This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer File: 4CC71073C4D5095D162AA86A1727D924EB83598A.cer (raw, json) Hash identifier: VYPIiDCmnQx6zGO5bZw1oIdwl9RLLdWlwDR9OQgrNXc= Subject key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5AD58AB9DAA43E8E175B77186DDA9B6E7EC40E1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft caRepository: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 13 May 2025 12:22:26 +0000 Certificate not after: Tue 12 May 2026 12:27:26 +0000 Subordinate resources: IP: 103.148.48.0/23 IP: 2405:cb40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d5:8a:b9:da:a4:3e:8e:17:5b:77:18:6d:da:9b:6e:7e:c4:0e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 13 12:22:26 2025 GMT Not After : May 12 12:27:26 2026 GMT Subject: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:71:61:06:93:b1:00:14:11:dd:94:79:05: 5a:26:1d:d4:83:33:56:a9:d8:c1:31:bf:68:27:5a: fb:39:69:bc:32:73:69:fa:be:dc:7a:3a:ab:ff:9c: 61:83:40:53:cc:b6:89:ef:7c:18:9c:c9:17:c6:6d: 2e:95:9c:8c:bd:e7:2a:2a:ec:40:d4:22:58:ef:14: 99:4b:63:97:50:e5:ee:7e:e3:0a:32:6a:74:3f:fe: 27:c4:fd:f5:d5:bf:f6:2d:72:24:47:9c:ad:ed:81: 4d:04:9e:38:29:0f:31:ba:03:41:4f:0e:1a:44:92: a8:78:64:17:60:4c:b4:f7:6f:2e:94:39:d0:fb:29: e7:74:f2:85:4d:c4:7a:d6:e5:4d:9a:47:17:fe:48: dd:98:66:c8:49:c9:d1:36:5e:de:3c:4a:72:f4:77: 15:88:50:b2:3d:58:13:c3:63:f3:07:20:25:0b:82: 77:a5:a1:8b:74:a3:1d:a0:6e:2d:2e:3a:1b:58:0b: 00:e6:fb:00:7b:16:6f:2a:3e:aa:0e:98:9e:0e:c6: f3:67:7b:f6:e1:cc:3e:55:ca:37:4b:03:65:29:a5: bb:eb:2e:bb:da:89:80:e8:6d:bd:6a:4e:78:c1:47: d3:33:45:04:3d:10:a2:7a:4a:a8:a6:ac:89:d5:a0: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.48.0/23 IPv6: 2405:cb40::/32 Signature Algorithm: sha256WithRSAEncryption 74:e8:10:56:a4:87:ea:25:c2:66:33:77:68:b2:56:ef:11:9a: 8b:da:4c:7b:3b:43:31:e1:bb:d3:af:a3:8b:2a:53:4f:cc:d0: 8d:a0:a3:ab:5b:51:0b:c6:a2:ee:0e:18:19:ba:6a:d2:29:9b: 04:bc:4f:bf:0c:cc:39:8f:03:ac:dd:5f:0b:02:f9:9a:eb:7c: 7f:70:62:62:0c:99:bf:b7:c3:61:4a:db:d8:f3:2f:1f:b8:b6: 3f:31:15:10:d5:3c:0c:07:a2:d3:cc:00:c4:d0:47:5b:92:31: 12:11:80:63:74:a2:9e:e7:e3:53:1f:f7:a6:19:51:e5:53:94: 70:b2:c9:0f:36:d2:9f:32:e7:fd:98:cc:2a:78:cd:be:7c:8a: c9:57:43:83:86:da:a9:2e:8e:e9:b1:d7:40:5b:92:eb:0a:aa: 3d:ad:53:f3:4e:fe:8a:2d:2c:4d:26:58:9e:df:f2:3b:fd:8d: 33:18:14:3a:d2:df:30:7a:59:01:9a:00:35:3a:a8:ee:1e:0c: 29:2a:6c:54:df:ba:59:b6:82:6e:43:c6:b7:d3:7a:fc:9b:ec: d1:fd:ae:5e:51:47:ee:f4:d7:10:79:f7:aa:26:65:1a:bb:f1: 97:f8:9e:f8:f8:af:e5:7b:50:0f:38:b1:cd:58:18:e4:2d:1e: 9e:d7:90:23 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUWtWKudqkPo4XW3cYbdqbbn7EDh4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxMzEyMjIyNloX DTI2MDUxMjEyMjcyNlowMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFB ODZBMTcyN0Q5MjRFQjgzNTk4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFbcWEGk7EAFBHdlHkFWiYd1IMzVqnYwTG/aCda+zlpvDJzafq+3Ho6q/+c YYNAU8y2ie98GJzJF8ZtLpWcjL3nKirsQNQiWO8UmUtjl1Dl7n7jCjJqdD/+J8T9 9dW/9i1yJEecre2BTQSeOCkPMboDQU8OGkSSqHhkF2BMtPdvLpQ50Psp53TyhU3E etblTZpHF/5I3ZhmyEnJ0TZe3jxKcvR3FYhQsj1YE8Nj8wcgJQuCd6Whi3SjHaBu LS46G1gLAOb7AHsWbyo+qg6Yng7G82d79uHMPlXKN0sDZSmlu+suu9qJgOhtvWpO eMFH0zNFBD0QonpKqKasidWgtIsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEzHEHPE1QldFiqoahcn2STrg1mKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyMzZmMDYw LWU4NjItNGYxYy1iODFhLTAxZmNiYTNmZjc3Yy8wLzRDQzcxMDczQzRENTA5NUQx NjJBQTg2QTE3MjdEOTI0RUI4MzU5OEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlDAwDQQCAAIwBwMFACQFy0AwDQYJKoZIhvcNAQELBQADggEBAHToEFakh+ol wmYzd2iyVu8RmovaTHs7QzHhu9Ovo4sqU0/M0I2go6tbUQvGou4OGBm6atIpmwS8 T78MzDmPA6zdXwsC+ZrrfH9wYmIMmb+3w2FK29jzLx+4tj8xFRDVPAwHotPMAMTQ R1uSMRIRgGN0op7n41Mf96YZUeVTlHCyyQ820p8y5/2YzCp4zb58islXQ4OG2qku jumx10BbkusKqj2tU/NO/ootLE0mWJ7f8jv9jTMYFDrS3zB6WQGaADU6qO4eDCkq bFTfulm2gm5DxrfTevyb7NH9rl5RR+701xB596omZRq78Zf4nvj4r+V7UA84sc1Y GOQtHp7XkCM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:57 2025 by rpki-client