This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer File: 35603F2919BB405970CB4BAB181C2B63764E0771.cer (raw, json) Hash identifier: vJPfLNooxqMvcsIpCnRhfR0IdQ6ophfc9qKgVn7EAaI= Subject key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 77FFB4811AAA18CE887D90AFBD9D302A067F4A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 04 Apr 2025 08:58:19 +0000 Certificate not after: Fri 03 Apr 2026 09:03:19 +0000 Subordinate resources: IP: 103.67.84.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ff:b4:81:1a:aa:18:ce:88:7d:90:af:bd:9d:30:2a:06:7f:4a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 4 08:58:19 2025 GMT Not After : Apr 3 09:03:19 2026 GMT Subject: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:79:f4:ab:6e:29:be:32:70:84:86:a8:46: e9:dd:66:14:c7:25:b7:f6:5d:c7:28:25:8e:0f:41: f5:b9:67:01:36:98:02:c0:f9:d2:49:2b:3b:1e:14: 6b:60:57:d9:48:76:e5:fb:98:f7:1e:1f:33:9f:4a: cc:29:a2:8f:f4:80:11:f3:29:de:24:d5:e5:83:46: 2f:9b:ab:42:5f:07:a3:e1:96:dd:ea:01:70:14:f1: 19:81:19:ca:fd:6d:96:2c:cf:3a:28:4e:08:a0:ef: 4b:bc:ad:c3:a8:e2:a3:c2:9a:f4:a3:cd:c0:05:b1: f4:bd:04:54:2e:d9:f3:17:ca:ce:f4:e4:fb:9b:73: d3:b5:6d:73:f0:d0:da:6c:88:5b:81:1a:89:31:f1: db:ca:12:7b:d5:a8:23:07:3a:df:ab:5e:ff:14:8b: 3f:61:85:f4:e0:95:25:ce:84:cf:7e:0c:25:06:ce: 5a:e7:31:63:13:92:66:b4:bd:f7:0c:1a:6a:fe:98: 0b:48:12:e7:b3:4d:06:a3:90:8e:0c:5b:bc:76:25: 2b:a5:b0:62:5c:c6:5f:bd:1c:0c:9a:9f:c7:d5:d5: cd:c5:83:8a:e0:62:15:04:a3:e0:bb:74:36:81:eb: bb:36:48:9f:90:95:c7:22:f6:b8:0a:c9:48:e9:ee: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.84.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:f2:99:79:12:16:12:1a:a1:44:aa:31:f4:38:be:f0:b3:f1: 47:d3:bd:10:48:06:f7:01:e1:fc:4d:90:76:83:36:e1:44:c8: 20:87:25:ca:07:93:14:d1:f2:1f:ef:dc:e6:46:bf:42:13:e4: fc:3e:bd:a5:5e:b2:ff:5b:2a:76:d4:c0:f2:9b:a3:62:0c:9a: f6:e8:bf:59:0f:c4:fd:7f:d4:09:be:17:98:9e:c3:cb:d2:76: 44:76:46:2e:a0:8d:a5:ea:94:ca:74:04:0b:0a:f4:78:20:80: 76:5c:aa:6c:08:5b:64:45:39:35:5c:4d:9b:b6:d1:4d:5e:97: ca:cb:3a:be:17:08:1c:d6:d9:5e:8b:2d:37:eb:57:75:a2:c8: e1:0d:09:47:d4:ee:f3:f5:2f:70:49:9c:eb:5f:b0:7f:d8:4f: 15:ac:92:71:c0:b3:58:93:0a:1d:14:c6:1e:8f:a5:3e:7e:1a: 81:cf:3b:20:c5:22:3f:7d:6c:36:38:96:98:8a:85:82:b5:2b: 42:1d:1b:40:ff:41:0e:19:24:9e:9d:bb:82:fb:b4:3b:f3:18: d3:39:75:52:46:6b:e9:cb:9d:5a:d3:88:20:7b:e1:f3:12:6b: d4:3d:f9:a4:b8:67:43:1b:2a:d6:ae:93:ac:06:e9:72:45:9b: d4:aa:d5:2d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUd/+0gRqqGM6IfZCvvZ0wKgZ/SoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwNDA4NTgxOVoX DTI2MDQwMzA5MDMxOVowMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0 QkFCMTgxQzJCNjM3NjRFMDc3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGKefSrbim+MnCEhqhG6d1mFMclt/Zdxygljg9B9blnATaYAsD50kkrOx4U a2BX2Uh25fuY9x4fM59KzCmij/SAEfMp3iTV5YNGL5urQl8Ho+GW3eoBcBTxGYEZ yv1tlizPOihOCKDvS7ytw6jio8Ka9KPNwAWx9L0EVC7Z8xfKzvTk+5tz07Vtc/DQ 2myIW4EaiTHx28oSe9WoIwc636te/xSLP2GF9OCVJc6Ez34MJQbOWucxYxOSZrS9 9wwaav6YC0gS57NNBqOQjgxbvHYlK6WwYlzGX70cDJqfx9XVzcWDiuBiFQSj4Lt0 NoHruzZIn5CVxyL2uArJSOnuMD8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDVgPykZu0BZcMtLqxgcK2N2TgdxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xYWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFhZDM5NDUw LTQ1ODQtNDg4Mi1iNWE3LTJjYmMwZTU3NzQ3NC8wLzM1NjAzRjI5MTlCQjQwNTk3 MENCNEJBQjE4MUMyQjYzNzY0RTA3NzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnQ1QwDQYJKoZIhvcNAQELBQADggEBAA/ymXkSFhIaoUSqMfQ4vvCz8UfTvRBI BvcB4fxNkHaDNuFEyCCHJcoHkxTR8h/v3OZGv0IT5Pw+vaVesv9bKnbUwPKbo2IM mvbov1kPxP1/1Am+F5iew8vSdkR2Ri6gjaXqlMp0BAsK9HgggHZcqmwIW2RFOTVc TZu20U1el8rLOr4XCBzW2V6LLTfrV3WiyOENCUfU7vP1L3BJnOtfsH/YTxWsknHA s1iTCh0Uxh6PpT5+GoHPOyDFIj99bDY4lpiKhYK1K0IdG0D/QQ4ZJJ6du4L7tDvz GNM5dVJGa+nLnVrTiCB74fMSa9Q9+aS4Z0MbKtauk6wG6XJFm9Sq1S0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:16 2025 by rpki-client