This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer (raw, json) Hash identifier: o2ULt4fcFwlVFCgVbkAVtIbPdrxSAdnnUG+H9O9zcQs= Subject key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7BC1BFAD90EF1D60587DD89186878D26B79AAD02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft caRepository: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 15 Sep 2025 10:08:23 +0000 Certificate not after: Mon 14 Sep 2026 10:13:23 +0000 Subordinate resources: IP: 103.151.24.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c1:bf:ad:90:ef:1d:60:58:7d:d8:91:86:87:8d:26:b7:9a:ad:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 15 10:08:23 2025 GMT Not After : Sep 14 10:13:23 2026 GMT Subject: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:41:d6:0d:89:10:c1:84:f5:c9:18:41:e5: 15:60:17:d4:f7:68:1e:e2:e6:73:8e:31:33:cc:10: 02:32:0a:8d:59:20:6c:e0:74:f4:d8:de:b8:b0:04: 06:15:a3:66:ab:0e:59:2b:a2:af:ce:30:e0:b6:28: 4b:d6:b2:70:e9:cf:6b:7d:0a:c6:54:e2:1d:f1:65: 43:5f:21:e7:ee:1a:3f:9e:cd:ce:d0:89:3a:02:70: 4f:de:be:55:e1:d4:52:64:68:0e:99:53:60:74:55: d1:36:03:12:d5:1b:fd:31:3f:91:50:f1:dd:02:cb: 18:f4:8b:bd:b7:8b:b7:07:5c:97:49:dd:38:40:84: 06:7a:41:e2:73:89:22:7b:09:7e:99:6a:c7:96:7e: d7:35:d9:cf:20:dd:d9:66:82:58:1d:5d:92:b5:5b: 6b:7d:1b:26:e1:ba:4d:94:74:7f:c3:4f:60:fc:5f: 08:ad:05:0a:d3:b5:db:e0:40:1f:81:31:59:3b:03: a0:c8:fb:4a:f4:aa:61:80:cf:df:b1:2a:11:c4:51: 9c:f1:be:8c:33:b0:d0:8f:b0:12:d5:de:f6:1b:59: 64:56:2b:12:1d:71:95:e4:80:48:2d:90:ff:41:dc: 9b:3f:55:78:9d:f2:23:42:a0:5e:32:c2:fd:21:fb: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.24.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d7:37:b5:55:de:5f:df:57:ed:11:79:90:52:b5:11:ce:ee: 58:c3:b5:66:44:af:20:20:f7:24:ab:79:71:a5:cb:35:ba:89: d5:2f:00:83:82:43:fa:8e:98:37:9d:2b:ca:b9:31:8b:5a:54: 79:5a:59:5b:ce:fc:90:5b:af:f5:20:71:aa:9c:8e:cc:91:66: 0d:af:b0:39:fa:33:c6:83:3c:a6:ca:22:e2:f6:16:10:1b:6a: c9:3d:34:6b:af:48:02:73:cc:ae:9f:12:08:c2:ff:05:12:08: e3:1f:32:81:e0:c8:f1:fd:00:98:4a:95:f7:6d:b9:fc:b2:e9: a4:15:76:5f:cb:dc:2b:9f:02:1e:67:41:26:8e:46:38:58:e7: 38:8e:29:a4:26:8c:37:9f:e8:82:31:59:ad:22:57:83:73:65: 6a:f1:a5:21:aa:85:73:1c:e9:97:fd:f4:7c:17:c4:ea:0e:88: 3d:30:f4:2a:97:d2:e4:a6:ec:15:c8:4d:16:56:40:5c:09:86: f0:8c:56:7f:bc:84:46:8d:ed:c5:c7:32:cb:72:13:c4:47:3f: 55:fe:c9:c9:88:b6:06:a0:06:12:43:b6:e6:ed:80:80:aa:d2: ca:2f:8d:75:5a:ed:e4:b4:91:52:81:12:31:da:42:21:a2:df: 5c:6e:51:d2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUe8G/rZDvHWBYfdiRhoeNJrearQIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNTEwMDgyM1oX DTI2MDkxNDEwMTMyM1owMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBG QjM2OTUxNjc0RjdEOEE0QUM0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8VQdYNiRDBhPXJGEHlFWAX1PdoHuLmc44xM8wQAjIKjVkgbOB09NjeuLAE BhWjZqsOWSuir84w4LYoS9aycOnPa30KxlTiHfFlQ18h5+4aP57NztCJOgJwT96+ VeHUUmRoDplTYHRV0TYDEtUb/TE/kVDx3QLLGPSLvbeLtwdcl0ndOECEBnpB4nOJ InsJfplqx5Z+1zXZzyDd2WaCWB1dkrVba30bJuG6TZR0f8NPYPxfCK0FCtO12+BA H4ExWTsDoMj7SvSqYYDP37EqEcRRnPG+jDOw0I+wEtXe9htZZFYrEh1xleSASC2Q /0Hcmz9VeJ3yI0KgXjLC/SH7btUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCoGtCn3C4afnnD7NpUWdPfYpKxOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xYjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNWE0N2I2 LTU1MTMtNDYxMC05NGNmLTFmZWVjNGVlZWNmMy8wLzJBMDZCNDI5RjcwQjg2OUY5 RTcwRkIzNjk1MTY3NEY3RDhBNEFDNEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnlxgwDQYJKoZIhvcNAQELBQADggEBAHDXN7VV3l/fV+0ReZBStRHO7ljDtWZE ryAg9ySreXGlyzW6idUvAIOCQ/qOmDedK8q5MYtaVHlaWVvO/JBbr/UgcaqcjsyR Zg2vsDn6M8aDPKbKIuL2FhAbask9NGuvSAJzzK6fEgjC/wUSCOMfMoHgyPH9AJhK lfdtufyy6aQVdl/L3CufAh5nQSaORjhY5ziOKaQmjDef6IIxWa0iV4NzZWrxpSGq hXMc6Zf99HwXxOoOiD0w9CqX0uSm7BXITRZWQFwJhvCMVn+8hEaN7cXHMstyE8RH P1X+ycmItgagBhJDtubtgICq0sovjXVa7eS0kVKBEjHaQiGi31xuUdI= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:04 2025 by rpki-client