This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.cer (raw, json) Hash identifier: 4YeAxLT1H9KNauMMfJrrG3PZjs1andAIgylpf64PJfU= Subject key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3CD4987FA95ADC65C5B1BBA463C3689B84C90DE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:58:37 +0000 Certificate not after: Wed 27 Jan 2027 17:03:37 +0000 Subordinate resources: IP: 103.93.158.0/23 IP: 103.112.228.0/23 IP: 2001:df1:4500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d4:98:7f:a9:5a:dc:65:c5:b1:bb:a4:63:c3:68:9b:84:c9:0d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 28 16:58:37 2026 GMT Not After : Jan 27 17:03:37 2027 GMT Subject: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:dd:f2:d5:b1:e7:69:03:24:cc:fe:94:b0: df:51:32:44:a8:03:dd:05:9f:c2:40:8f:5e:14:6a: ee:21:ff:ba:eb:4e:3e:62:f5:73:1e:70:65:09:d2: 11:38:94:40:a4:ac:75:6f:7d:3a:c4:8f:d1:ed:d6: 00:62:c5:0b:c2:3d:23:76:99:92:85:90:0f:7a:2b: 17:0e:38:f4:8d:bc:41:9e:90:fa:83:23:e1:c4:9a: 47:d4:46:69:3e:d8:9a:7e:93:31:39:df:55:c1:e2: 31:81:97:e4:da:71:7a:be:36:48:0d:20:cf:5b:14: e7:e3:da:89:e7:f8:a5:16:09:4f:a2:7e:23:41:14: 17:8e:ed:2e:79:f1:e0:be:96:67:37:4a:36:6a:38: df:ac:d4:49:47:c8:65:a4:51:2b:c5:c7:10:25:f0: 28:94:97:87:61:35:90:40:ba:1f:5c:81:04:df:bd: f5:5f:e6:bd:90:17:39:60:2c:d3:a2:85:9a:37:79: b2:49:80:47:bc:d2:62:f7:b1:27:63:6e:e8:bf:2b: 3f:f7:70:74:cc:53:f5:f9:fc:5f:45:29:a8:7a:82: fb:f2:89:f2:26:97:61:76:be:3b:53:e5:5b:d0:83: 2d:86:c1:be:e8:cc:81:9d:98:73:9f:0f:73:ad:59: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.93.158.0/23 103.112.228.0/23 IPv6: 2001:df1:4500::/48 Signature Algorithm: sha256WithRSAEncryption 6d:78:78:e8:04:83:d5:48:be:c3:f5:b1:76:df:e8:7c:6e:81: 53:8f:32:2f:0d:48:4c:2c:77:94:4b:cf:75:0d:ed:4c:08:94: 90:09:17:ab:df:af:06:e9:0d:84:66:d9:fd:21:9b:66:0e:a4: 08:60:60:66:cd:0c:32:f4:a8:36:b0:de:5a:e8:6a:7f:95:56: 4f:11:96:b8:55:95:2e:ca:9a:ba:8f:31:f8:a0:0c:ac:5d:93: 1b:db:9b:fd:59:30:2d:bc:f6:7d:97:dc:12:66:10:e7:ce:c7: 43:c1:ad:21:91:85:a3:0e:4a:c5:8d:b7:19:19:74:fb:3a:b9: 60:ef:62:da:59:36:e1:61:fe:ac:98:bc:11:d8:f0:c2:d9:98: a6:86:fa:6e:70:a6:7c:be:f2:65:79:08:a5:68:51:e6:d1:41: b1:1f:58:3e:1f:90:1f:04:cb:51:08:05:b3:ac:00:c0:39:aa: 02:d4:8a:e3:ee:1d:7a:44:16:44:ec:4e:c7:39:e5:59:24:e7: a9:31:b1:8d:ac:01:97:76:76:21:16:b5:5f:66:b6:c1:ec:b4: 78:12:52:29:9c:47:b5:45:36:9c:4b:1d:b5:47:97:46:c7:1d: 11:9d:9c:25:f7:32:98:9b:d9:3e:82:fd:1a:15:3f:53:dc:4a: aa:94:10:66 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUPNSYf6la3GXFsbukY8Nom4TJDegwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyODE2NTgzN1oX DTI3MDEyNzE3MDMzN1owMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBB MjBFMTQ0MDI3REIyRTkzMzA3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvd3fLVsedpAyTM/pSw31EyRKgD3QWfwkCPXhRq7iH/uutOPmL1cx5wZQnS ETiUQKSsdW99OsSP0e3WAGLFC8I9I3aZkoWQD3orFw449I28QZ6Q+oMj4cSaR9RG aT7Ymn6TMTnfVcHiMYGX5Npxer42SA0gz1sU5+Paief4pRYJT6J+I0EUF47tLnnx 4L6WZzdKNmo436zUSUfIZaRRK8XHECXwKJSXh2E1kEC6H1yBBN+99V/mvZAXOWAs 06KFmjd5skmAR7zSYvexJ2Nu6L8rP/dwdMxT9fn8X0UpqHqC+/KJ8iaXYXa+O1Pl W9CDLYbBvujMgZ2Yc58Pc61ZYvsCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCQsODbkLOtvSKCiDhRAJ9sukzB6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNmFlMmEy LWQ5M2YtNDljYS1iYTRiLTE3MWZmOGQxZTU3Zi8wLzI0MkMzODM2RTQyQ0VCNkY0 OEEwQTIwRTE0NDAyN0RCMkU5MzMwN0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAFnXZ4DBAFncOQwDwQCAAIwCQMHACABDfFFADANBgkqhkiG9w0BAQsFAAOCAQEA bXh46ASD1Ui+w/Wxdt/ofG6BU48yLw1ITCx3lEvPdQ3tTAiUkAkXq9+vBukNhGbZ /SGbZg6kCGBgZs0MMvSoNrDeWuhqf5VWTxGWuFWVLsqauo8x+KAMrF2TG9ub/Vkw Lbz2fZfcEmYQ587HQ8GtIZGFow5KxY23GRl0+zq5YO9i2lk24WH+rJi8EdjwwtmY pob6bnCmfL7yZXkIpWhR5tFBsR9YPh+QHwTLUQgFs6wAwDmqAtSK4+4dekQWROxO xznlWSTnqTGxjawBl3Z2IRa1X2a2wey0eBJSKZxHtUU2nEsdtUeXRscdEZ2cJfcy mJvZPoL9GhU/U9xKqpQQZg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:16:13 2026 by rpki-client