This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer (raw, json) Hash identifier: Yi6CaQiD2lzuY7JWZwnFzQAt/5AUXoQiu1NVpb7gPF0= Subject key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1C4DB56AF1B42B0278FD29B7F1DC33F07237B789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft caRepository: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 23:37:20 +0000 Certificate not after: Thu 02 Apr 2026 23:42:20 +0000 Subordinate resources: IP: 103.170.198.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4d:b5:6a:f1:b4:2b:02:78:fd:29:b7:f1:dc:33:f0:72:37:b7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 3 23:37:20 2025 GMT Not After : Apr 2 23:42:20 2026 GMT Subject: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8d:e9:51:e5:2f:7c:af:ba:e1:eb:4a:96:fd: 50:8b:bb:b6:2c:39:4d:a1:6b:54:41:ca:be:df:9d: c6:4c:41:3a:d0:0a:4b:cb:69:41:3f:e7:18:e9:b0: 42:5c:51:d7:ca:19:cd:4f:c9:4c:35:17:26:ab:df: a7:48:81:15:2b:4a:c7:3c:f6:86:72:f2:00:7c:fb: 5e:4f:94:4a:67:38:85:35:ba:55:22:6d:3b:bf:55: 49:28:06:62:97:5d:ab:c5:ff:e1:8b:cc:8c:00:77: 98:da:7b:a3:14:ab:dd:48:c0:d0:7b:e7:15:30:ea: b8:6b:a5:1e:9b:92:3d:7a:ae:b9:dc:74:4f:ab:86: ba:81:14:81:86:df:70:75:85:89:d6:9d:d2:89:0a: f2:8e:3c:e7:94:66:3b:32:37:46:72:1f:c1:19:da: 55:59:62:8b:a4:cf:bf:30:fd:b8:b9:fd:b4:af:3d: ae:10:51:cf:73:02:d8:92:e4:3d:50:68:b2:70:57: c2:1a:b6:d8:34:b1:66:a3:d4:76:eb:69:35:93:a3: 4f:80:fe:98:aa:e5:bd:0c:22:c3:4e:71:21:37:57: 93:65:f4:22:31:25:66:2c:dc:96:ee:d2:aa:05:3c: 2b:c0:dc:73:8d:dd:94:d4:7c:f0:39:e6:30:75:d2: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.198.0/24 Signature Algorithm: sha256WithRSAEncryption 09:b4:25:e8:de:17:66:fc:af:35:04:8a:51:40:cb:14:47:b6: c3:04:e6:80:21:25:d0:7a:44:07:aa:98:5f:f7:b0:41:f5:b1: 27:3e:61:59:f2:82:2e:46:6b:8e:0f:b4:99:64:8a:a9:77:67: e3:ac:28:c1:7e:41:4f:e9:2d:16:d9:d2:1f:81:10:50:e3:b9: ae:25:eb:cc:98:ac:fe:f0:00:5a:f6:e8:be:5e:be:fa:df:70: 2b:82:48:f8:f0:46:fa:b7:8b:68:5c:ed:55:1a:39:c4:53:e5: 47:6f:88:e9:f4:9a:33:fe:cf:da:99:d0:41:f3:27:d1:07:80: b4:d0:5f:e8:d6:4d:e2:27:d2:7d:d0:69:08:b3:d2:f5:af:15: 4e:7a:b6:af:6b:56:ca:78:17:5f:dd:36:98:06:7c:4e:2d:b0: 23:b2:3f:03:5b:c1:1f:f5:87:92:92:fe:48:95:c2:8f:1e:ce: 49:b7:8f:25:f4:af:37:4b:3d:84:1d:3a:7d:7d:bf:d1:b3:7f: 67:79:20:2e:a5:a5:6a:b5:95:16:89:cb:90:29:7f:aa:4b:9d: 5c:c7:f7:c6:29:f2:d1:4c:e8:a3:e2:03:a1:a4:0c:08:2d:a0: b4:0a:5a:32:fc:e6:4c:18:b1:c9:29:00:0d:97:55:a5:7a:e7: d7:d3:41:3f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHE21avG0KwJ4/Sm38dwz8HI3t4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwMzIzMzcyMFoX DTI2MDQwMjIzNDIyMFowMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAy MjIyREY5M0QxQ0UyQkQ2RUEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWN6VHlL3yvuuHrSpb9UIu7tiw5TaFrVEHKvt+dxkxBOtAKS8tpQT/nGOmw QlxR18oZzU/JTDUXJqvfp0iBFStKxzz2hnLyAHz7Xk+USmc4hTW6VSJtO79VSSgG Ypddq8X/4YvMjAB3mNp7oxSr3UjA0HvnFTDquGulHpuSPXquudx0T6uGuoEUgYbf cHWFidad0okK8o4855RmOzI3RnIfwRnaVVlii6TPvzD9uLn9tK89rhBRz3MC2JLk PVBosnBXwhq22DSxZqPUdutpNZOjT4D+mKrlvQwiw05xITdXk2X0IjElZizclu7S qgU8K8Dcc43dlNR88DnmMHXS+UUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFl3NKJhWNd6btAiIt+T0c4r1uoDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZGE1ODgy LWI4MDQtNDE1NC05NTliLTYzMzZiMjRlMThiMi8wLzU5NzczNEEyNjE1OEQ3N0E2 RUQwMjIyMkRGOTNEMUNFMkJENkVBMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqsYwDQYJKoZIhvcNAQELBQADggEBAAm0JejeF2b8rzUEilFAyxRHtsME5oAh JdB6RAeqmF/3sEH1sSc+YVnygi5Ga44PtJlkiql3Z+OsKMF+QU/pLRbZ0h+BEFDj ua4l68yYrP7wAFr26L5evvrfcCuCSPjwRvq3i2hc7VUaOcRT5UdviOn0mjP+z9qZ 0EHzJ9EHgLTQX+jWTeIn0n3QaQiz0vWvFU56tq9rVsp4F1/dNpgGfE4tsCOyPwNb wR/1h5KS/kiVwo8ezkm3jyX0rzdLPYQdOn19v9Gzf2d5IC6lpWq1lRaJy5Apf6pL nVzH98Yp8tFM6KPiA6GkDAgtoLQKWjL85kwYsckpAA2XVaV659fTQT8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:06 2025 by rpki-client