This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.cer (raw, json) Hash identifier: Dk7nIfRugUuzyYz+Dy93L2dG7PsgHGs8NLsLQsT+huo= Subject key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 60B46B5EC9C307326B2510BEF677F3EE9BCA886C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft caRepository: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 07 Jul 2025 11:27:58 +0000 Certificate not after: Mon 06 Jul 2026 11:32:58 +0000 Subordinate resources: IP: 103.158.96.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 02:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b4:6b:5e:c9:c3:07:32:6b:25:10:be:f6:77:f3:ee:9b:ca:88:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 7 11:27:58 2025 GMT Not After : Jul 6 11:32:58 2026 GMT Subject: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:47:22:42:29:6a:34:13:0d:e7:e2:55:ac: ce:0f:d9:f0:95:a2:8c:15:20:ff:5d:57:6e:d0:8e: 6f:10:0e:b5:ec:b2:7e:26:e8:9c:f7:e8:94:b6:fb: 04:6d:b1:97:90:bd:84:c7:48:8b:d7:9c:b5:05:0b: 14:18:e1:7c:40:27:03:92:fb:23:92:53:fe:80:52: b8:b7:4e:58:72:2f:d3:14:e0:2d:98:be:a9:2e:a9: b1:2b:ec:d1:66:1c:40:5a:ec:dc:66:d2:47:b3:9a: 03:56:01:8d:5e:11:51:21:a8:47:d2:e4:8f:e6:f3: 63:0a:30:15:32:64:2c:aa:7e:f0:19:fe:aa:36:10: 47:b9:35:61:2a:65:22:77:01:5c:bf:8a:c1:6c:d1: 34:73:71:ab:74:1e:dc:97:1e:a3:7f:09:fe:e0:62: 11:3a:40:e5:c3:7a:13:3d:f9:bf:a0:5e:a0:53:4b: a4:8c:4a:fa:62:4d:34:00:fe:fe:ef:7e:f4:7d:a3: c1:1d:79:c0:e8:8d:00:2c:df:b6:a8:60:5a:21:b0: 20:93:ad:2a:7b:27:8f:7d:70:f6:fc:82:f8:37:5e: a4:9d:79:f3:d8:08:75:30:50:50:eb:41:3f:45:da: 8a:ed:77:1f:9a:7c:e8:f0:5e:dc:e6:29:a5:36:0a: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.96.0/23 Signature Algorithm: sha256WithRSAEncryption 44:8c:80:38:97:e8:57:42:9e:ed:dc:31:11:72:b1:d4:84:de: f0:72:27:b1:b0:d9:66:53:f3:09:c6:3b:6a:99:e3:02:20:a3: 59:94:d7:b8:d2:94:df:01:33:7c:54:9a:f0:8f:c0:cb:fb:2e: 90:c9:ce:39:dc:92:be:41:63:68:c7:cf:d8:3c:60:50:dd:f1: 02:29:5c:c5:fe:aa:96:c7:3d:c4:df:7b:e9:36:76:f3:4f:1c: a8:cd:e4:17:3c:ac:aa:19:7f:f8:fa:49:cd:ef:97:f2:6a:e9: e3:54:fd:5c:57:a4:a3:d9:0f:01:f4:b9:58:b4:14:7d:04:97: 71:eb:e2:f7:26:4e:df:ae:57:27:38:2c:4f:e3:68:c2:ef:48: b4:64:90:79:d2:1a:3b:39:ae:84:fb:ae:88:e5:bc:8c:8d:dd: d7:9b:df:d4:ef:b0:36:b5:1e:ce:e8:0f:17:f2:ee:87:a2:de: b0:1d:6d:14:6d:ed:40:93:63:71:99:42:26:04:cd:f4:a8:4e: 62:c0:3b:84:60:3c:f3:8f:90:24:59:83:2b:59:44:b6:86:be: 16:82:17:2c:2a:88:49:f9:70:76:6e:43:69:4a:16:3d:d8:b8: f4:eb:0a:5d:8d:b0:90:f9:f1:5b:a6:84:38:fe:e0:9f:77:54: 1a:67:93:f4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYLRrXsnDBzJrJRC+9nfz7pvKiGwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNzExMjc1OFoX DTI2MDcwNjExMzI1OFowMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0Ux NDNERDgzODM3NzhBREVBRTg1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4HRyJCKWo0Ew3n4lWszg/Z8JWijBUg/11XbtCObxAOteyyfibonPfolLb7 BG2xl5C9hMdIi9ectQULFBjhfEAnA5L7I5JT/oBSuLdOWHIv0xTgLZi+qS6psSvs 0WYcQFrs3GbSR7OaA1YBjV4RUSGoR9Lkj+bzYwowFTJkLKp+8Bn+qjYQR7k1YSpl IncBXL+KwWzRNHNxq3Qe3Jceo38J/uBiETpA5cN6Ez35v6BeoFNLpIxK+mJNNAD+ /u9+9H2jwR15wOiNACzftqhgWiGwIJOtKnsnj31w9vyC+DdepJ1589gIdTBQUOtB P0Xaiu13H5p86PBe3OYppTYKdnkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFELNOL95XgCZvT4UPdg4N3it6uhQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMjkyOTEx LWRhN2QtNDYzNi1iMTUzLTAyYTRiNjYyMDViNS8wLzQyQ0QzOEJGNzk1RTAwOTlC RDNFMTQzREQ4MzgzNzc4QURFQUU4NTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnnmAwDQYJKoZIhvcNAQELBQADggEBAESMgDiX6FdCnu3cMRFysdSE3vByJ7Gw 2WZT8wnGO2qZ4wIgo1mU17jSlN8BM3xUmvCPwMv7LpDJzjnckr5BY2jHz9g8YFDd 8QIpXMX+qpbHPcTfe+k2dvNPHKjN5Bc8rKoZf/j6Sc3vl/Jq6eNU/VxXpKPZDwH0 uVi0FH0El3Hr4vcmTt+uVyc4LE/jaMLvSLRkkHnSGjs5roT7rojlvIyN3deb39Tv sDa1Hs7oDxfy7oei3rAdbRRt7UCTY3GZQiYEzfSoTmLAO4RgPPOPkCRZgytZRLaG vhaCFywqiEn5cHZuQ2lKFj3YuPTrCl2NsJD58VumhDj+4J93VBpnk/Q= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:21 2025 by rpki-client