This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer
File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer (raw, json)
Hash identifier: +M8Pl4Ur395DGfyuRawcejtv8oAr6GA8fdpQ4WHHXFg=
Subject key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 62CBB802D336AAE6D5FC40C5AB95196B0B542023
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sun 31 Aug 2025 06:40:47 +0000
Certificate not after: Sun 30 Aug 2026 06:45:47 +0000
Subordinate resources: IP: 103.155.28.0/24
IP: 2001:df4:ad80::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 18:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cb:b8:02:d3:36:aa:e6:d5:fc:40:c5:ab:95:19:6b:0b:54:20:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Aug 31 06:40:47 2025 GMT
Not After : Aug 30 06:45:47 2026 GMT
Subject: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:e3:fa:20:bb:ad:08:03:46:f0:a8:19:1f:
68:6d:22:b2:d3:e8:e3:44:ba:a9:3a:53:9d:a5:d6:
b5:13:44:d3:23:37:40:52:31:7c:1f:e2:0a:da:57:
bf:55:a3:a2:5e:d1:db:08:c3:b9:3b:fd:7e:31:5a:
2b:51:41:8d:2c:54:26:ba:c5:df:b1:31:bf:f8:f6:
28:04:91:3f:47:07:38:71:9c:52:fd:b4:38:11:5d:
a0:97:14:19:18:a1:da:2c:6c:ff:96:2b:20:a0:92:
e5:1e:50:a0:4d:28:14:24:a3:14:2b:2a:ed:0e:75:
9e:13:a5:eb:78:b2:14:e0:a3:ce:5d:f2:de:76:2f:
1a:fc:1e:d4:8c:48:a5:e3:1b:d4:f9:18:e6:fb:aa:
4f:6f:80:54:ea:7f:e8:78:8b:a2:cb:d8:cb:3f:43:
cd:cf:84:ae:29:83:5d:de:22:ba:8a:45:a3:21:e5:
0e:23:c2:cc:fe:25:a8:88:09:69:24:dd:af:bc:75:
6e:36:1e:e9:4b:a7:e5:fb:98:5b:a5:e4:9a:3a:66:
49:70:e7:de:0d:32:80:05:97:e9:04:2f:16:e7:a7:
bc:0a:94:ac:55:2b:51:c8:32:46:b7:17:17:22:97:
6f:06:97:7c:f8:32:64:46:25:c1:98:23:e7:ad:13:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.28.0/24
IPv6:
2001:df4:ad80::/48
Signature Algorithm: sha256WithRSAEncryption
55:00:36:d3:8e:9f:f0:94:81:f7:52:18:f9:87:f5:44:fb:cb:
1b:90:81:40:90:2b:db:7e:85:67:d5:aa:ad:ee:17:2e:60:08:
41:9d:7d:a2:a4:b5:37:e5:c8:3c:6d:18:a6:f4:c3:5d:22:4d:
d5:d4:77:8b:a7:70:8f:87:6a:d8:a8:56:00:b9:f5:e6:98:b8:
ae:ff:68:13:26:05:70:ce:18:64:c0:38:93:4d:ce:c4:88:be:
b1:4c:24:50:3e:ec:61:42:68:b9:c2:4e:70:ff:d0:4e:d1:54:
b6:e0:b1:0c:7a:32:d5:65:25:f0:76:fa:0c:e7:02:4b:90:e6:
9a:74:52:e6:bc:4a:8b:5a:72:53:3b:c9:8b:0b:de:ed:db:28:
e1:16:b6:12:f7:ef:18:b3:da:b6:eb:63:c4:5b:dc:e1:95:f4:
7f:7c:8e:63:dc:aa:a7:5c:b9:14:23:fa:02:6d:df:a1:08:ed:
eb:2e:11:78:08:ed:03:dd:f2:83:3b:25:b1:ae:72:6a:72:4e:
9b:5c:0e:a1:69:e5:1e:76:f5:4e:b3:e1:ab:93:99:85:3f:34:
1b:32:20:6e:ae:8f:0b:6b:bb:11:fc:7a:c5:e3:3f:75:9d:ec:
76:96:33:51:07:42:9b:eb:75:06:84:1f:86:47:e9:85:32:ea:
9b:ed:1b:4d
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUYsu4AtM2qubV/EDFq5UZawtUICMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgzMTA2NDA0N1oX
DTI2MDgzMDA2NDU0N1owMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0
RDI4RjJDNUY3QjI1MkZDNDgwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL9+4/ogu60IA0bwqBkfaG0istPo40S6qTpTnaXWtRNE0yM3QFIxfB/iCtpX
v1Wjol7R2wjDuTv9fjFaK1FBjSxUJrrF37Exv/j2KASRP0cHOHGcUv20OBFdoJcU
GRih2ixs/5YrIKCS5R5QoE0oFCSjFCsq7Q51nhOl63iyFOCjzl3y3nYvGvwe1IxI
peMb1PkY5vuqT2+AVOp/6HiLosvYyz9Dzc+ErimDXd4iuopFoyHlDiPCzP4lqIgJ
aSTdr7x1bjYe6Uun5fuYW6XkmjpmSXDn3g0ygAWX6QQvFuenvAqUrFUrUcgyRrcX
FyKXbwaXfPgyZEYlwZgj560TAHMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGLDW5rZHLW2pS9NKPLF97JS/EgOMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by9iMjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyN2IxMWMy
LWFiOTAtNDIwZi1iNDljLTNjYzMzMmViN2Q2NC8wLzYyQzM1QjlBRDkxQ0I1QjZB
NTJGNEQyOEYyQzVGN0IyNTJGQzQ4MEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BABnmxwwDwQCAAIwCQMHACABDfStgDANBgkqhkiG9w0BAQsFAAOCAQEAVQA2046f
8JSB91IY+Yf1RPvLG5CBQJAr236FZ9Wqre4XLmAIQZ19oqS1N+XIPG0YpvTDXSJN
1dR3i6dwj4dq2KhWALn15pi4rv9oEyYFcM4YZMA4k03OxIi+sUwkUD7sYUJoucJO
cP/QTtFUtuCxDHoy1WUl8Hb6DOcCS5DmmnRS5rxKi1pyUzvJiwve7dso4Ra2Evfv
GLPatutjxFvc4ZX0f3yOY9yqp1y5FCP6Am3foQjt6y4ReAjtA93ygzslsa5yanJO
m1wOoWnlHnb1TrPhq5OZhT80GzIgbq6PC2u7Efx6xeM/dZ3sdpYzUQdCm+t1BoQf
hkfphTLqm+0bTQ==
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:32:07 2025 by rpki-client