This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer File: 35AF7B054A8CC95835EC5A2F9275004D39521553.cer (raw, json) Hash identifier: BvE9vRwxqt7RdHJDdfz49ZxINnM8kGKEdKdJOMHpUd4= Subject key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 285EAD8359B50C7C994DB39CC629FC5ADB906509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft caRepository: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 02 Feb 2025 05:29:58 +0000 Certificate not after: Sun 01 Feb 2026 05:34:58 +0000 Subordinate resources: IP: 103.173.164.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5e:ad:83:59:b5:0c:7c:99:4d:b3:9c:c6:29:fc:5a:db:90:65:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 2 05:29:58 2025 GMT Not After : Feb 1 05:34:58 2026 GMT Subject: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:c6:45:aa:ef:ff:72:39:a5:37:fb:b1:77: f1:38:27:67:bc:8b:50:21:da:5a:97:77:d2:a2:72: 3e:ae:c8:27:dd:28:1a:35:11:41:ce:f7:bf:b7:04: b0:94:b5:ed:eb:cb:d2:73:04:c8:a6:1a:38:de:bd: 8d:28:cd:48:8a:e6:64:93:5a:20:d3:9e:14:f1:74: 22:a9:35:4e:e6:6c:e1:c2:47:3f:02:a2:05:2e:f5: 4a:aa:0d:14:ea:a3:4b:8e:55:e7:19:27:d2:18:6e: 28:f2:18:91:2f:fa:7e:ba:58:df:9c:22:91:18:73: 1f:0b:cb:2e:a7:10:5a:5a:3f:7e:73:35:2b:fa:8f: f1:5c:9e:ad:17:57:74:b4:88:45:07:00:72:4a:5d: ea:c7:70:58:17:81:2d:8a:bb:72:c6:f9:b9:d5:53: b3:d1:47:15:ca:9a:9c:39:df:67:af:4a:8e:2d:bb: 73:f5:51:60:41:6a:d7:93:c8:8f:b3:8e:83:e3:3e: ad:89:7a:38:36:5b:8d:c6:00:ca:e3:c2:7a:07:2d: 4f:fd:2b:74:46:9e:90:3a:ae:09:d1:12:a0:8d:a4: 7d:5d:d4:52:aa:a2:a5:f3:96:29:e7:3f:82:1a:5c: 62:29:47:c8:a7:9e:29:98:f3:ad:19:5c:fd:c8:8e: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.164.0/23 Signature Algorithm: sha256WithRSAEncryption 92:e4:81:2e:67:d3:94:ea:6d:c1:44:87:25:21:3e:bc:b2:f6: 78:d7:19:e3:52:7c:5f:d6:08:23:1f:1c:38:35:ec:77:3c:70: ca:f6:d5:f7:ea:dc:b7:bb:3d:74:73:a9:d7:59:48:9e:ac:ea: a3:0d:27:90:ec:13:8e:ac:0b:e2:88:2e:e6:e7:10:d0:e1:5a: 2d:ef:f8:85:b5:76:4e:e5:b1:2d:75:51:61:61:52:2a:0f:93: bf:6c:79:28:92:1a:26:fa:ba:ed:e4:d5:53:34:d9:ac:20:10: ab:62:02:e7:46:1c:36:85:1c:d3:66:b8:cd:6d:24:21:e2:fd: 40:29:09:3c:34:b8:26:75:e9:86:75:cf:9d:e8:49:e3:f7:58: 91:ed:a1:0e:91:bf:d3:c9:b8:a1:02:70:8a:f6:54:a4:56:bf: 55:80:b9:09:08:57:2e:c4:f8:87:9f:43:1e:c1:7d:d7:ac:6a: 81:8f:da:f1:22:4f:17:91:61:6f:57:dd:3e:10:23:6d:c3:b3: f6:5a:55:a5:87:f0:c0:80:d4:c3:d1:0a:c5:87:1b:c0:28:e8: ce:c6:5d:d9:32:62:fd:04:3e:52:24:e0:cf:26:d6:42:6c:d6: 7f:76:88:89:15:dc:de:38:13:c9:35:4d:16:0d:20:29:86:13: 87:40:3e:56 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKF6tg1m1DHyZTbOcxin8WtuQZQkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwMjA1Mjk1OFoX DTI2MDIwMTA1MzQ1OFowMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1 QTJGOTI3NTAwNEQzOTUyMTU1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhDxkWq7/9yOaU3+7F38TgnZ7yLUCHaWpd30qJyPq7IJ90oGjURQc73v7cE sJS17evL0nMEyKYaON69jSjNSIrmZJNaINOeFPF0Iqk1TuZs4cJHPwKiBS71SqoN FOqjS45V5xkn0hhuKPIYkS/6frpY35wikRhzHwvLLqcQWlo/fnM1K/qP8VyerRdX dLSIRQcAckpd6sdwWBeBLYq7csb5udVTs9FHFcqanDnfZ69Kji27c/VRYEFq15PI j7OOg+M+rYl6ODZbjcYAyuPCegctT/0rdEaekDquCdESoI2kfV3UUqqipfOWKec/ ghpcYilHyKeeKZjzrRlc/ciOhn8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDWvewVKjMlYNexaL5J1AE05UhVTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNDZhOWNh LTEwOTYtNGZlNC04OTkzLWQwYmU5N2I1NGE3Ni8wLzM1QUY3QjA1NEE4Q0M5NTgz NUVDNUEyRjkyNzUwMDREMzk1MjE1NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnraQwDQYJKoZIhvcNAQELBQADggEBAJLkgS5n05TqbcFEhyUhPryy9njXGeNS fF/WCCMfHDg17Hc8cMr21ffq3Le7PXRzqddZSJ6s6qMNJ5DsE46sC+KILubnENDh Wi3v+IW1dk7lsS11UWFhUioPk79seSiSGib6uu3k1VM02awgEKtiAudGHDaFHNNm uM1tJCHi/UApCTw0uCZ16YZ1z53oSeP3WJHtoQ6Rv9PJuKECcIr2VKRWv1WAuQkI Vy7E+IefQx7BfdesaoGP2vEiTxeRYW9X3T4QI23Ds/ZaVaWH8MCA1MPRCsWHG8Ao 6M7GXdkyYv0EPlIk4M8m1kJs1n92iIkV3N44E8k1TRYNICmGE4dAPlY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:01 2025 by rpki-client