This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer (raw, json) Hash identifier: G+nwOBRbfwyCuyXelotsLgPT51AzX9E0uXl5cE60vqc= Subject key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 75D41CB6F7F55660407D8AD6212488E47C33D081 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft caRepository: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 01 Feb 2026 00:26:42 +0000 Certificate not after: Sun 31 Jan 2027 00:31:42 +0000 Subordinate resources: IP: 103.210.221.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d4:1c:b6:f7:f5:56:60:40:7d:8a:d6:21:24:88:e4:7c:33:d0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 1 00:26:42 2026 GMT Not After : Jan 31 00:31:42 2027 GMT Subject: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:aa:b9:b9:95:8b:fd:7c:88:f7:04:d4:1e: 86:f6:9a:98:04:57:76:92:a6:74:de:ce:d0:78:64: 1c:e4:6a:5a:1d:49:52:4f:71:e0:fb:16:c7:14:3e: 66:6b:a7:46:45:d5:51:b7:ba:ad:45:65:5d:bc:c2: 39:4e:78:57:64:e2:57:ab:2e:bf:6a:bb:d2:03:b2: eb:a5:d4:5a:9f:f7:26:64:42:b1:36:e0:8d:d3:33: b3:f7:ef:5c:22:6f:3b:06:be:0c:92:62:df:35:65: 28:74:62:0d:d2:85:40:ee:e2:84:6e:3c:92:fb:6e: 26:40:8c:85:bb:ec:f7:ca:7f:e8:56:a8:1d:be:a9: 40:35:2f:53:84:77:2c:f6:a9:d6:b7:70:ff:c9:b3: cb:91:f8:94:a9:c8:a8:47:0b:89:eb:d6:57:4f:70: a0:66:df:fd:5c:51:05:8e:30:de:d5:db:1e:23:b1: 26:a5:93:2e:9b:d3:10:c2:43:7f:13:7e:51:1c:8b: 03:01:61:a0:1f:f9:83:1e:82:80:2e:c0:12:f4:63: 57:09:e0:8b:6e:f6:33:e8:be:c8:e7:52:5d:6e:2d: 3e:d2:2e:57:70:e4:ad:68:c8:34:b7:c4:bc:4b:61: a9:9e:54:65:99:20:bd:d8:cc:b4:b9:54:9f:87:ff: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.221.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:93:fb:64:d0:86:37:cc:b3:43:b4:53:40:db:0a:40:4d:52: 45:b8:92:be:51:e4:19:e1:da:d9:bc:a1:56:68:cb:76:3e:fa: 08:9a:09:70:ed:07:d0:de:8b:2e:b0:3c:e4:f0:62:3a:29:8d: f5:70:95:9d:83:32:08:7b:fe:80:64:4b:7b:59:04:b9:1d:63: 87:68:1a:b1:66:e0:f4:0c:44:bc:34:ed:c8:96:19:17:2b:d3: 83:18:2d:11:9e:1e:6a:02:46:bb:bf:94:eb:91:9d:ee:ff:9f: ab:ca:bf:ad:e0:95:10:ac:dc:72:cc:b9:7f:39:08:1b:de:22: eb:e6:d4:c6:6e:b3:18:66:f4:a4:b3:7d:10:04:79:d1:bb:55: f4:00:de:aa:fb:85:5c:e8:f6:10:00:0a:59:d8:a1:5f:8f:09: 93:79:7c:52:5f:ca:1e:23:26:b5:2d:60:60:fb:fc:7e:75:28: cf:92:b9:0e:ad:8c:f8:23:fd:95:04:16:04:cb:fd:c0:a8:fd: e5:ed:3a:6a:13:85:ad:b3:38:a2:23:99:bd:57:82:32:bf:14: 9c:18:7c:a2:fb:03:f0:3c:3f:81:64:f1:e9:f7:c5:0f:46:6d: 21:f7:8c:ec:33:6a:4f:25:4f:71:d8:b7:51:78:ae:4f:aa:2e: 3a:7d:13:fa -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUddQctvf1VmBAfYrWISSI5Hwz0IEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwMTAwMjY0MloX DTI3MDEzMTAwMzE0MlowMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJD ODM3QTExNzRFRDM0NzIxREI0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3qqrm5lYv9fIj3BNQehvaamARXdpKmdN7O0HhkHORqWh1JUk9x4PsWxxQ+ ZmunRkXVUbe6rUVlXbzCOU54V2TiV6suv2q70gOy66XUWp/3JmRCsTbgjdMzs/fv XCJvOwa+DJJi3zVlKHRiDdKFQO7ihG48kvtuJkCMhbvs98p/6FaoHb6pQDUvU4R3 LPap1rdw/8mzy5H4lKnIqEcLievWV09woGbf/VxRBY4w3tXbHiOxJqWTLpvTEMJD fxN+URyLAwFhoB/5gx6CgC7AEvRjVwngi272M+i+yOdSXW4tPtIuV3DkrWjINLfE vEthqZ5UZZkgvdjMtLlUn4f/sx0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDoJzzLsT21cT9LIN6EXTtNHIdtHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5ZWUyMDlh LTExOTMtNGQ2Zi05ZGJlLTg3NzdiYjg5ODBhYS8wLzNBMDlDRjMyRUM0RjZENUM0 RkQyQzgzN0ExMTc0RUQzNDcyMURCNDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn0t0wDQYJKoZIhvcNAQELBQADggEBAHqT+2TQhjfMs0O0U0DbCkBNUkW4kr5R 5Bnh2tm8oVZoy3Y++giaCXDtB9Deiy6wPOTwYjopjfVwlZ2DMgh7/oBkS3tZBLkd Y4doGrFm4PQMRLw07ciWGRcr04MYLRGeHmoCRru/lOuRne7/n6vKv63glRCs3HLM uX85CBveIuvm1MZusxhm9KSzfRAEedG7VfQA3qr7hVzo9hAAClnYoV+PCZN5fFJf yh4jJrUtYGD7/H51KM+SuQ6tjPgj/ZUEFgTL/cCo/eXtOmoTha2zOKIjmb1XgjK/ FJwYfKL7A/A8P4Fk8en3xQ9GbSH3jOwzak8lT3HYt1F4rk+qLjp9E/o= -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:56 2026 by rpki-client