This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer (raw, json) Hash identifier: HSHw5rEqkrFRs4p62UdBfJAV31HSCHEKpZ5lL7cwrMk= Subject key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5EB30203E27EED77DD5AB3B6CDF6A03AEFFBEB52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft caRepository: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 15:58:46 +0000 Certificate not after: Thu 05 Nov 2026 16:03:46 +0000 Subordinate resources: IP: 103.129.24.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b3:02:03:e2:7e:ed:77:dd:5a:b3:b6:cd:f6:a0:3a:ef:fb:eb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 6 15:58:46 2025 GMT Not After : Nov 5 16:03:46 2026 GMT Subject: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bb:ae:0b:43:44:95:0f:95:2e:2e:cd:b5:46: bd:43:c2:7d:71:77:f7:7b:d2:b8:16:2e:7f:c6:3a: e3:a1:21:c2:1a:64:09:52:67:f8:01:3d:b6:b8:94: 8f:e2:21:e9:df:99:fc:82:87:76:3f:35:11:12:68: 73:70:b6:f6:ab:90:03:0b:ec:4c:ba:66:2a:40:80: dd:09:7a:07:df:4c:66:5d:06:9e:be:b4:0b:8e:42: 05:28:12:e7:47:b1:8f:f2:e0:1f:7a:69:d6:36:7e: 45:c1:19:52:a8:a4:10:3c:1e:4c:0a:19:9e:3f:d0: 5f:fe:3e:33:db:a0:2a:5b:68:62:77:70:7f:fa:e5: 41:d5:0b:ee:9d:9c:26:9f:a1:11:27:92:4e:7b:b1: b7:8c:56:53:ad:72:d7:2e:fd:89:2a:97:b8:d9:38: 86:7c:23:01:e5:1c:8c:be:88:23:8b:f6:f6:5f:d8: a8:b4:3d:34:a7:78:60:c1:59:b7:95:c2:eb:d7:a2: 71:4b:85:1b:18:01:7a:60:a0:8e:c1:5d:7f:b6:b0: 42:0e:9b:16:38:4e:a2:f9:f3:87:e6:92:02:a5:75: c9:3c:e1:6a:0b:2e:0a:d6:a7:0b:d5:ad:0b:e2:41: f0:38:d3:f8:ed:2c:01:76:75:41:79:f9:d6:d7:8d: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.24.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:0a:7f:7b:99:13:66:74:49:14:34:0a:d0:30:48:31:cc:8f: 14:73:f7:2f:e2:58:ce:ed:47:65:aa:b1:e8:37:b4:83:eb:2e: 5b:b3:90:2a:dd:da:20:38:c7:64:b4:2f:fe:fa:2c:53:66:d2: a3:97:0e:68:21:e5:23:c5:30:85:a2:ef:83:0e:18:d5:a5:48: c6:b9:b6:71:f8:66:79:d7:55:27:0d:ca:a5:45:be:44:e4:32: 38:b3:2a:3c:7e:3a:80:a4:41:74:1d:e7:d8:a2:63:8c:73:91: d0:8f:8a:a6:fd:20:6c:00:c2:ae:7c:3d:2e:ed:46:0d:9e:99: e5:e8:85:0c:03:33:4a:d4:42:4b:39:d5:6b:6b:b1:86:44:7a: 25:36:d7:95:f5:39:f0:ef:db:8d:b7:74:e5:ce:cd:07:5e:c8: 21:b5:a2:4e:7d:c2:27:70:26:58:55:ca:85:57:f6:14:fe:a7: 55:91:d4:8d:1a:40:26:f1:ff:d0:51:97:e8:5a:f6:de:6f:2b: 75:ef:91:79:25:f0:b5:b4:42:65:b2:b9:d2:36:86:73:79:3f: 63:9c:5b:fd:da:62:e8:7f:84:3f:4e:5f:27:ea:80:32:1d:a2: 24:be:e0:4d:4a:32:dd:19:4b:2c:4f:50:65:15:65:f7:52:bd: d4:a6:82:8e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXrMCA+J+7XfdWrO2zfagOu/761IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNjE1NTg0NloX DTI2MTEwNTE2MDM0NlowMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3 NDgxQTVBODZCMzVDRTBERDIxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPC7rgtDRJUPlS4uzbVGvUPCfXF393vSuBYuf8Y646EhwhpkCVJn+AE9triU j+Ih6d+Z/IKHdj81ERJoc3C29quQAwvsTLpmKkCA3Ql6B99MZl0Gnr60C45CBSgS 50exj/LgH3pp1jZ+RcEZUqikEDweTAoZnj/QX/4+M9ugKltoYndwf/rlQdUL7p2c Jp+hESeSTnuxt4xWU61y1y79iSqXuNk4hnwjAeUcjL6II4v29l/YqLQ9NKd4YMFZ t5XC69eicUuFGxgBemCgjsFdf7awQg6bFjhOovnzh+aSAqV1yTzhagsuCtanC9Wt C+JB8DjT+O0sAXZ1QXn51teNjRsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFMqSm6iUunRz/V0gaWoazXODdIfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3ZGYyYWQw LTZlOTktNDRhNy1hMDY4LTUwMDY1NmZmYjAwZi8wLzUzMkE0QTZFQTI1MkU5RDFD RkY1NzQ4MUE1QTg2QjM1Q0UwREQyMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJngRgwDQYJKoZIhvcNAQELBQADggEBAEsKf3uZE2Z0SRQ0CtAwSDHMjxRz9y/i WM7tR2Wqseg3tIPrLluzkCrd2iA4x2S0L/76LFNm0qOXDmgh5SPFMIWi74MOGNWl SMa5tnH4ZnnXVScNyqVFvkTkMjizKjx+OoCkQXQd59iiY4xzkdCPiqb9IGwAwq58 PS7tRg2emeXohQwDM0rUQks51WtrsYZEeiU215X1OfDv2423dOXOzQdeyCG1ok59 widwJlhVyoVX9hT+p1WR1I0aQCbx/9BRl+ha9t5vK3XvkXkl8LW0QmWyudI2hnN5 P2OcW/3aYuh/hD9OXyfqgDIdoiS+4E1KMt0ZSyxPUGUVZfdSvdSmgo4= -----END CERTIFICATE-----Generated at Wed Dec 3 12:46:12 2025 by rpki-client