This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/50F7ED39FFA5738F74EF37329FF7D116FDF9765B.cer
File:                     50F7ED39FFA5738F74EF37329FF7D116FDF9765B.cer (raw, json)
Hash identifier:          PmjtENHyl8hT6x6sVU9D1pPE/FCyKM9UVdBlDDQmAG4=
Subject key identifier:   50:F7:ED:39:FF:A5:73:8F:74:EF:37:32:9F:F7:D1:16:FD:F9:76:5B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6565E815801FCA54D1CDD45FD307DDC6F1965645
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/50F7ED39FFA5738F74EF37329FF7D116FDF9765B.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 29 Jan 2026 00:28:02 +0000
Certificate not after:    Thu 28 Jan 2027 00:33:02 +0000
Subordinate resources:    IP: 103.56.70.0/24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:65:e8:15:80:1f:ca:54:d1:cd:d4:5f:d3:07:dd:c6:f1:96:56:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 29 00:28:02 2026 GMT
            Not After : Jan 28 00:33:02 2027 GMT
        Subject: CN=50F7ED39FFA5738F74EF37329FF7D116FDF9765B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:86:76:e0:a9:70:55:b7:9c:6f:fe:9a:0f:
                    f4:28:4e:e2:77:53:28:f7:7f:7e:40:68:cf:9e:53:
                    5b:9c:e4:51:1d:51:cc:31:7e:60:ba:f0:dc:02:e7:
                    e3:8a:ee:70:68:d7:dc:6d:b1:9b:31:6f:8a:47:d0:
                    c2:4a:12:00:d5:ee:a7:c6:08:01:c3:a8:99:62:ca:
                    a6:c0:56:51:ce:18:64:64:99:12:b0:2a:73:b5:20:
                    01:ed:53:a9:86:83:ff:cc:cf:77:9d:a1:b4:e4:61:
                    b6:99:cc:39:91:62:d2:0a:65:24:05:be:b3:a7:5e:
                    45:c6:6b:3d:84:ca:c3:f8:32:73:f1:3f:fb:94:14:
                    0e:aa:0f:09:e2:ff:b5:7b:bb:f1:9a:f1:4f:e1:3c:
                    6f:44:02:10:38:5f:91:78:2f:f7:75:d9:bd:49:e2:
                    e8:18:34:45:45:6f:f3:e9:3c:ef:89:09:6d:ad:9b:
                    c7:37:08:1a:0d:89:74:d4:ca:39:dd:50:38:2d:ad:
                    50:d8:79:b2:24:5c:49:38:2d:0b:d0:1b:91:09:81:
                    f4:17:04:33:c7:78:fa:c3:5f:52:4e:84:61:d1:4e:
                    34:ca:f4:59:70:a7:c4:8e:cf:6e:19:42:9e:d9:b6:
                    c3:ac:06:21:21:4c:2d:e8:af:b2:bb:38:76:9b:32:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:F7:ED:39:FF:A5:73:8F:74:EF:37:32:9F:F7:D1:16:FD:F9:76:5B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/50F7ED39FFA5738F74EF37329FF7D116FDF9765B.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:9b:a6:71:a2:53:7f:0d:0f:81:15:67:3e:19:5e:d1:14:
         72:3a:a1:f7:8b:db:e8:82:8c:25:eb:f1:c0:fd:6a:0e:fc:19:
         a5:55:a3:9f:62:0a:f0:23:b7:76:7d:b0:f4:fd:e4:e4:17:27:
         45:eb:b4:ae:02:16:24:b5:1a:3a:29:db:93:09:54:05:9b:30:
         85:99:bb:ac:a0:aa:2c:16:58:3b:d2:64:40:47:02:a4:39:0d:
         ae:0b:d6:01:82:19:9d:27:56:37:d4:b5:45:a3:49:19:ac:d1:
         a6:31:40:c2:d2:eb:b1:29:8c:2e:6f:bd:48:e3:44:bf:b1:13:
         e2:92:00:19:7c:e2:a4:2a:2f:63:f4:10:95:fa:8d:dd:f5:a2:
         76:1c:51:eb:0c:40:44:04:36:b7:3d:72:ed:f2:d4:0b:44:0d:
         5a:35:42:4f:51:11:da:50:e4:d1:c8:41:7a:0d:b1:93:c8:2a:
         8c:8a:a5:b9:ac:ca:74:d5:2b:de:90:49:58:cb:fc:1c:67:cb:
         7f:6a:8a:e0:cf:f6:c0:71:86:db:14:af:f7:9e:8c:4c:8e:39:
         79:27:97:04:43:05:3e:6c:13:cf:84:16:a0:3e:ad:3d:f9:57:
         f1:9e:99:5e:28:ff:c1:b5:e0:77:50:ca:94:2d:70:6a:59:3c:
         03:22:5f:f9
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUZWXoFYAfylTRzdRf0wfdxvGWVkUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyOTAwMjgwMloX
DTI3MDEyODAwMzMwMlowMzExMC8GA1UEAxMoNTBGN0VEMzlGRkE1NzM4Rjc0RUYz
NzMyOUZGN0QxMTZGREY5NzY1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALcnhnbgqXBVt5xv/poP9ChO4ndTKPd/fkBoz55TW5zkUR1RzDF+YLrw3ALn
44rucGjX3G2xmzFvikfQwkoSANXup8YIAcOomWLKpsBWUc4YZGSZErAqc7UgAe1T
qYaD/8zPd52htORhtpnMOZFi0gplJAW+s6deRcZrPYTKw/gyc/E/+5QUDqoPCeL/
tXu78ZrxT+E8b0QCEDhfkXgv93XZvUni6Bg0RUVv8+k874kJba2bxzcIGg2JdNTK
Od1QOC2tUNh5siRcSTgtC9AbkQmB9BcEM8d4+sNfUk6EYdFONMr0WXCnxI7PbhlC
ntm2w6wGISFMLeivsrs4dpsyOTECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFD37Tn/pXOPdO83Mp/30Rb9+XZbMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by82MTg3ZDg0ZS1mMWI5LTRhMTMtYjc3My04OTE5MTRiNmI0YTQvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxODdkODRl
LWYxYjktNGExMy1iNzczLTg5MTkxNGI2YjRhNC8wLzUwRjdFRDM5RkZBNTczOEY3
NEVGMzczMjlGRjdEMTE2RkRGOTc2NUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnOEYwDQYJKoZIhvcNAQELBQADggEBAFe7m6ZxolN/DQ+BFWc+GV7RFHI6ofeL
2+iCjCXr8cD9ag78GaVVo59iCvAjt3Z9sPT95OQXJ0XrtK4CFiS1Gjop25MJVAWb
MIWZu6ygqiwWWDvSZEBHAqQ5Da4L1gGCGZ0nVjfUtUWjSRms0aYxQMLS67EpjC5v
vUjjRL+xE+KSABl84qQqL2P0EJX6jd31onYcUesMQEQENrc9cu3y1AtEDVo1Qk9R
EdpQ5NHIQXoNsZPIKoyKpbmsynTVK96QSVjL/Bxny39qiuDP9sBxhtsUr/eejEyO
OXknlwRDBT5sE8+EFqA+rT35V/GemV4o/8G14HdQypQtcGpZPAMiX/k=
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:27 2026 by rpki-client