This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer File: 3BB7346C991B689223BADC6F82DD19BE3B017704.cer (raw, json) Hash identifier: grwsWDVQWWz4mYWxL+TNdDw4NFz8YBh2FLdJCsOsI2Q= Subject key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66045E60E0E9D8DF7AB1BA5ED708A12011D5131C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft caRepository: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 28 Dec 2025 19:38:41 +0000 Certificate not after: Sun 27 Dec 2026 19:43:41 +0000 Subordinate resources: IP: 103.207.96.0/22 IP: 2404:2c80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:04:5e:60:e0:e9:d8:df:7a:b1:ba:5e:d7:08:a1:20:11:d5:13:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 28 19:38:41 2025 GMT Not After : Dec 27 19:43:41 2026 GMT Subject: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:56:59:b0:e3:e6:b0:cd:ce:e6:ae:12:aa: 77:70:4f:3a:c2:c4:18:41:56:cf:99:87:df:5b:f9: 1f:a1:fd:65:0e:7f:b7:bc:43:1d:b0:d3:d1:13:02: 0c:9c:09:38:eb:12:3b:09:bb:62:99:42:36:1b:53: f0:a8:cf:b1:d2:f4:2c:7f:2a:70:d7:0a:67:de:ae: c8:0c:48:58:1f:f9:13:99:70:0b:7b:7e:27:73:f0: cd:3b:f9:29:58:f3:b0:88:b3:1d:9c:cc:81:48:db: 99:8d:4d:5e:bc:7e:5c:91:54:e1:28:17:0e:dd:22: b1:50:41:53:55:eb:b7:b1:c1:22:6e:17:e0:a1:c3: 47:a8:76:f2:3c:32:61:8e:df:c5:ff:ee:3c:72:69: e8:67:95:6b:e6:17:7c:92:43:64:45:5f:ec:4a:54: ea:76:96:5f:62:68:9f:19:1c:61:e7:c0:0a:db:aa: 78:d6:4c:bc:cf:d6:2e:d4:98:dc:50:ba:52:95:cd: 95:98:87:d4:d7:da:50:09:5c:0b:89:47:17:60:8f: 3a:22:16:a1:2c:39:99:93:53:9e:d6:f2:5b:5b:a7: dd:9c:b5:e6:be:81:2e:58:4c:70:05:17:25:07:ce: 16:54:47:08:2c:67:aa:9c:b2:fe:1b:73:0e:36:a6: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.207.96.0/22 IPv6: 2404:2c80::/32 Signature Algorithm: sha256WithRSAEncryption 80:1e:f5:73:64:ee:c5:15:d7:b9:9c:1f:8e:6a:d9:47:af:17: ea:32:27:01:15:ef:ec:2b:d0:ac:13:4b:52:c2:4c:46:3e:b9: 10:27:30:95:f8:70:23:2e:7d:8b:a1:76:5f:3e:88:93:90:79: 99:ff:f7:8c:e8:52:59:e1:20:ea:0d:15:96:8a:cd:9c:ff:2c: 8e:f8:45:e6:fb:f0:22:5b:93:83:f4:b5:67:ef:6c:20:62:d8: 49:0b:83:b1:eb:be:f6:3d:2e:a1:03:9f:cd:05:02:87:03:72: 57:ed:12:9e:05:87:97:6b:cc:ec:fb:b6:ee:5b:4e:3f:bd:98: 5b:de:37:1c:e8:aa:d2:94:53:b6:49:3a:2f:fd:3f:d9:2b:60: dc:2c:8a:04:23:e2:d1:9f:9f:1f:2d:a3:32:f3:76:ec:74:b0: ca:e4:da:c1:c9:3e:b8:58:09:2a:e2:f4:dd:3f:3a:8e:00:bd: 79:92:e3:cc:bd:ea:ad:e8:5a:93:2f:a1:fa:9a:fe:6b:b2:4e: 80:a9:a5:e5:72:fa:df:6f:0d:a6:7b:60:de:1c:e0:55:3d:06: d4:73:1f:14:73:1c:51:71:24:63:0d:72:d3:f5:69:52:e4:36: 00:36:86:85:9f:1a:e3:9b:11:84:6b:05:da:55:05:0c:c8:77: b3:00:11:00 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUZgReYODp2N96sbpe1wihIBHVExwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyODE5Mzg0MVoX DTI2MTIyNzE5NDM0MVowMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFE QzZGODJERDE5QkUzQjAxNzcwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANK2Vlmw4+awzc7mrhKqd3BPOsLEGEFWz5mH31v5H6H9ZQ5/t7xDHbDT0RMC DJwJOOsSOwm7YplCNhtT8KjPsdL0LH8qcNcKZ96uyAxIWB/5E5lwC3t+J3PwzTv5 KVjzsIizHZzMgUjbmY1NXrx+XJFU4SgXDt0isVBBU1Xrt7HBIm4X4KHDR6h28jwy YY7fxf/uPHJp6GeVa+YXfJJDZEVf7EpU6naWX2JonxkcYefACtuqeNZMvM/WLtSY 3FC6UpXNlZiH1NfaUAlcC4lHF2CPOiIWoSw5mZNTntbyW1un3Zy15r6BLlhMcAUX JQfOFlRHCCxnqpyy/htzDjamac0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDu3NGyZG2iSI7rcb4LdGb47AXcEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNmU0NTY0 LTQ4ZjItNDNiNS04NTA1LTkzYjQ5OGU3ZDhhYi8wLzNCQjczNDZDOTkxQjY4OTIy M0JBREM2RjgyREQxOUJFM0IwMTc3MDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnz2AwDQQCAAIwBwMFACQELIAwDQYJKoZIhvcNAQELBQADggEBAIAe9XNk7sUV 17mcH45q2UevF+oyJwEV7+wr0KwTS1LCTEY+uRAnMJX4cCMufYuhdl8+iJOQeZn/ 94zoUlnhIOoNFZaKzZz/LI74Reb78CJbk4P0tWfvbCBi2EkLg7HrvvY9LqEDn80F AocDclftEp4Fh5drzOz7tu5bTj+9mFveNxzoqtKUU7ZJOi/9P9krYNwsigQj4tGf nx8tozLzdux0sMrk2sHJPrhYCSri9N0/Oo4AvXmS48y96q3oWpMvofqa/muyToCp peVy+t9vDaZ7YN4c4FU9BtRzHxRzHFFxJGMNctP1aVLkNgA2hoWfGuObEYRrBdpV BQzId7MAEQA= -----END CERTIFICATE-----Generated at Wed Jan 21 17:54:46 2026 by rpki-client