This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.cer (raw, json) Hash identifier: XY3RmHqQs9dfLPoUtMPEEqzr6FFAIqV9WO26RF5LlIY= Subject key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F909942BA136C0EB8BADE6970F607A6CE4446DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft caRepository: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 May 2025 15:28:02 +0000 Certificate not after: Fri 22 May 2026 15:33:02 +0000 Subordinate resources: IP: 103.179.34.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:90:99:42:ba:13:6c:0e:b8:ba:de:69:70:f6:07:a6:ce:44:46:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 23 15:28:02 2025 GMT Not After : May 22 15:33:02 2026 GMT Subject: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:30:93:be:e5:04:5d:2e:1d:60:26:85:2e: f1:0e:b8:d8:92:0c:a7:f7:2e:18:71:08:5d:36:12: de:af:57:dd:b9:3b:88:31:b9:93:ee:25:e3:03:9b: a7:7c:31:4b:51:05:e6:ce:68:af:9b:e6:c3:64:c0: 7a:ec:a3:85:e3:e6:a2:cd:6f:ed:0c:47:40:2e:19: d5:29:74:1c:74:2e:b1:9c:e6:a8:3e:70:5a:f3:ed: b1:62:92:95:40:89:06:fe:37:f7:bc:96:a5:82:53: 6c:56:5c:8b:88:7a:f8:36:60:4c:80:ea:10:a5:f8: ea:f1:a0:e5:2d:bc:8d:7e:86:4b:56:ad:e5:22:e0: 76:2e:36:1d:da:04:4a:58:e6:00:aa:21:03:1d:3d: b0:ab:31:48:9a:2e:f4:15:14:28:3e:fe:30:44:80: 6e:5d:4c:39:4c:19:6f:5c:78:5a:42:b2:6a:26:71: 8b:56:18:3a:6a:76:69:31:95:96:cf:59:55:53:1a: 73:9f:e9:b6:01:06:44:c6:07:7e:22:2c:0c:b0:13: 1f:c0:f2:d1:32:f6:af:f6:15:17:0e:c3:15:24:f5: 9c:d7:c8:c6:1a:2b:43:57:c7:d6:b8:e7:03:e2:41: 1a:74:f1:8b:08:41:4b:55:d5:22:1a:4d:23:3f:04: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.34.0/23 Signature Algorithm: sha256WithRSAEncryption 48:a4:8f:80:db:c6:6e:83:f0:3e:b9:2c:dc:b4:e7:b1:ac:53: b4:aa:1d:18:43:ca:16:81:25:ed:d9:46:56:92:5e:4c:a5:aa: 54:24:ae:a0:93:2f:ff:ca:58:6b:73:12:62:9a:3c:27:02:c9: b6:c2:3c:8b:19:a2:7e:c6:9d:33:b2:ef:50:e6:70:19:e1:e3: 32:20:0c:0d:e3:f6:9d:be:67:90:69:06:f7:f2:a9:c8:76:c0: 4d:97:78:d7:6f:2d:ab:04:3b:24:d1:d1:44:c5:47:27:a1:d1: 4e:c7:9a:54:97:00:7e:d2:34:d9:d8:6f:1c:e6:d6:18:09:47: ea:8d:4c:dc:eb:9a:19:1f:88:dc:59:56:de:c0:2d:2b:fa:7a: 06:9e:2f:a1:1b:ae:90:4e:9f:ad:90:26:92:b5:7d:3b:94:70: 47:13:ae:5b:71:42:25:e6:0c:aa:46:68:c6:35:f3:80:20:bd: 91:78:0a:bc:f2:38:3e:da:7a:09:43:86:d0:b9:22:85:cb:14: 6a:77:25:3b:a2:84:6d:c0:70:e9:b1:45:e7:f9:1c:fd:25:d0: 6f:f9:0e:25:03:db:1d:05:f9:70:16:99:42:ae:ca:94:62:ec: 6d:5b:9e:5b:01:c9:05:b6:02:15:3c:b8:3b:00:72:d1:f5:a2: 29:26:2b:82 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUD5CZQroTbA64ut5pcPYHps5ERtswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMzE1MjgwMloX DTI2MDUyMjE1MzMwMlowMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFG NDlBQzFFREJFNTFCRjE1RDQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTcMJO+5QRdLh1gJoUu8Q642JIMp/cuGHEIXTYS3q9X3bk7iDG5k+4l4wOb p3wxS1EF5s5or5vmw2TAeuyjhePmos1v7QxHQC4Z1Sl0HHQusZzmqD5wWvPtsWKS lUCJBv4397yWpYJTbFZci4h6+DZgTIDqEKX46vGg5S28jX6GS1at5SLgdi42HdoE SljmAKohAx09sKsxSJou9BUUKD7+MESAbl1MOUwZb1x4WkKyaiZxi1YYOmp2aTGV ls9ZVVMac5/ptgEGRMYHfiIsDLATH8Dy0TL2r/YVFw7DFST1nNfIxhorQ1fH1rjn A+JBGnTxiwhBS1XVIhpNIz8EaKsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFChsmjYtgXdt1yH0msHtvlG/FdSGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmMTI3NGM2 LTc4M2MtNGYzZC1hOWI2LTc1YjNiNDZmODU0Yy8wLzI4NkM5QTM2MkQ4MTc3NkRE NzIxRjQ5QUMxRURCRTUxQkYxNUQ0ODYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsyIwDQYJKoZIhvcNAQELBQADggEBAEikj4Dbxm6D8D65LNy057GsU7SqHRhD yhaBJe3ZRlaSXkylqlQkrqCTL//KWGtzEmKaPCcCybbCPIsZon7GnTOy71DmcBnh 4zIgDA3j9p2+Z5BpBvfyqch2wE2XeNdvLasEOyTR0UTFRyeh0U7HmlSXAH7SNNnY bxzm1hgJR+qNTNzrmhkfiNxZVt7ALSv6egaeL6EbrpBOn62QJpK1fTuUcEcTrltx QiXmDKpGaMY184AgvZF4CrzyOD7aeglDhtC5IoXLFGp3JTuihG3AcOmxRef5HP0l 0G/5DiUD2x0F+XAWmUKuypRi7G1bnlsByQW2AhU8uDsActH1oikmK4I= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:12 2025 by rpki-client