This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.cer (raw, json) Hash identifier: plbera/SZDE/hSkzYNPgKLYcoPnPXa5Bw9jPQEt52ao= Subject key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11AC0F630E06FDB7715DA8874FD8A746CA398E62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft caRepository: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 07:50:20 +0000 Certificate not after: Thu 05 Nov 2026 07:55:20 +0000 Subordinate resources: IP: 103.121.136.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ac:0f:63:0e:06:fd:b7:71:5d:a8:87:4f:d8:a7:46:ca:39:8e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 6 07:50:20 2025 GMT Not After : Nov 5 07:55:20 2026 GMT Subject: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:17:c4:8a:85:d0:2a:0e:32:e3:bc:8d:0b:f1: 55:ea:73:f8:4a:d2:7b:2d:c9:65:ea:c0:e0:6a:80: 9d:0d:5f:b5:cb:d0:25:d1:b3:06:93:ec:5b:ad:16: 91:14:4f:eb:08:8f:6b:5f:11:0c:e0:7c:de:39:56: b8:ee:88:07:75:13:d3:87:50:b8:fc:ed:0c:dc:ca: 80:09:76:bb:ae:03:bc:6e:5e:ab:fb:74:53:40:06: 9d:90:ab:2e:e0:18:64:5e:07:58:85:fa:b7:43:ae: af:a9:14:fa:77:ad:77:64:72:b4:3a:90:f1:3e:58: aa:e0:7a:94:2a:1e:58:42:08:62:eb:c0:e4:4a:01: 90:7e:7e:0b:68:a1:e7:11:1a:81:69:4b:b4:8e:18: f1:ba:d9:31:a4:7a:fe:d9:56:39:38:f4:0e:3f:8d: 41:d7:8f:84:5d:a6:db:39:4c:60:61:19:77:aa:ea: 04:55:59:3b:00:54:ed:6c:5a:2e:bc:f2:61:ce:09: 45:63:00:02:64:1e:0a:aa:d1:21:0e:75:82:20:6d: c8:d6:47:3c:26:96:9f:b8:a5:7f:d9:48:3a:61:a0: 47:32:52:5c:65:5f:68:8f:da:fa:20:ba:a0:56:84: 3c:56:34:ac:b3:19:c5:63:2d:4a:70:54:d8:e3:ac: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.136.0/22 Signature Algorithm: sha256WithRSAEncryption 17:79:75:19:e7:9f:be:cf:f4:1d:e7:7e:32:61:4d:5d:e0:86: 16:6c:ac:ee:8d:5e:9c:14:24:25:f1:02:d0:35:b8:df:7d:3a: fa:37:99:50:59:bb:b8:6a:7f:f3:f0:dc:e0:e9:a7:3d:0d:2e: cf:4f:87:b4:a1:88:7c:15:e4:b4:26:d0:d1:49:c1:4f:45:99: 0a:cb:47:92:a3:99:49:5b:31:ab:23:75:23:39:a9:4b:91:57: b2:0e:b9:35:2d:86:83:84:52:df:1e:45:ea:39:89:a0:57:22: f2:b1:c3:48:05:17:6f:da:a7:ea:3b:ff:32:07:15:3e:d6:59: 3f:39:62:d2:12:2e:0d:37:6e:63:f7:5e:2c:ed:0e:82:70:75: 93:f4:6d:25:de:f1:a5:23:7c:38:8c:2d:17:48:b3:d3:92:dc: a0:94:18:06:4e:7a:3d:7c:01:91:d0:9e:cf:35:8a:6c:7b:93: 5f:83:a1:09:c9:95:22:c8:4b:1b:37:12:f6:70:93:3a:15:d1: a1:c6:d9:eb:5b:37:e7:eb:2a:03:57:36:41:82:5a:10:02:23: 9a:0f:b6:0d:61:99:8e:75:ab:ce:55:e8:1d:8b:e4:e3:88:0b: 3f:49:fc:3c:d2:4d:56:dd:13:d8:8b:3b:b7:7f:f1:4a:05:92: 23:43:56:7c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEawPYw4G/bdxXaiHT9inRso5jmIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNjA3NTAyMFoX DTI2MTEwNTA3NTUyMFowMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJC NjI2MTk1QTBBQTA1NjBEQzc5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO4XxIqF0CoOMuO8jQvxVepz+ErSey3JZerA4GqAnQ1ftcvQJdGzBpPsW60W kRRP6wiPa18RDOB83jlWuO6IB3UT04dQuPztDNzKgAl2u64DvG5eq/t0U0AGnZCr LuAYZF4HWIX6t0Our6kU+netd2RytDqQ8T5YquB6lCoeWEIIYuvA5EoBkH5+C2ih 5xEagWlLtI4Y8brZMaR6/tlWOTj0Dj+NQdePhF2m2zlMYGEZd6rqBFVZOwBU7Wxa LrzyYc4JRWMAAmQeCqrRIQ51giBtyNZHPCaWn7ilf9lIOmGgRzJSXGVfaI/a+iC6 oFaEPFY0rLMZxWMtSnBU2OOsCKcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFzGsEieV2vA1kK2JhlaCqBWDceSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNGZhN2I4 LTUzMDItNDkwYi05MmU0LTI3ZjI4YzY2NTc1Yy8wLzVDQzZCMDQ4OUU1NzZCQzBE NjQyQjYyNjE5NUEwQUEwNTYwREM3OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJneYgwDQYJKoZIhvcNAQELBQADggEBABd5dRnnn77P9B3nfjJhTV3ghhZsrO6N XpwUJCXxAtA1uN99Ovo3mVBZu7hqf/Pw3ODppz0NLs9Ph7ShiHwV5LQm0NFJwU9F mQrLR5KjmUlbMasjdSM5qUuRV7IOuTUthoOEUt8eReo5iaBXIvKxw0gFF2/ap+o7 /zIHFT7WWT85YtISLg03bmP3XiztDoJwdZP0bSXe8aUjfDiMLRdIs9OS3KCUGAZO ej18AZHQns81imx7k1+DoQnJlSLISxs3EvZwkzoV0aHG2etbN+frKgNXNkGCWhAC I5oPtg1hmY51q85V6B2L5OOICz9J/DzSTVbdE9iLO7d/8UoFkiNDVnw= -----END CERTIFICATE-----Generated at Wed Dec 3 12:45:57 2025 by rpki-client