This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer (raw, json) Hash identifier: WUvxbwrb9s2EYDcO5wwDynZLzyWn/mrvH7oHUwPMgGA= Subject key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DD8AAA387BACD0FA57163D2E93E6E96CB79E8C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft caRepository: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 06 Sep 2025 04:07:44 +0000 Certificate not after: Sat 05 Sep 2026 04:12:44 +0000 Subordinate resources: IP: 103.71.44.0/23 IP: 2001:df3:e200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d8:aa:a3:87:ba:cd:0f:a5:71:63:d2:e9:3e:6e:96:cb:79:e8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 6 04:07:44 2025 GMT Not After : Sep 5 04:12:44 2026 GMT Subject: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:fa:71:5b:16:67:2a:e4:58:5c:c2:a9:00: 4b:07:97:15:98:5c:30:df:91:09:4f:41:08:b8:93: 57:8d:d7:28:63:04:1a:21:ff:de:ec:6e:66:be:34: 6a:a5:31:3a:d6:64:f2:dd:02:18:0b:f6:81:17:46: 2f:00:54:9b:40:b0:79:56:03:cc:b2:4d:bd:2b:47: 90:0d:23:05:d0:be:dc:68:4d:45:f0:4e:8f:1a:08: ff:06:2e:5a:ed:63:dd:b5:1c:7b:14:7a:c0:4d:2f: 3f:a4:cc:8e:64:de:a1:64:16:6e:12:e3:64:67:d2: 75:47:77:54:85:f8:6c:7d:7a:80:7a:ed:ca:d5:cb: 18:f1:a0:3c:a6:5d:6b:b4:fb:7e:1f:a8:2c:c0:68: 02:0a:0f:35:81:ca:18:3a:c3:7a:9e:d3:52:6c:44: d4:cc:fd:f4:77:4a:93:79:68:c5:63:ce:4d:a7:ca: 12:53:5f:eb:53:e8:02:33:a9:1d:7d:85:bb:dd:ce: cb:54:3e:56:9e:02:c0:db:5f:a5:bf:89:67:9c:15: df:e4:58:ca:05:59:33:96:1b:1b:b3:89:49:03:9a: f2:c9:0a:13:70:d3:71:c0:4d:ac:16:93:78:82:98: 98:83:3b:4f:fa:5c:bd:ac:af:48:c2:fd:65:f8:72: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.44.0/23 IPv6: 2001:df3:e200::/48 Signature Algorithm: sha256WithRSAEncryption 80:ff:71:a7:e8:59:de:c4:34:f6:5d:82:cd:4d:1c:02:5a:43: 87:3a:4b:b7:bd:85:36:97:7f:e4:00:e4:ff:d4:61:9d:e6:58: ac:4e:cc:70:80:cc:c5:07:fd:02:f7:d7:9b:61:c1:df:b4:10: a3:1a:c3:a1:32:6a:7c:20:3c:da:1f:e6:5d:b6:20:5f:b7:b8: d8:a3:ca:ac:79:a0:bc:38:03:f9:75:4b:11:ec:45:65:b5:6a: fb:f9:e7:d7:8f:42:23:da:a8:ab:6b:6f:36:66:b0:a2:62:2c: 2e:11:7a:73:86:c5:4c:d6:cb:bd:ba:fd:3b:78:4f:92:97:a3: f9:cc:72:26:4e:80:12:5f:6d:03:b3:ed:e9:ee:3a:94:18:1d: b8:45:9d:03:58:75:12:d7:b9:14:37:8e:6f:0a:45:9c:cb:75: 72:80:32:7d:6d:f4:12:ec:51:bf:be:a8:6c:f7:54:3c:7d:0c: bc:d9:b1:4f:77:fc:3b:9d:7f:dd:32:6c:97:1a:45:71:21:48: d6:3a:a6:d5:d9:c6:95:95:8b:f1:e1:c9:18:4b:4a:7b:b3:14: f9:e1:f7:24:e6:32:ce:ac:bf:b8:25:71:4e:2c:2d:a9:d8:ee: 6d:fb:4b:a6:17:8f:77:4b:15:06:71:c1:87:5f:8a:47:86:e1: ae:a6:7e:90 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUbdiqo4e6zQ+lcWPS6T5ulst56McwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwNjA0MDc0NFoX DTI2MDkwNTA0MTI0NFowMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQw NzFFNDkwQkQ3Q0IxRkJEMkEzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJq8+nFbFmcq5FhcwqkASweXFZhcMN+RCU9BCLiTV43XKGMEGiH/3uxuZr40 aqUxOtZk8t0CGAv2gRdGLwBUm0CweVYDzLJNvStHkA0jBdC+3GhNRfBOjxoI/wYu Wu1j3bUcexR6wE0vP6TMjmTeoWQWbhLjZGfSdUd3VIX4bH16gHrtytXLGPGgPKZd a7T7fh+oLMBoAgoPNYHKGDrDep7TUmxE1Mz99HdKk3loxWPOTafKElNf61PoAjOp HX2Fu93Oy1Q+Vp4CwNtfpb+JZ5wV3+RYygVZM5YbG7OJSQOa8skKE3DTccBNrBaT eIKYmIM7T/pcvayvSML9ZfhyYWsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEw0CLbgglQi3C0HHkkL18sfvSo/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxYzljZTVh LTY2OTAtNDkwMS05ZTBhLWMyN2IzMTkzMTZiZS8wLzRDMzQwOEI2RTA4MjU0MjJE QzJEMDcxRTQ5MEJEN0NCMUZCRDJBM0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnRywwDwQCAAIwCQMHACABDfPiADANBgkqhkiG9w0BAQsFAAOCAQEAgP9xp+hZ 3sQ09l2CzU0cAlpDhzpLt72FNpd/5ADk/9RhneZYrE7McIDMxQf9AvfXm2HB37QQ oxrDoTJqfCA82h/mXbYgX7e42KPKrHmgvDgD+XVLEexFZbVq+/nn149CI9qoq2tv NmawomIsLhF6c4bFTNbLvbr9O3hPkpej+cxyJk6AEl9tA7Pt6e46lBgduEWdA1h1 Ete5FDeObwpFnMt1coAyfW30EuxRv76obPdUPH0MvNmxT3f8O51/3TJslxpFcSFI 1jqm1dnGlZWL8eHJGEtKe7MU+eH3JOYyzqy/uCVxTiwtqdjubftLphePd0sVBnHB h1+KR4bhrqZ+kA== -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:08 2025 by rpki-client