This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer (raw, json) Hash identifier: 8K/CpR5OJUKiDuCYNQAh3ZFa2sodInt6TSoiB2h6u4U= Subject key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5CF02046F0B0A49A521338D46721ED41C797E3CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft caRepository: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 11 Aug 2025 15:48:22 +0000 Certificate not after: Mon 10 Aug 2026 15:53:22 +0000 Subordinate resources: IP: 103.142.33.0/24 IP: 103.143.218.0/24 IP: 203.142.26.0/24 IP: 2001:df1:2e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f0:20:46:f0:b0:a4:9a:52:13:38:d4:67:21:ed:41:c7:97:e3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 11 15:48:22 2025 GMT Not After : Aug 10 15:53:22 2026 GMT Subject: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:8a:78:a5:41:b0:07:bb:91:e9:1b:e5:9c: c1:dc:06:4e:c7:1a:8f:9d:93:6b:f6:e4:ca:b1:a7: 3e:c2:1c:71:1d:80:30:ff:92:a0:7c:56:ad:6d:0e: fc:fe:50:31:14:61:2a:77:09:66:76:9d:db:b3:17: d1:4c:ad:23:57:d7:64:6a:fe:38:24:1c:21:ba:a2: 4e:a9:58:90:a5:7e:d9:3c:2e:e2:f2:64:2c:af:b9: 4d:10:81:cd:b1:89:a9:1c:99:e2:37:e5:b3:25:e0: 8e:e6:37:c4:55:fd:1a:35:f9:93:76:e5:d7:97:e9: 7b:63:55:94:45:59:96:5e:84:0a:10:08:5d:70:88: 95:ab:8b:c9:5c:fe:e5:24:cd:39:85:4a:fa:bc:d1: 85:72:49:1e:33:ec:5a:c7:73:5b:92:fb:da:bb:6a: 7f:b5:a6:bd:93:b2:8f:e3:a6:2a:89:67:c0:7d:43: a9:b4:cc:11:0f:7e:02:aa:b8:06:b6:65:5d:8c:96: 85:f2:6f:15:cc:f7:c0:26:19:ba:37:76:42:19:9c: d1:df:f1:c2:da:40:a7:e4:d2:00:98:b9:d1:9e:bd: e7:b7:6c:07:a0:71:7a:87:54:b7:df:8e:61:8a:2b: 54:13:ff:bd:d1:69:16:05:0b:95:18:0d:e7:f8:40: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.33.0/24 103.143.218.0/24 203.142.26.0/24 IPv6: 2001:df1:2e80::/48 Signature Algorithm: sha256WithRSAEncryption 4b:c1:63:65:4e:00:13:58:ac:61:f2:d1:07:2f:b6:e2:41:31: 0e:62:ef:bf:b8:c9:06:7c:4e:1b:3f:f3:45:10:52:20:e7:b5: b2:80:82:0a:de:a5:62:16:1b:a3:86:4a:88:c8:b3:02:f3:95: 1e:66:5e:ae:3a:0b:e3:7f:f5:c5:1b:5f:62:68:0c:13:c5:3f: e9:32:44:82:00:5e:ce:f6:54:6b:5a:3a:29:98:3a:81:9c:6f: 8b:cb:48:3a:8a:ee:89:b5:80:70:aa:1b:81:01:d9:23:84:31: 00:28:da:44:9c:e0:99:ab:6e:ad:bd:d0:4a:fa:ff:ce:d8:f8: ce:e9:88:4f:1a:da:e7:ef:10:4f:01:4b:d2:33:61:1e:e8:cd: fd:cb:11:30:e8:c6:e1:13:e7:5e:72:e9:c9:ea:a8:f2:4d:be: a1:44:96:9d:a3:8b:cb:7a:dc:ed:cc:f1:ea:64:e4:ec:c4:53: 2e:d7:12:a3:d7:93:af:49:81:c4:b3:41:73:f6:5a:63:39:ad: 88:04:b1:38:46:05:96:fb:a3:a0:e6:ed:40:1d:43:61:e2:75: 0e:16:35:0e:c8:90:b6:6a:4c:21:cf:d3:2a:1f:5c:e0:34:2e: c5:c4:e6:1a:01:09:55:72:52:99:c1:63:7b:4d:b2:e4:b9:e2: 7e:20:51:08 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUXPAgRvCwpJpSEzjUZyHtQceX480wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxMTE1NDgyMloX DTI2MDgxMDE1NTMyMlowMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkEx QzVCRjNEODRFNDE1RDdGMThENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdJinilQbAHu5HpG+WcwdwGTscaj52Ta/bkyrGnPsIccR2AMP+SoHxWrW0O /P5QMRRhKncJZnad27MX0UytI1fXZGr+OCQcIbqiTqlYkKV+2Twu4vJkLK+5TRCB zbGJqRyZ4jflsyXgjuY3xFX9GjX5k3bl15fpe2NVlEVZll6EChAIXXCIlauLyVz+ 5STNOYVK+rzRhXJJHjPsWsdzW5L72rtqf7WmvZOyj+OmKolnwH1DqbTMEQ9+Aqq4 BrZlXYyWhfJvFcz3wCYZujd2Qhmc0d/xwtpAp+TSAJi50Z6957dsB6BxeodUt9+O YYorVBP/vdFpFgULlRgN5/hALFkCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCCkos6gCYhAr2ocW/PYTkFdfxjVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjODFlNmVj LWM4N2ItNGZkYi1hMmZhLWVjYzQ3MGM0MWQ1My8wLzIwQTRBMkNFQTAwOTg4NDBB RjZBMUM1QkYzRDg0RTQxNUQ3RjE4RDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnjiEDBABnj9oDBADLjhowDwQCAAIwCQMHACABDfEugDANBgkqhkiG9w0BAQsF AAOCAQEAS8FjZU4AE1isYfLRBy+24kExDmLvv7jJBnxOGz/zRRBSIOe1soCCCt6l YhYbo4ZKiMizAvOVHmZerjoL43/1xRtfYmgME8U/6TJEggBezvZUa1o6KZg6gZxv i8tIOoruibWAcKobgQHZI4QxACjaRJzgmaturb3QSvr/ztj4zumITxra5+8QTwFL 0jNhHujN/csRMOjG4RPnXnLpyeqo8k2+oUSWnaOLy3rc7czx6mTk7MRTLtcSo9eT r0mBxLNBc/ZaYzmtiASxOEYFlvujoObtQB1DYeJ1DhY1DsiQtmpMIc/TKh9c4DQu xcTmGgEJVXJSmcFje02y5LnifiBRCA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:02 2025 by rpki-client