This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
File:                     29BE771FE6D788CA509E787787F218ADFB43DDB2.cer (raw, json)
Hash identifier:          o8punJNBIHNkCYN3YTZJwUd0g1jsqYk/iye+9L31mCA=
Subject key identifier:   29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       69E4CB8B3076876193CE6143AE143DF106DA6A90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Jun 2025 14:31:18 +0000
Certificate not after:    Fri 05 Jun 2026 14:36:18 +0000
Subordinate resources:    IP: 103.143.128.0/23
                          IP: 2405:51c0::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e4:cb:8b:30:76:87:61:93:ce:61:43:ae:14:3d:f1:06:da:6a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  6 14:31:18 2025 GMT
            Not After : Jun  5 14:36:18 2026 GMT
        Subject: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:66:0b:fa:ae:91:af:09:a1:40:5e:f7:86:
                    91:be:92:8d:e6:2e:9f:16:48:22:bf:2c:d6:d9:31:
                    70:39:d7:10:3d:b6:19:9d:a2:11:0f:e0:9b:12:fb:
                    96:35:5c:80:bf:d7:d2:7f:46:f1:93:f6:2c:00:b5:
                    7f:76:b0:33:2f:09:f6:37:bf:b8:70:e5:b6:4d:f1:
                    c8:1a:34:bf:ea:ae:6f:99:09:67:43:54:0b:24:3c:
                    c0:67:53:29:39:16:e0:8e:c2:55:c5:dd:ad:19:71:
                    bc:fd:88:8e:d7:e0:51:06:ee:44:dc:4f:06:f3:eb:
                    de:d4:92:92:33:3c:77:91:90:92:be:e3:ba:57:c9:
                    45:4d:75:2a:23:e1:5f:5c:9b:c5:68:98:93:bb:9f:
                    bf:78:75:41:cc:2a:59:d0:2b:e8:db:76:4a:e9:ab:
                    a5:76:c5:86:51:90:a2:0b:58:b8:df:d0:44:95:cd:
                    d9:9d:47:e9:81:01:e0:1c:4b:56:64:6b:ab:4e:1d:
                    92:06:60:9f:ac:6a:ad:0f:7c:fa:ab:15:56:e2:1a:
                    a9:63:9f:c7:08:5f:3e:00:90:9c:b8:43:85:e9:dc:
                    1e:24:08:9e:5d:06:6e:a9:69:53:5a:90:73:a3:25:
                    bf:08:9f:6e:be:5e:62:aa:e6:26:4b:f3:6f:72:90:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.128.0/23
                IPv6:
                  2405:51c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:fc:32:1c:b6:06:9e:33:69:5a:d1:bc:05:03:9e:e3:36:
         87:85:ef:d3:9b:68:d8:4c:4c:a7:29:20:b5:d1:6a:88:6e:9f:
         e8:5b:83:d8:fe:01:78:f6:09:b5:46:02:bf:85:0c:93:5b:ec:
         31:d2:87:c9:7b:05:29:9d:42:6c:41:05:e5:1a:27:6d:ff:f5:
         d6:76:58:72:c1:29:b0:db:03:d1:68:0e:59:63:38:e1:9d:81:
         a7:41:d0:a9:a8:d2:71:a6:3a:b9:0b:b4:70:d1:e9:d5:07:5f:
         fc:a7:ec:ce:0b:90:49:ef:11:9f:d6:36:b3:89:b3:88:d2:0b:
         83:01:20:52:77:31:f5:8b:d7:12:a6:f9:d6:dd:03:11:ae:6b:
         cc:f3:2b:03:49:b4:f6:8e:1a:f7:95:42:85:06:56:3f:42:27:
         0c:99:5b:af:ed:fe:58:50:2c:91:dd:3f:a3:bc:12:8a:81:bf:
         6a:f6:d2:1d:76:97:e9:97:8b:4b:e5:12:e7:00:52:a6:44:37:
         4e:86:89:e3:81:04:42:40:c9:da:ec:7d:47:68:5b:15:84:20:
         57:f8:10:8e:1e:80:c9:5b:ca:43:ae:a4:cb:a8:66:5e:cc:7d:
         2c:9b:01:26:7a:f2:db:b6:91:20:19:de:aa:1e:19:df:72:c1:
         c7:31:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----