This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer (raw, json) Hash identifier: Z8Rdjyjviz5Ua8/hEIQzwFENRzgtXY6FoHTpgW0ube8= Subject key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2158B25DC65EAAC075CAAC6A5BD57EC9B0A8AE63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft caRepository: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 19 Nov 2025 19:13:00 +0000 Certificate not after: Wed 18 Nov 2026 19:18:00 +0000 Subordinate resources: IP: 103.139.175.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:58:b2:5d:c6:5e:aa:c0:75:ca:ac:6a:5b:d5:7e:c9:b0:a8:ae:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 19 19:13:00 2025 GMT Not After : Nov 18 19:18:00 2026 GMT Subject: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:91:bd:95:38:b4:d9:33:25:ac:e6:1e:72: 67:a2:36:fd:7b:11:5e:98:cc:12:de:eb:c2:98:3b: 22:34:72:be:be:fd:77:d5:43:bb:5f:41:b3:7b:ea: 29:1d:fd:90:09:ad:87:a3:10:44:16:97:2e:67:0e: 78:f1:82:30:b0:4c:ea:d8:11:18:ec:b8:0a:ad:6f: 93:b8:5f:2a:84:84:b8:50:d2:86:bf:88:3f:0b:8c: ce:fa:7e:47:f3:c3:86:f3:85:46:d0:46:87:89:77: 1c:d2:f7:7e:b9:6c:ab:34:ce:6b:32:a6:f6:f5:54: ee:30:75:68:b2:98:32:7a:0d:ae:f8:9d:8d:cc:a8: 38:72:a2:4a:bb:83:df:e2:17:1b:d4:2a:9f:42:d5: 8a:3e:73:c5:72:71:e2:d8:9a:cb:61:3d:30:4f:35: 6e:9c:ce:8a:20:77:92:7e:c6:32:47:1e:37:a9:44: 46:28:c8:bd:db:71:25:da:97:e0:b4:d1:f5:fd:59: 9c:67:86:0a:29:85:82:dd:56:17:32:c8:6a:4b:72: 5f:47:f2:47:85:4e:ec:21:00:79:b9:cc:37:97:b6: 78:59:38:72:80:ec:57:62:91:90:2e:43:6a:f0:6e: 18:52:62:31:a4:d6:2c:ed:4c:6b:30:49:fe:3b:47: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.175.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:8e:49:c8:41:8a:f0:34:b6:2e:43:40:bd:2f:38:f3:ea:57: 59:91:97:34:32:02:8c:54:4a:ea:f5:43:7a:21:0b:1d:7e:5e: 78:d1:0c:a2:da:d9:11:d2:e9:ab:40:c9:41:6f:86:ba:0e:ce: 8c:54:f5:f3:84:5c:e8:73:05:c0:0b:06:99:0e:fd:12:17:5c: d6:48:d2:b6:16:ec:9b:42:2c:1d:04:36:f8:66:6e:ac:ea:c1: 08:36:eb:e0:b5:29:e1:57:97:b9:95:38:fd:70:d5:8c:d9:57: 43:f1:7d:86:36:da:70:b3:de:d5:a5:53:0c:e8:20:fb:84:cb: 99:3b:82:ba:8e:9f:70:6c:d3:63:70:10:ad:d3:2a:ce:f6:b1: c3:83:25:76:bb:ae:cd:e6:56:c0:81:5e:b1:be:98:56:70:40: 75:cc:7b:5b:16:67:34:da:ec:e0:c0:6a:8f:f0:2c:27:58:79: d5:f3:6b:8e:e9:7e:a6:5d:2d:c3:e3:09:f9:33:9d:c7:b4:c0: 2c:72:cd:93:9c:24:a6:59:87:74:72:b0:cf:b5:c7:27:63:bc: cf:8f:51:06:43:9c:88:5d:0f:a3:a6:2f:a9:63:d9:80:14:54: bf:5d:6f:06:ed:d3:f7:c5:d9:9d:56:ab:82:9a:85:57:4a:af: ba:9b:f4:77 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIViyXcZeqsB1yqxqW9V+ybCormMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExOTE5MTMwMFoX DTI2MTExODE5MTgwMFowMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFB MDQ4NkFFRjU1QUY4QzFDMjI4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRhkb2VOLTZMyWs5h5yZ6I2/XsRXpjMEt7rwpg7IjRyvr79d9VDu19Bs3vq KR39kAmth6MQRBaXLmcOePGCMLBM6tgRGOy4Cq1vk7hfKoSEuFDShr+IPwuMzvp+ R/PDhvOFRtBGh4l3HNL3frlsqzTOazKm9vVU7jB1aLKYMnoNrvidjcyoOHKiSruD 3+IXG9Qqn0LVij5zxXJx4tiay2E9ME81bpzOiiB3kn7GMkceN6lERijIvdtxJdqX 4LTR9f1ZnGeGCimFgt1WFzLIaktyX0fyR4VO7CEAebnMN5e2eFk4coDsV2KRkC5D avBuGFJiMaTWLO1MazBJ/jtH9KsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCKCWgvukmaDrEGgSGrvVa+MHCKPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zOTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM5MDAyMDhi LTMyYWMtNGEyNi05ZDkyLTYwOWFkNzYxODNjMS8wLzIyODI1QTBCRUU5MjY2ODNB QzQxQTA0ODZBRUY1NUFGOEMxQzIyOEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABni68wDQYJKoZIhvcNAQELBQADggEBAEyOSchBivA0ti5DQL0vOPPqV1mRlzQy AoxUSur1Q3ohCx1+XnjRDKLa2RHS6atAyUFvhroOzoxU9fOEXOhzBcALBpkO/RIX XNZI0rYW7JtCLB0ENvhmbqzqwQg26+C1KeFXl7mVOP1w1YzZV0PxfYY22nCz3tWl UwzoIPuEy5k7grqOn3Bs02NwEK3TKs72scODJXa7rs3mVsCBXrG+mFZwQHXMe1sW ZzTa7ODAao/wLCdYedXza47pfqZdLcPjCfkznce0wCxyzZOcJKZZh3RysM+1xydj vM+PUQZDnIhdD6OmL6lj2YAUVL9dbwbt0/fF2Z1Wq4KahVdKr7qb9Hc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:54 2025 by rpki-client