This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer (raw, json) Hash identifier: tZgv78z6eihzWbpDMnJLIQLEoQwQfWZbVl3g5FpebRY= Subject key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 330440FDD462CC6F96EFDDC1294926552EF74EF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft caRepository: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 18:19:16 +0000 Certificate not after: Tue 02 Jun 2026 18:24:16 +0000 Subordinate resources: IP: 103.211.49.0/24 IP: 2001:df1:1200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:04:40:fd:d4:62:cc:6f:96:ef:dd:c1:29:49:26:55:2e:f7:4e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 18:19:16 2025 GMT Not After : Jun 2 18:24:16 2026 GMT Subject: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:7f:96:66:5c:81:12:c0:e0:b7:3a:34:03: 28:76:47:f9:8c:9e:e6:5c:33:1d:29:f3:c6:8c:90: 07:79:ee:13:ca:f0:06:1e:a8:59:26:66:24:a0:72: b0:8e:e0:e4:16:47:de:c1:a7:40:1a:0f:5f:6e:a2: a7:6c:51:8b:19:0f:6b:be:c3:85:e0:6c:ac:b6:6a: 71:b7:21:93:fd:f3:47:b4:8b:26:5d:42:46:f8:03: 47:46:c7:31:cf:99:43:d5:b0:f2:a0:7c:30:6a:b7: 2d:aa:1c:ff:2e:14:9d:26:11:f6:ee:56:bc:ab:73: da:a4:ba:c3:c0:38:89:1e:87:2d:24:32:dc:30:85: d2:aa:84:eb:24:8b:f3:ad:aa:56:a1:63:d1:ee:42: 61:ea:c2:ea:f0:f6:96:d0:60:be:af:1a:4c:1c:54: e2:1f:48:f7:56:a2:b5:a9:3f:be:99:f7:1f:00:21: 62:27:33:bd:6c:de:5b:fd:9e:82:a9:4b:16:92:37: 98:0a:7e:b2:f5:e7:51:13:51:cd:f7:d0:30:8c:18: 27:5e:40:a8:fa:0f:5a:5b:d3:57:74:e3:b6:73:9a: 29:18:f0:6c:bd:e9:6b:1b:2e:09:42:16:75:0e:8e: 08:be:46:96:8f:2b:67:54:10:60:56:4a:78:29:2f: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.49.0/24 IPv6: 2001:df1:1200::/48 Signature Algorithm: sha256WithRSAEncryption 05:e7:3d:70:56:a9:38:e8:b8:ad:a3:e7:69:c3:0a:90:c3:d1: de:d7:c1:b9:f8:30:64:cb:24:7b:68:ee:84:20:33:00:65:a1: b5:6c:17:e7:49:e7:a8:0b:a9:dc:e4:e3:41:86:ad:ad:17:f2: 65:ee:45:34:4c:b3:e4:07:de:f5:de:c5:41:3b:d8:19:30:8d: 48:23:bd:df:f2:98:44:3a:c5:3e:cb:2b:51:be:b3:63:63:25: 2a:7e:9e:93:8d:b1:2d:19:d6:c0:d3:13:4d:3e:5c:39:da:58: 26:1c:f4:9c:a7:8e:b0:02:71:d0:59:27:10:0e:39:ed:80:40: 8e:a8:c5:00:f2:05:5f:68:4a:33:25:38:15:df:33:9d:90:0e: a9:92:c0:31:e7:9a:b0:27:57:e5:cc:7a:dc:69:31:33:cc:50: 82:dd:75:73:9f:34:f9:95:ee:b2:94:45:bc:dd:14:e4:86:31: c9:29:12:72:20:0c:a8:a5:50:73:82:af:12:90:4e:f4:a2:d2: 8c:06:87:60:24:02:b4:63:36:32:01:f2:16:0c:41:1d:9f:8b: 27:de:5a:10:cc:2a:a4:ef:4d:15:e2:c2:5d:98:7d:b8:2c:be: 8b:4b:9c:fa:87:99:9c:ea:78:38:de:6f:51:8c:04:a7:c7:e7: 83:0d:4c:d8 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMwRA/dRizG+W793BKUkmVS73TvQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE4MTkxNloX DTI2MDYwMjE4MjQxNlowMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRF NDQzM0Y3QkQ1M0RDRTQyNkU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp8f5ZmXIESwOC3OjQDKHZH+Yye5lwzHSnzxoyQB3nuE8rwBh6oWSZmJKBy sI7g5BZH3sGnQBoPX26ip2xRixkPa77DheBsrLZqcbchk/3zR7SLJl1CRvgDR0bH Mc+ZQ9Ww8qB8MGq3Laoc/y4UnSYR9u5WvKtz2qS6w8A4iR6HLSQy3DCF0qqE6ySL 862qVqFj0e5CYerC6vD2ltBgvq8aTBxU4h9I91aitak/vpn3HwAhYiczvWzeW/2e gqlLFpI3mAp+svXnURNRzffQMIwYJ15AqPoPWlvTV3TjtnOaKRjwbL3paxsuCUIW dQ6OCL5Glo8rZ1QQYFZKeCkvRvMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEpv1+B59UOl1f3kQz971T3OQm5aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMDllMTNj LWNlYTAtNDdmZi05Yzk2LWY0OWIzOWQ0MzkyMC8wLzRBNkZEN0UwNzlGNTQzQTVE NUZERTQ0MzNGN0JENTNEQ0U0MjZFNUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABn0zEwDwQCAAIwCQMHACABDfESADANBgkqhkiG9w0BAQsFAAOCAQEABec9cFap OOi4raPnacMKkMPR3tfBufgwZMske2juhCAzAGWhtWwX50nnqAup3OTjQYatrRfy Ze5FNEyz5Afe9d7FQTvYGTCNSCO93/KYRDrFPssrUb6zY2MlKn6ek42xLRnWwNMT TT5cOdpYJhz0nKeOsAJx0FknEA457YBAjqjFAPIFX2hKMyU4Fd8znZAOqZLAMeea sCdX5cx63GkxM8xQgt11c580+ZXuspRFvN0U5IYxySkSciAMqKVQc4KvEpBO9KLS jAaHYCQCtGM2MgHyFgxBHZ+LJ95aEMwqpO9NFeLCXZh9uCy+i0uc+oeZnOp4ON5v UYwEp8fngw1M2A== -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:07 2025 by rpki-client