This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer (raw, json) Hash identifier: sv7Fohjw1yNYzDtwxPrN6FhuTeO0F1DeJS+NnypMCIg= Subject key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0902161E9C2131B47296D996A1842561646AE8BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft caRepository: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 19 Nov 2025 18:10:09 +0000 Certificate not after: Wed 18 Nov 2026 18:15:09 +0000 Subordinate resources: IP: 103.231.120.0 -- 103.231.122.255 IP: 150.129.160.0/22 IP: 202.93.232.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:02:16:1e:9c:21:31:b4:72:96:d9:96:a1:84:25:61:64:6a:e8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 19 18:10:09 2025 GMT Not After : Nov 18 18:15:09 2026 GMT Subject: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:20:ff:bf:e9:20:ec:9a:92:a1:e4:e2:0e: 0e:09:7e:ef:85:de:f5:27:2a:37:eb:01:e3:77:3e: ed:e4:97:9e:68:1a:80:f1:c4:22:68:cf:d2:53:99: 58:f7:f4:98:e0:80:f6:4b:a8:1b:62:fe:8c:c0:12: e9:70:66:0d:90:21:c7:d9:e2:50:f2:7a:ae:6f:08: 4f:3f:52:ff:66:44:78:69:60:3a:13:3f:ef:02:87: 05:64:8f:da:91:df:b9:0e:ed:25:fa:8e:0d:b0:11: 3f:82:b3:34:ad:f5:56:56:b4:fc:c3:f8:aa:35:36: ae:c7:76:05:b8:24:9e:08:ab:db:95:e2:11:2a:66: 16:0e:d5:a5:08:66:64:e9:7b:97:55:8d:d5:00:49: 1e:8e:bc:58:17:c2:b9:d8:68:60:4b:8a:e2:31:55: 9f:18:47:a7:fe:53:0c:22:d7:5d:31:86:08:99:af: 08:0f:0a:75:1a:6d:83:7c:7f:ae:60:91:15:52:e0: f5:42:99:3b:06:94:9b:b2:7d:fe:e1:47:8f:84:dc: 7e:46:2e:99:0b:b2:13:3a:c4:60:b9:64:f7:32:03: a1:0a:81:b0:7e:55:26:3b:f9:a1:23:d1:83:fd:f3: 21:23:11:1a:39:08:9e:0b:19:9e:e0:43:25:3c:93: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.120.0-103.231.122.255 150.129.160.0/22 202.93.232.0/21 Signature Algorithm: sha256WithRSAEncryption 24:36:0e:b3:40:58:5a:57:88:e2:a5:8d:49:3d:2d:cf:6c:e1: 69:8e:56:5b:28:86:ca:02:c2:ed:1f:ab:d4:d2:38:08:87:3a: ba:26:42:c6:8a:fd:70:cc:86:fe:04:3f:dc:a5:02:cb:e3:77: b0:bc:41:54:19:54:a5:04:58:c6:81:31:65:3b:f7:41:45:68: a5:3e:50:f4:bf:03:a1:40:9b:e6:28:aa:68:82:b7:39:34:09: 80:e2:b9:ce:c3:be:4d:d8:23:af:d3:65:e4:65:d1:63:5a:4f: e6:0f:7a:21:92:7b:c7:44:df:d8:d5:f3:94:8e:72:64:11:ec: 39:59:f5:ac:cc:5f:9b:a0:c0:98:76:f0:1c:89:9d:66:85:4f: 69:d0:fe:a7:e6:37:0e:24:7a:96:c2:c4:73:84:2d:90:74:6a: ba:c2:ce:02:35:65:3f:6a:00:fe:a5:bc:16:af:b5:09:71:54: 98:0a:85:a9:03:ba:7b:61:bd:e7:a8:ad:68:8c:73:47:2e:79: 4f:4c:fa:93:51:3d:7f:c3:19:dc:f6:e2:97:21:93:85:89:3f: 1c:c2:6a:cf:93:1b:3c:11:02:3f:a7:5a:fd:fd:ba:7a:9a:c3: 47:a0:1c:d9:50:b6:b6:3d:89:a2:0f:e6:69:a1:c3:32:0d:c9: 07:01:2e:8f -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUCQIWHpwhMbRyltmWoYQlYWRq6L4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExOTE4MTAwOVoX DTI2MTExODE4MTUwOVowMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkx QUUyQjgzRTQ2NjA0MTcxODAzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCfIP+/6SDsmpKh5OIODgl+74Xe9ScqN+sB43c+7eSXnmgagPHEImjP0lOZ WPf0mOCA9kuoG2L+jMAS6XBmDZAhx9niUPJ6rm8ITz9S/2ZEeGlgOhM/7wKHBWSP 2pHfuQ7tJfqODbARP4KzNK31Vla0/MP4qjU2rsd2Bbgkngir25XiESpmFg7VpQhm ZOl7l1WN1QBJHo68WBfCudhoYEuK4jFVnxhHp/5TDCLXXTGGCJmvCA8KdRptg3x/ rmCRFVLg9UKZOwaUm7J9/uFHj4TcfkYumQuyEzrEYLlk9zIDoQqBsH5VJjv5oSPR g/3zISMRGjkIngsZnuBDJTyTZSMCAwEAAaOCAswwggLIMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC3cU/q/L9E80ska4rg+RmBBcYAwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0ZDQxMDAz LTEyYjAtNGU2YS1iMDg1LTU2YmMyZDE5ZGFhOC8wLzJEREM1M0ZBQkYyRkQxM0NE MkM5MUFFMkI4M0U0NjYwNDE3MTgwMzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBow DAMEA2fneAMEAGfnegMEApaBoAMEA8pd6DANBgkqhkiG9w0BAQsFAAOCAQEAJDYO s0BYWleI4qWNST0tz2zhaY5WWyiGygLC7R+r1NI4CIc6uiZCxor9cMyG/gQ/3KUC y+N3sLxBVBlUpQRYxoExZTv3QUVopT5Q9L8DoUCb5iiqaIK3OTQJgOK5zsO+Tdgj r9Nl5GXRY1pP5g96IZJ7x0Tf2NXzlI5yZBHsOVn1rMxfm6DAmHbwHImdZoVPadD+ p+Y3DiR6lsLEc4QtkHRqusLOAjVlP2oA/qW8Fq+1CXFUmAqFqQO6e2G956itaIxz Ry55T0z6k1E9f8MZ3PbilyGThYk/HMJqz5MbPBECP6da/f26eprDR6Ac2VC2tj2J og/maaHDMg3JBwEujw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:21 2025 by rpki-client