This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.cer (raw, json) Hash identifier: 2yeUqciVaPazuZVEtp/OnFqh23JWd1esT0FjyLCrxQk= Subject key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 69384C5F15F3AF18FD248D47E782D90655B782A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft caRepository: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Dec 2025 08:08:18 +0000 Certificate not after: Tue 01 Dec 2026 08:13:18 +0000 Subordinate resources: IP: 103.81.252.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:38:4c:5f:15:f3:af:18:fd:24:8d:47:e7:82:d9:06:55:b7:82:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 2 08:08:18 2025 GMT Not After : Dec 1 08:13:18 2026 GMT Subject: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:3e:fa:ed:da:ca:82:4f:bc:7a:b6:81:f5: 75:aa:bc:71:16:98:38:bf:ad:93:c5:15:d7:3b:b9: d1:b8:7a:15:1e:dd:52:05:d3:23:10:61:84:f3:87: f0:d9:0c:a2:b3:fa:d7:f6:e1:70:3c:1f:85:fb:36: 57:d5:2b:af:ff:c4:55:38:e3:6a:ff:df:cf:ab:28: 67:70:98:46:3c:b9:9c:13:d7:1f:e7:30:be:e9:8b: 08:a7:ab:ff:9d:d6:e3:d6:64:ac:06:9b:c1:16:35: e2:0f:e0:8c:5e:57:ce:4e:ab:34:c1:56:f4:6e:a4: 69:07:23:8d:29:d1:2c:fc:ec:b8:b4:3c:5b:e3:9b: ae:10:4b:ad:a8:b0:f7:04:7f:46:be:0a:52:87:7c: c6:d5:ae:c4:86:dd:a7:8a:ab:b5:d3:fc:4d:ab:bd: 33:cc:dd:1b:a0:c3:e1:ce:af:34:45:83:b6:f0:a3: 20:ec:a1:ab:d6:a8:10:1c:db:a2:33:1d:e0:55:a3: 87:ea:06:62:1f:d9:a2:e2:0a:3e:05:ea:6b:3d:28: 15:f6:f0:4a:3b:5c:1b:3d:e1:de:c1:02:e1:1e:ed: 8c:63:84:8d:8f:61:5b:c2:13:41:de:98:c2:99:f0: 3b:f1:bf:f0:86:5a:85:6b:59:a0:d2:f8:ba:0f:29: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.252.0/23 Signature Algorithm: sha256WithRSAEncryption 17:32:61:2e:76:23:3a:c1:16:3c:82:a9:e5:c1:3a:d5:f8:23: ad:74:23:e9:83:a9:ea:7d:a4:f7:e8:da:89:9e:5d:ff:93:b4: 8a:48:e1:95:d6:67:36:52:ae:3f:19:81:34:c4:dc:f9:52:14: e9:1d:40:6f:51:94:d5:52:c8:4c:61:d4:ed:8a:8b:50:4e:23: 9d:a9:45:67:73:37:b8:bf:6f:8b:19:f0:b6:b3:7f:53:68:55: 01:3e:87:d4:b0:f2:31:28:20:1f:7a:db:18:3e:04:82:29:bd: cd:0e:c1:8a:76:60:a6:88:5c:e2:09:9b:d3:57:f2:0f:29:1d: 17:e6:28:79:df:df:00:76:da:c1:38:fa:92:2a:94:66:88:c1: 2b:fb:26:21:8d:98:c8:81:db:5c:69:74:75:37:ca:f8:c4:41: 81:5c:f5:cd:d7:9b:12:06:75:03:2c:a0:e2:fc:15:72:73:e7: f2:bf:c9:cd:09:92:26:a1:73:93:21:11:4f:36:c9:e8:d9:28: a4:17:24:eb:18:2c:fd:28:10:aa:8e:bb:0c:19:82:5c:b8:a7: 5f:c2:a7:b4:61:b1:3a:de:8a:1b:9a:3d:8a:5c:df:4e:c0:f9: dc:70:03:0e:5d:1e:27:59:8f:e0:6b:16:e1:c7:48:27:b9:86: fa:0b:0e:48 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaThMXxXzrxj9JI1H54LZBlW3gqgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMjA4MDgxOFoX DTI2MTIwMTA4MTMxOFowMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1 MDZGRTFFMjE0NzUwMzY0MUVDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqnPvrt2sqCT7x6toH1daq8cRaYOL+tk8UV1zu50bh6FR7dUgXTIxBhhPOH 8NkMorP61/bhcDwfhfs2V9Urr//EVTjjav/fz6soZ3CYRjy5nBPXH+cwvumLCKer /53W49ZkrAabwRY14g/gjF5Xzk6rNMFW9G6kaQcjjSnRLPzsuLQ8W+ObrhBLraiw 9wR/Rr4KUod8xtWuxIbdp4qrtdP8Tau9M8zdG6DD4c6vNEWDtvCjIOyhq9aoEBzb ojMd4FWjh+oGYh/ZouIKPgXqaz0oFfbwSjtcGz3h3sEC4R7tjGOEjY9hW8ITQd6Y wpnwO/G/8IZahWtZoNL4ug8pKOkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDsQKdRLk8oDl9pQb+HiFHUDZB7GMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMGQ0MGJj LTkzYzgtNDE1Yi1iNmE4LWFlZjA4OGQ3ZjRkNC8wLzNCMTAyOUQ0NEI5M0NBMDM5 N0RBNTA2RkUxRTIxNDc1MDM2NDFFQzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnUfwwDQYJKoZIhvcNAQELBQADggEBABcyYS52IzrBFjyCqeXBOtX4I610I+mD qep9pPfo2omeXf+TtIpI4ZXWZzZSrj8ZgTTE3PlSFOkdQG9RlNVSyExh1O2Ki1BO I52pRWdzN7i/b4sZ8Lazf1NoVQE+h9Sw8jEoIB962xg+BIIpvc0OwYp2YKaIXOIJ m9NX8g8pHRfmKHnf3wB22sE4+pIqlGaIwSv7JiGNmMiB21xpdHU3yvjEQYFc9c3X mxIGdQMsoOL8FXJz5/K/yc0Jkiahc5MhEU82yejZKKQXJOsYLP0oEKqOuwwZgly4 p1/Cp7RhsTreihuaPYpc307A+dxwAw5dHidZj+BrFuHHSCe5hvoLDkg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:43 2025 by rpki-client