This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer File: 2ADCBF290A98776E6F59353351C879A1502B884A.cer (raw, json) Hash identifier: CvcREKCL2yXRgda0yMkC1/AqoUC/lxmV8zNC18+hEvM= Subject key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 792289A2A2F67EA6B06806F9BDD3786CE0F2E45E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft caRepository: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 24 Nov 2025 13:24:14 +0000 Certificate not after: Mon 23 Nov 2026 13:29:14 +0000 Subordinate resources: IP: 103.54.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:22:89:a2:a2:f6:7e:a6:b0:68:06:f9:bd:d3:78:6c:e0:f2:e4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 24 13:24:14 2025 GMT Not After : Nov 23 13:29:14 2026 GMT Subject: CN=2ADCBF290A98776E6F59353351C879A1502B884A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:d1:08:0c:5e:71:89:7c:9c:dd:a7:27:f8: c5:69:85:87:a3:cf:8e:97:13:a9:c3:ad:72:f0:0b: 3e:dc:a2:74:61:66:39:5d:c5:4e:fb:75:95:d7:51: 6c:dc:35:95:e8:1d:45:15:61:bf:6b:68:ee:02:d9: d4:61:5a:d6:6d:41:c1:98:6d:be:c8:72:e1:59:6d: 5e:e7:0e:80:33:f5:a0:f3:76:6d:83:57:de:8d:14: a5:ab:d4:e0:25:7e:cf:d8:50:1a:5b:47:24:66:b8: 5e:18:2d:1c:b9:63:65:d5:8c:d4:f3:e5:42:ac:cd: 1f:d5:66:7b:3f:d9:22:01:93:17:e9:58:a8:fa:aa: 02:25:0e:67:53:4b:18:6d:b3:fc:93:9c:dc:cf:e2: ed:cb:a2:fd:9b:6d:99:f9:df:7d:58:bd:e3:9c:75: 99:4d:bf:ef:2d:33:07:18:2b:02:79:a7:24:28:94: 5a:33:1c:dd:37:52:f4:73:c2:06:2c:03:f0:bb:67: 05:ef:40:42:83:3a:90:01:80:fc:40:80:0d:d4:7c: 48:1e:39:00:31:75:b6:76:4c:9f:2e:b6:88:d7:7c: 16:bc:87:63:00:f4:1f:cb:f9:de:db:d6:53:d3:f8: 6e:b7:6f:23:21:cf:3e:00:2d:12:cb:ae:fb:c9:8a: c7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.82.0/23 Signature Algorithm: sha256WithRSAEncryption 94:f7:d9:2f:11:68:da:e5:0e:aa:1d:27:63:e9:81:c8:f2:5f: 9f:c5:b0:3a:59:32:c3:25:8f:8d:d2:65:8d:fe:88:07:f8:e4: 71:0f:4d:5b:38:99:40:42:6e:73:87:e2:10:3e:22:0b:b8:ae: 1c:51:5b:7c:d0:3e:2b:58:31:05:c3:ed:f3:34:36:80:84:dd: c9:eb:c1:8c:60:54:7c:09:8e:e8:6d:eb:e8:24:88:e0:21:af: d5:5d:1c:25:37:df:ea:25:4f:bd:98:7c:3c:56:07:99:78:24: f1:4f:53:62:dc:5e:a8:d5:b2:9c:28:c7:4c:ee:03:b7:7f:23: 08:54:e8:9c:f8:69:e5:83:0c:b9:27:5b:53:95:15:70:4c:48: f7:66:a4:fe:3a:14:bb:28:94:d1:a2:88:e1:8c:c2:1c:22:40: 92:59:72:c5:cc:24:24:ff:ab:75:6d:d8:bd:ce:a9:6e:74:e1: ad:ee:0a:ab:ff:50:bd:8b:25:c9:da:10:a9:77:9d:e5:bf:17: f7:69:7b:ee:9d:6d:71:c6:8f:b8:d4:23:84:bb:49:76:7f:51: 9d:a3:73:2f:23:f8:1d:e8:c7:39:d7:00:33:8b:51:b9:b0:92: 97:93:d0:1d:f5:89:f7:1c:b5:fc:0c:a6:e3:18:da:e4:95:49: 15:e4:e3:7e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeSKJoqL2fqawaAb5vdN4bODy5F4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNDEzMjQxNFoX DTI2MTEyMzEzMjkxNFowMzExMC8GA1UEAxMoMkFEQ0JGMjkwQTk4Nzc2RTZGNTkz NTMzNTFDODc5QTE1MDJCODg0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRR0QgMXnGJfJzdpyf4xWmFh6PPjpcTqcOtcvALPtyidGFmOV3FTvt1lddR bNw1legdRRVhv2to7gLZ1GFa1m1BwZhtvshy4VltXucOgDP1oPN2bYNX3o0UpavU 4CV+z9hQGltHJGa4XhgtHLljZdWM1PPlQqzNH9Vmez/ZIgGTF+lYqPqqAiUOZ1NL GG2z/JOc3M/i7cui/ZttmfnffVi945x1mU2/7y0zBxgrAnmnJCiUWjMc3TdS9HPC BiwD8LtnBe9AQoM6kAGA/ECADdR8SB45ADF1tnZMny62iNd8FryHYwD0H8v53tvW U9P4brdvIyHPPgAtEsuu+8mKx3cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCrcvykKmHdub1k1M1HIeaFQK4hKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOGRlOTQ2My02OGE3LTQ2MmQtOTQwOC1hN2MzOWNlNmU4ZmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4ZGU5NDYz LTY4YTctNDYyZC05NDA4LWE3YzM5Y2U2ZThmZi8wLzJBRENCRjI5MEE5ODc3NkU2 RjU5MzUzMzUxQzg3OUExNTAyQjg4NEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnNlIwDQYJKoZIhvcNAQELBQADggEBAJT32S8RaNrlDqodJ2PpgcjyX5/FsDpZ MsMlj43SZY3+iAf45HEPTVs4mUBCbnOH4hA+Igu4rhxRW3zQPitYMQXD7fM0NoCE 3cnrwYxgVHwJjuht6+gkiOAhr9VdHCU33+olT72YfDxWB5l4JPFPU2LcXqjVspwo x0zuA7d/IwhU6Jz4aeWDDLknW1OVFXBMSPdmpP46FLsolNGiiOGMwhwiQJJZcsXM JCT/q3Vt2L3OqW504a3uCqv/UL2LJcnaEKl3neW/F/dpe+6dbXHGj7jUI4S7SXZ/ UZ2jcy8j+B3oxznXADOLUbmwkpeT0B31ifcctfwMpuMY2uSVSRXk434= -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:28 2025 by rpki-client