This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer File: 39E28911B503E25DB463229AC922CAEF5693A5DD.cer (raw, json) Hash identifier: asfqMF2jZ36pIG3l59GB2HiYFumev6X6YmG24AJTDYE= Subject key identifier: 39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BE11942E44607DE5E58627355360BEBC7E3E737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft caRepository: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 05:19:40 +0000 Certificate not after: Tue 26 Jan 2027 05:24:40 +0000 Subordinate resources: IP: 163.61.6.0/23 IP: 2001:df4:ff40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e1:19:42:e4:46:07:de:5e:58:62:73:55:36:0b:eb:c7:e3:e7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 27 05:19:40 2026 GMT Not After : Jan 26 05:24:40 2027 GMT Subject: CN=39E28911B503E25DB463229AC922CAEF5693A5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:94:55:e2:01:f0:3a:e4:21:3a:bc:09:82: 34:2b:a7:f7:db:05:2a:19:d6:dc:d8:14:0d:a6:e3: d7:03:67:f3:8c:87:12:b3:01:06:7f:af:c9:ca:cb: 17:60:84:a7:d6:51:3f:d3:95:d0:e2:3a:16:a1:93: 11:67:d1:bf:ab:d4:31:5e:a2:80:25:32:97:52:c1: b2:27:77:ef:bb:0a:b4:49:66:60:03:bb:ee:53:3e: 49:6d:e3:72:8c:cb:5e:24:c9:17:36:d1:af:fe:ea: 42:e3:9d:21:17:ed:07:06:ba:7b:31:eb:08:22:3e: 56:17:0d:f5:47:c3:40:c5:f1:b9:c2:1b:51:ab:1a: 66:ef:39:e4:72:68:d2:74:25:db:6d:c5:1c:44:86: 99:b3:d0:6a:a1:6a:5c:17:df:98:8d:e2:8a:48:8e: 0c:0a:88:87:70:a8:fe:59:2d:ee:ab:6f:5f:41:97: c1:e0:bc:0c:7c:30:62:8e:19:be:bc:2c:89:cb:14: 34:1a:7c:dc:bd:8a:38:66:cc:41:d3:22:05:33:2c: 7d:74:41:58:94:b0:6d:fc:48:bb:b7:54:c7:bb:83: db:c6:c4:3f:48:44:82:f6:d5:6f:6b:f5:4f:dc:d7: f7:92:21:97:a9:41:f7:c8:91:9a:ec:c3:68:06:fc: d9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.6.0/23 IPv6: 2001:df4:ff40::/48 Signature Algorithm: sha256WithRSAEncryption 78:8b:fb:dd:94:d6:0a:a5:06:dd:ac:94:7d:f5:62:a4:58:8d: 52:42:c1:dd:ee:3c:01:09:73:72:d6:c1:9f:ca:8a:b6:0d:41: 0a:8c:ca:d4:a7:2d:5a:e8:b6:c1:c3:98:47:d1:86:16:50:fe: 12:63:fe:51:bd:31:cd:1b:98:13:e2:b6:1e:0a:ae:74:5d:66: cb:c0:d7:d4:50:ad:bd:24:86:15:7d:1d:04:4a:f0:5e:bb:84: fb:1d:fd:9e:9c:d7:e3:7d:de:b0:92:5b:ec:2c:d4:a0:92:15: 5f:3d:11:97:e8:de:e5:31:ea:2a:82:a9:dc:b5:01:b8:1f:0a: dc:45:7d:0c:aa:0e:70:42:ff:9a:4f:30:a2:10:30:d7:c2:c9: a0:49:f0:49:f7:8a:b5:19:8e:93:10:4d:30:cb:36:23:f9:74: 8a:5e:2c:33:8d:9d:6b:c4:0f:78:a5:0d:fb:e8:f2:fc:d3:6b: 0a:43:4c:03:97:24:39:d3:e1:b1:30:7d:03:f5:75:37:e4:19: a8:0a:1d:85:ab:9f:a5:c7:9c:4f:dd:cd:bd:a7:04:17:b4:0d: 17:98:6b:61:c0:32:fd:c4:84:9b:f3:31:31:30:bb:4d:7d:b7: cb:2c:17:94:1b:da:a8:db:cb:52:06:a9:0d:f1:e7:a9:9b:1d: 3f:4a:16:91 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUG+EZQuRGB95eWGJzVTYL68fj5zcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyNzA1MTk0MFoX DTI3MDEyNjA1MjQ0MFowMzExMC8GA1UEAxMoMzlFMjg5MTFCNTAzRTI1REI0NjMy MjlBQzkyMkNBRUY1NjkzQTVERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnBlFXiAfA65CE6vAmCNCun99sFKhnW3NgUDabj1wNn84yHErMBBn+vycrL F2CEp9ZRP9OV0OI6FqGTEWfRv6vUMV6igCUyl1LBsid377sKtElmYAO77lM+SW3j cozLXiTJFzbRr/7qQuOdIRftBwa6ezHrCCI+VhcN9UfDQMXxucIbUasaZu855HJo 0nQl223FHESGmbPQaqFqXBffmI3iikiODAqIh3Co/lkt7qtvX0GXweC8DHwwYo4Z vrwsicsUNBp83L2KOGbMQdMiBTMsfXRBWJSwbfxIu7dUx7uD28bEP0hEgvbVb2v1 T9zX95Ihl6lB98iRmuzDaAb82ZsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDniiRG1A+JdtGMimskiyu9Wk6XdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wOTYzMjNkYy1hYjI2LTQ5ZGQtOGIyYy0zMDZlNTBlZTIzYTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA5NjMyM2Rj LWFiMjYtNDlkZC04YjJjLTMwNmU1MGVlMjNhMy8wLzM5RTI4OTExQjUwM0UyNURC NDYzMjI5QUM5MjJDQUVGNTY5M0E1REQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAGjPQYwDwQCAAIwCQMHACABDfT/QDANBgkqhkiG9w0BAQsFAAOCAQEAeIv73ZTW CqUG3ayUffVipFiNUkLB3e48AQlzctbBn8qKtg1BCozK1KctWui2wcOYR9GGFlD+ EmP+Ub0xzRuYE+K2HgqudF1my8DX1FCtvSSGFX0dBErwXruE+x39npzX433esJJb 7CzUoJIVXz0Rl+je5THqKoKp3LUBuB8K3EV9DKoOcEL/mk8wohAw18LJoEnwSfeK tRmOkxBNMMs2I/l0il4sM42da8QPeKUN++jy/NNrCkNMA5ckOdPhsTB9A/V1N+QZ qAodhaufpcecT93NvacEF7QNF5hrYcAy/cSEm/MxMTC7TX23yywXlBvaqNvLUgap DfHnqZsdP0oWkQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:52 2026 by rpki-client