This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.cer (raw, json) Hash identifier: IDV0eigt4WqEe44ksmVfP7fakGpzwOBbxyK3SMaaDuA= Subject key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 704A6D21465D81B189DBFA983E2F2F984323EFE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft caRepository: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 16 Nov 2025 21:27:59 +0000 Certificate not after: Sun 15 Nov 2026 21:32:59 +0000 Subordinate resources: IP: 103.189.138.0/23 IP: 2001:df1:9dc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4a:6d:21:46:5d:81:b1:89:db:fa:98:3e:2f:2f:98:43:23:ef:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 16 21:27:59 2025 GMT Not After : Nov 15 21:32:59 2026 GMT Subject: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:df:be:a6:db:3a:81:22:75:03:e8:1c:6a: 81:c5:24:c3:44:bc:6d:7a:ac:64:1d:4d:27:6e:6a: 12:e8:ec:5e:b4:5f:2d:6c:7c:42:b3:f7:92:e7:93: 8c:e1:75:13:05:0e:ad:0b:9b:ad:b0:04:87:bc:10: ea:33:0c:e1:48:1f:85:df:74:72:e5:0e:e2:08:1d: 36:9b:fc:49:18:e0:46:ae:ac:66:a4:01:c4:e9:f9: de:50:b3:a6:f6:78:46:cb:28:f8:15:8b:bf:0f:ae: 32:f7:7c:48:b7:74:27:b2:a5:10:aa:59:55:bf:d7: 54:ae:33:29:32:30:7a:45:87:cb:64:13:00:84:ed: 2a:cf:5f:58:00:ab:57:c1:f7:91:d5:5f:db:2b:46: 32:38:7c:e5:0e:a4:19:4c:93:6f:50:a4:b4:92:fc: 6a:cc:75:84:ee:36:92:33:8f:d1:2f:e2:2b:d7:ef: 43:6c:80:a7:51:72:46:71:ef:b1:bf:86:eb:db:66: c6:82:f5:e3:bb:2e:68:1f:07:fd:0f:ec:91:a8:27: d8:11:6a:cc:30:3d:14:83:24:bb:e2:31:0a:c8:f8: 82:12:34:09:74:6f:98:9f:07:1a:9e:4d:87:d6:eb: ed:7e:9d:4b:18:12:03:e5:63:79:aa:ad:a1:97:b7: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.138.0/23 IPv6: 2001:df1:9dc0::/48 Signature Algorithm: sha256WithRSAEncryption 5f:bf:3c:bb:f5:57:b8:50:8f:ff:47:92:76:11:b0:2f:20:1f: ec:16:d0:2a:1c:43:00:7d:5a:14:1a:46:ed:d1:8c:b1:fe:70: e8:79:8d:ba:d4:2c:84:37:0a:53:b4:4a:c5:d6:75:29:a4:f5: ae:bd:b8:af:2a:89:bd:c0:b4:ff:33:98:97:27:80:49:f4:fb: 47:f9:ad:8e:81:74:eb:12:83:a8:c4:86:b6:0b:b6:3e:d8:3e: 22:d6:f6:f9:ea:68:a1:2b:0d:dc:91:76:b8:16:39:3c:71:90: bb:f5:c9:a3:23:42:ca:a4:61:74:d4:31:eb:67:41:cc:ed:ec: a9:9d:89:91:75:e5:00:03:ab:5d:1e:19:ee:63:04:92:e7:54: fa:b6:33:14:c6:c4:88:88:e0:1a:b4:aa:3e:51:a6:e1:48:e2: a4:0d:22:8f:ac:07:2e:c2:8c:5f:4a:0c:01:aa:78:3d:b5:7e: 87:c0:9d:b2:c3:13:24:88:ca:6f:dc:96:41:32:7f:f9:f7:73: e4:11:27:09:ac:18:b7:ba:e5:b3:12:86:ad:73:66:69:84:94: 63:8e:b5:83:b7:87:5b:aa:59:61:d2:6f:5b:9b:62:32:3d:91: b8:16:ff:f4:8c:f0:26:ed:0c:65:fd:33:fd:1a:f4:48:b1:3f: 83:dc:36:49 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUcEptIUZdgbGJ2/qYPi8vmEMj7+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExNjIxMjc1OVoX DTI2MTExNTIxMzI1OVowMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRG NEExRERGRTAxNjU1N0E4MzVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRi376m2zqBInUD6BxqgcUkw0S8bXqsZB1NJ25qEujsXrRfLWx8QrP3kueT jOF1EwUOrQubrbAEh7wQ6jMM4Ugfhd90cuUO4ggdNpv8SRjgRq6sZqQBxOn53lCz pvZ4Rsso+BWLvw+uMvd8SLd0J7KlEKpZVb/XVK4zKTIwekWHy2QTAITtKs9fWACr V8H3kdVf2ytGMjh85Q6kGUyTb1CktJL8asx1hO42kjOP0S/iK9fvQ2yAp1FyRnHv sb+G69tmxoL147suaB8H/Q/skagn2BFqzDA9FIMku+IxCsj4ghI0CXRvmJ8HGp5N h9br7X6dSxgSA+VjeaqtoZe37CECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCdXWuvEQ0F8Mf30od3+AWVXqDX0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNmI1OTdj LTk1NDctNGMxZS1hYzg3LTNhNDM0YTMwMGE2Ny8wLzI3NTc1QUVCQzQ0MzQxN0Mz MUZERjRBMURERkUwMTY1NTdBODM1RjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnvYowDwQCAAIwCQMHACABDfGdwDANBgkqhkiG9w0BAQsFAAOCAQEAX788u/VX uFCP/0eSdhGwLyAf7BbQKhxDAH1aFBpG7dGMsf5w6HmNutQshDcKU7RKxdZ1KaT1 rr24ryqJvcC0/zOYlyeASfT7R/mtjoF06xKDqMSGtgu2Ptg+Itb2+epooSsN3JF2 uBY5PHGQu/XJoyNCyqRhdNQx62dBzO3sqZ2JkXXlAAOrXR4Z7mMEkudU+rYzFMbE iIjgGrSqPlGm4UjipA0ij6wHLsKMX0oMAap4PbV+h8CdssMTJIjKb9yWQTJ/+fdz 5BEnCawYt7rlsxKGrXNmaYSUY461g7eHW6pZYdJvW5tiMj2RuBb/9IzwJu0MZf0z /Rr0SLE/g9w2SQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:47 2025 by rpki-client