This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer File: 4E9222CE79B9CFEF260C837523FE2684407D535B.cer (raw, json) Hash identifier: KIIbFUSol0TBPZ6YZTOCtgO55dzVqkoeBI1q6rSFkYc= Subject key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5515C70AD1D6F8FB826B79D37C54B9CB149D06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft caRepository: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 12 Nov 2025 10:37:09 +0000 Certificate not after: Wed 11 Nov 2026 10:42:09 +0000 Subordinate resources: IP: 103.242.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Dec 2025 03:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:15:c7:0a:d1:d6:f8:fb:82:6b:79:d3:7c:54:b9:cb:14:9d:06:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 12 10:37:09 2025 GMT Not After : Nov 11 10:42:09 2026 GMT Subject: CN=4E9222CE79B9CFEF260C837523FE2684407D535B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:41:79:5e:c7:2f:b9:12:75:c9:7a:9b:d0: 65:58:da:d8:56:8d:73:bc:be:d0:a8:7e:44:80:13: 6c:f4:8e:88:0b:1c:d2:1b:11:b6:13:4b:9a:5b:ff: 20:b9:8e:b7:78:22:8c:16:e2:1f:15:30:97:9c:be: e6:da:83:d7:f5:e2:69:7a:a6:ae:94:b4:8d:bc:b6: 88:8e:8f:f8:f5:f0:9e:ca:42:80:35:3a:10:28:aa: 56:60:fb:a6:fe:fa:c3:cd:c7:1a:ea:eb:8b:91:ff: cf:3b:2c:42:af:1a:5f:31:1d:c1:96:ca:e9:58:95: 76:43:69:b8:db:ee:02:1c:4a:b6:96:6a:22:ad:c4: 92:58:e7:d2:33:b5:c7:38:09:0d:9d:e7:07:2c:bc: d4:e8:eb:d1:1c:ed:ad:24:43:1f:8a:72:a7:d7:e4: b2:ce:aa:04:3c:d7:fd:6c:60:00:71:54:5f:bb:be: d2:f7:aa:f1:e0:25:9d:da:bd:bd:33:bf:18:06:26: b4:4c:fd:75:3f:62:99:08:0b:24:8d:2c:34:aa:e9: c2:39:6e:1b:a5:c8:8d:30:4e:40:f9:2c:ed:c0:42: 1d:af:2b:05:58:24:61:53:b3:21:cc:ed:cf:27:e9: d7:68:e2:9f:a4:e9:36:33:73:86:04:e6:7a:f2:59: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.76.0/23 Signature Algorithm: sha256WithRSAEncryption 66:6a:94:78:b3:e8:f1:9b:12:0b:7b:00:cc:ab:2d:15:7e:b9: 1a:0d:c7:35:c2:3c:f6:3d:f8:b5:37:77:bf:39:4a:e5:9e:d7: ef:15:d0:f3:f5:7a:3f:84:0e:99:c4:06:6c:43:58:d2:95:94: 92:a6:19:2b:d0:42:0d:b6:e4:09:03:4c:4e:00:29:37:08:ad: 25:0c:b5:03:0d:ab:fc:47:c2:c7:1b:3f:17:7f:12:62:e5:41: c9:27:be:a8:e1:fb:e3:22:9d:b3:8d:e1:e1:16:60:83:62:18: 71:bf:63:12:db:c4:03:75:4e:52:0a:9c:30:57:76:10:09:50: b2:fe:e9:a3:9c:c9:1c:c0:53:41:aa:31:f2:5e:b0:ad:be:bd: d5:de:5e:72:1f:50:12:cd:76:10:d4:78:bd:2e:d5:02:63:09: 98:a0:c6:bb:22:57:9f:c1:6c:71:5b:e3:0e:82:cf:fb:e1:08: c7:7a:c1:21:d2:8f:86:91:0a:b3:b8:4e:d5:0f:b4:07:81:46: dc:84:9b:8a:87:4a:26:3c:97:a6:16:0e:9c:5b:bf:36:5f:1e: a0:f8:72:8e:fc:62:ad:c1:36:61:ac:20:a0:f0:f3:21:47:82: 99:5d:7d:b6:f4:8d:d7:51:91:51:f8:80:b9:78:9c:a6:83:7c: 11:78:83:66 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVRXHCtHW+PuCa3nTfFS5yxSdBuwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMjEwMzcwOVoX DTI2MTExMTEwNDIwOVowMzExMC8GA1UEAxMoNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4 Mzc1MjNGRTI2ODQ0MDdENTM1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7YQXlexy+5EnXJepvQZVja2FaNc7y+0Kh+RIATbPSOiAsc0hsRthNLmlv/ ILmOt3gijBbiHxUwl5y+5tqD1/XiaXqmrpS0jby2iI6P+PXwnspCgDU6ECiqVmD7 pv76w83HGurri5H/zzssQq8aXzEdwZbK6ViVdkNpuNvuAhxKtpZqIq3Ekljn0jO1 xzgJDZ3nByy81Ojr0RztrSRDH4pyp9fkss6qBDzX/WxgAHFUX7u+0veq8eAlndq9 vTO/GAYmtEz9dT9imQgLJI0sNKrpwjluG6XIjTBOQPks7cBCHa8rBVgkYVOzIczt zyfp12jin6TpNjNzhgTmevJZJ3kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE6SIs55uc/vJgyDdSP+JoRAfVNbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MjE2ZjFiZC05NThlLTQ3ZjUtOTQ4ZS04N2UxMWU5MmU2MDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyMTZmMWJk LTk1OGUtNDdmNS05NDhlLTg3ZTExZTkyZTYwMS8wLzRFOTIyMkNFNzlCOUNGRUYy NjBDODM3NTIzRkUyNjg0NDA3RDUzNUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn8kwwDQYJKoZIhvcNAQELBQADggEBAGZqlHiz6PGbEgt7AMyrLRV+uRoNxzXC PPY9+LU3d785SuWe1+8V0PP1ej+EDpnEBmxDWNKVlJKmGSvQQg225AkDTE4AKTcI rSUMtQMNq/xHwscbPxd/EmLlQcknvqjh++MinbON4eEWYINiGHG/YxLbxAN1TlIK nDBXdhAJULL+6aOcyRzAU0GqMfJesK2+vdXeXnIfUBLNdhDUeL0u1QJjCZigxrsi V5/BbHFb4w6Cz/vhCMd6wSHSj4aRCrO4TtUPtAeBRtyEm4qHSiY8l6YWDpxbvzZf HqD4co78Yq3BNmGsIKDw8yFHgpldfbb0jddRkVH4gLl4nKaDfBF4g2Y= -----END CERTIFICATE-----Generated at Sun Nov 30 06:49:14 2025 by rpki-client