14:a4:c2:52:0b:d8:b5:81:78:8c:0c:a5: d5:72:a6:db:d5:23:69:c2:92:80:88:b7:f7:a8:21: f7:bf:df:44:24:eb:29:03:9c:04:85:9d:bf:6e:ea: 7a:30:44:3f:a2:26:3e:44:06:38:0b:6f:dc:22:94: 3b:71:9d:89:60:90:56:92:fa:05:04:23:e2:6d:e3: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.104.0/23 Signature Algorithm: sha256WithRSAEncryption 74:66:2d:7d:88:73:a4:ba:04:40:8b:9d:79:02:56:30:be:18: b0:de:82:db:b0:fc:b9:50:5c:da:77:27:af:eb:f7:09:e4:6a: 1e:78:7e:8c:fb:77:d7:85:59:52:70:cd:d2:49:e2:a8:66:6f: 89:d1:0a:b3:33:3d:2e:20:22:bc:9c:bd:b2:1e:85:7b:09:3d: 75:53:5b:d6:40:28:42:7b:50:14:e4:56:67:08:0e:ee:8a:dc: 0b:91:bc:40:86:b3:34:fe:a6:96:8b:d1:1a:bc:f7:3b:fb:98: 25:89:bc:70:82:e4:0b:6b:ce:27:46:b9:0e:73:e0:7b:66:77: 7b:3f:87:c9:05:5b:84:e0:71:b5:06:49:56:43:dc:9f:3a:a9: a5:1e:da:73:7d:3b:b4:1f:10:51:ce:e1:b8:fb:36:2b:2d:cc: 4b:e2:37:e9:ca:e0:b9:84:37:78:b6:11:df:d0:e9:1c:18:db: 2f:40:18:35:c9:bc:40:a6:33:64:88:b0:7b:9d:f8:42:7c:6f: bc:64:d2:ae:c8:3a:f8:ad:0e:c2:ad:c2:06:e0:d9:1f:a9:89: 38:c7:50:ae:4e:14:10:a4:e1:53:7b:a0:09:29:ce:61:7f:33: 0a:41:44:e0:0e:f0:14:55:f9:0d:52:60:02:b8:3c:83:09:e7: 52:0a:e9:e6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAvma9WCvv9IDM+HPTi3oHO0hSI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyMzEwNDA1MFoX DTI2MTEyMjEwNDU1MFowMzExMC8GA1UEAxMoMUY0QzQ2RTE4RjIxQUZCRTREOEFD OTg0NjA5MEI2M0FBOTg3ODJCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG6TyFf8FuQpjktqUBJaxOeS198pEdx/5LWcEqWech2V4VoOliiEwK//IEJ NQ1DtyETQo2UiYVnaK//Ma3Uxct3776YWwPXAMbqx1ek5czJc7toAbab2bdR+zYQ lA6riqJ4S7UPdvIOzRIsAdT1Au+i+WIUwD4USqpEMENXeXx2mmm4bBT22oDZGd/l SF+xDMamyw/3vkQiaV94fcnTVaFFUnzIuo96pttSbxj0KHPcIknXJ3DmFKTCUgvY tYF4jAyl1XKm29UjacKSgIi396gh97/fRCTrKQOcBIWdv27qejBEP6ImPkQGOAtv 3CKUO3GdiWCQVpL6BQQj4m3jNlUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB9MRuGPIa++TYrJhGCQtjqph4K7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNDdiMDI2NC05YTBhLTRjZTQtOTNjYi0yY2RkODQwYjg1MzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0N2IwMjY0 LTlhMGEtNGNlNC05M2NiLTJjZGQ4NDBiODUzNC8wLzFGNEM0NkUxOEYyMUFGQkU0 RDhBQzk4NDYwOTBCNjNBQTk4NzgyQkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnTGgwDQYJKoZIhvcNAQELBQADggEBAHRmLX2Ic6S6BECLnXkCVjC+GLDegtuw /LlQXNp3J6/r9wnkah54foz7d9eFWVJwzdJJ4qhmb4nRCrMzPS4gIrycvbIehXsJ PXVTW9ZAKEJ7UBTkVmcIDu6K3AuRvECGszT+ppaL0Rq89zv7mCWJvHCC5AtrzidG uQ5z4Htmd3s/h8kFW4TgcbUGSVZD3J86qaUe2nN9O7QfEFHO4bj7NistzEviN+nK 4LmEN3i2Ed/Q6RwY2y9AGDXJvECmM2SIsHud+EJ8b7xk0q7IOvitDsKtwgbg2R+p iTjHUK5OFBCk4VN7oAkpzmF/MwpBROAO8BRV+Q1SYAK4PIMJ51IK6eY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:15 2025 by rpki-client