This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer (raw, json) Hash identifier: Pxhufzedz3CLmSsVEEisW2VAYsJd0dpOVfr4FmpPykI= Subject key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4FF604DC432B78C16C3AAE9D9C0CB05BB15205A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft caRepository: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Dec 2025 11:13:42 +0000 Certificate not after: Tue 01 Dec 2026 11:18:42 +0000 Subordinate resources: IP: 103.162.35.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f6:04:dc:43:2b:78:c1:6c:3a:ae:9d:9c:0c:b0:5b:b1:52:05:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 2 11:13:42 2025 GMT Not After : Dec 1 11:18:42 2026 GMT Subject: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:30:d2:10:ae:f8:82:db:80:3d:9c:2b:33: a9:1f:97:60:1f:c4:35:88:dc:d7:15:e0:e7:a9:50: 39:20:ae:52:2e:35:3f:9a:d0:39:77:27:38:92:a7: cd:2c:2e:d8:8f:c2:70:a2:a6:13:4a:9c:9f:fe:7d: 9e:91:ae:21:de:49:9f:23:19:01:ed:a0:09:94:aa: fc:75:f9:ff:5f:5b:cc:de:2a:f2:01:df:8c:89:8f: 3e:16:27:d0:18:b6:e5:d5:d9:53:07:5b:8c:64:61: ae:37:8a:b1:d2:7c:fc:93:93:01:9e:41:dc:a9:10: 73:bf:c2:a4:f5:20:48:96:09:4f:2e:39:bd:bc:ea: 12:25:98:68:07:10:ab:49:48:af:50:80:cd:a0:84: 32:b9:36:c4:bc:f6:55:95:77:b9:8f:8b:7b:da:d5: bc:d3:a8:25:5e:27:b7:f0:ac:4a:9d:60:92:3f:89: 96:eb:e7:7d:4b:65:65:14:9f:00:d2:16:1c:f3:6b: 8c:3f:0d:d7:1a:39:8f:1e:64:0c:fa:8b:25:8f:19: b0:fb:60:05:14:93:c0:f1:e6:c4:e4:c4:4c:73:36: f0:d1:c6:8d:6d:ea:6e:ca:df:f0:f5:77:35:ec:1b: ec:ce:fe:c7:44:c6:7d:f1:02:c6:04:35:cd:c5:71: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.35.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:74:25:a6:6b:96:dd:68:32:5d:25:6e:92:9b:2b:f4:a4:78: 27:7c:58:19:60:38:0a:a5:a2:24:a3:d0:65:7e:c1:ed:c1:38: c9:1e:0c:20:d7:79:bb:c5:96:ab:df:9e:a5:2e:fa:32:57:ce: e2:93:82:37:18:7f:72:49:2a:22:88:ad:51:1b:7c:ed:f8:f7: 9f:b7:9d:91:9f:da:b5:cb:91:e0:7c:a3:3c:53:f0:a4:e3:70: 33:65:c3:d2:05:db:e2:6d:ad:4c:1a:13:41:7a:66:ce:1f:4c: a5:61:b2:79:87:18:c3:70:f2:ab:b6:55:b4:8b:d9:9c:d2:00: e8:19:0c:9b:b6:90:1c:a0:05:b6:43:ad:ae:cf:1a:e5:da:b5: c3:9a:70:4d:e1:fe:05:1c:4d:7e:1b:07:2e:d3:1f:8e:86:0b: b3:ae:34:54:1b:6d:8c:65:92:79:05:a8:e9:12:bb:42:9c:99: 52:96:0f:96:da:72:dc:28:a7:fa:94:2a:ac:e9:57:c5:6e:c3: 34:51:5d:b6:41:0d:35:1c:09:0e:55:25:ae:6c:0c:c7:3d:3b: c4:ea:3e:63:26:df:6e:22:64:47:96:09:f4:f3:04:7a:e1:a2: 16:ce:9e:fa:68:c0:6d:dd:8e:48:2d:22:ee:d3:d3:d7:fa:a8: 46:40:a8:f1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUT/YE3EMreMFsOq6dnAywW7FSBaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMjExMTM0MloX DTI2MTIwMTExMTg0MlowMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYz QkYwOUVBNzY2QURFRjEzMjlCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMElMNIQrviC24A9nCszqR+XYB/ENYjc1xXg56lQOSCuUi41P5rQOXcnOJKn zSwu2I/CcKKmE0qcn/59npGuId5JnyMZAe2gCZSq/HX5/19bzN4q8gHfjImPPhYn 0Bi25dXZUwdbjGRhrjeKsdJ8/JOTAZ5B3KkQc7/CpPUgSJYJTy45vbzqEiWYaAcQ q0lIr1CAzaCEMrk2xLz2VZV3uY+Le9rVvNOoJV4nt/CsSp1gkj+JluvnfUtlZRSf ANIWHPNrjD8N1xo5jx5kDPqLJY8ZsPtgBRSTwPHmxOTETHM28NHGjW3qbsrf8PV3 Newb7M7+x0TGffECxgQ1zcVx/tkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDGU39ZkVzWa97878J6nZq3vEym1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yM2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzYmEwMjRi LTg3ZjItNGVkZC04OWZmLWE0ZmNhNzAwOGMzNi8wLzMxOTRERkQ2NjQ1NzM1OUFG N0JGM0JGMDlFQTc2NkFERUYxMzI5QjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnoiMwDQYJKoZIhvcNAQELBQADggEBAJp0JaZrlt1oMl0lbpKbK/SkeCd8WBlg OAqloiSj0GV+we3BOMkeDCDXebvFlqvfnqUu+jJXzuKTgjcYf3JJKiKIrVEbfO34 95+3nZGf2rXLkeB8ozxT8KTjcDNlw9IF2+JtrUwaE0F6Zs4fTKVhsnmHGMNw8qu2 VbSL2ZzSAOgZDJu2kBygBbZDra7PGuXatcOacE3h/gUcTX4bBy7TH46GC7OuNFQb bYxlknkFqOkSu0KcmVKWD5bactwop/qUKqzpV8VuwzRRXbZBDTUcCQ5VJa5sDMc9 O8TqPmMm324iZEeWCfTzBHrhohbOnvpowG3djkgtIu7T09f6qEZAqPE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:02 2025 by rpki-client