This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer (raw, json) Hash identifier: YwSzpyfUY08KdNASiCOLlf8ZmFNe4zcjRqxWprpC0hM= Subject key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5958261B48A8A646D41ADBA0A00B6C0C74F1E5CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft caRepository: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 24 Nov 2025 17:18:16 +0000 Certificate not after: Mon 23 Nov 2026 17:23:16 +0000 Subordinate resources: IP: 103.136.12.0/22 IP: 2404:89c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:58:26:1b:48:a8:a6:46:d4:1a:db:a0:a0:0b:6c:0c:74:f1:e5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 24 17:18:16 2025 GMT Not After : Nov 23 17:23:16 2026 GMT Subject: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:ab:7f:17:e4:8d:db:f4:e6:c5:14:62:1f: 5b:58:02:dd:95:5c:57:2b:1a:50:c7:12:be:33:5a: b1:f3:7d:47:e4:e5:31:47:a1:65:57:47:09:ef:b9: a7:62:02:0a:d1:7c:08:8c:c8:9a:ca:47:cd:79:4a: de:0b:77:53:12:30:b4:6d:f3:23:37:78:19:8f:92: 6c:d0:41:c8:62:27:97:b3:f2:81:ad:ad:f8:2f:0e: 43:12:e1:fc:95:3b:51:ef:2b:50:78:39:ba:13:f4: b0:46:14:c6:00:58:3c:10:72:cd:67:26:4b:f5:e9: 8d:90:38:84:6e:55:a9:9c:78:fe:56:c0:57:ff:bc: 08:f6:15:c3:cb:b7:58:7e:8c:6e:82:9c:26:2a:c5: ea:c4:4b:c3:1d:48:55:59:90:e4:e7:5e:d9:e8:be: 02:f9:0c:84:04:aa:5d:b3:1f:d7:c2:7f:1e:7e:12: a3:26:03:66:6e:a3:1d:e9:1e:bc:c1:de:40:10:b4: c0:45:27:dd:ae:aa:35:cf:81:98:5e:5e:dd:ad:ae: 65:f5:52:e1:80:89:f3:62:20:f8:d5:63:82:a9:06: f0:df:cc:45:aa:c1:00:5e:a8:95:fb:40:f6:8e:db: 19:31:85:e5:51:b9:08:96:69:c8:ef:a6:71:ea:c9: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.12.0/22 IPv6: 2404:89c0::/32 Signature Algorithm: sha256WithRSAEncryption 66:10:9f:5f:af:1b:fd:6f:46:4d:45:60:99:64:70:c6:14:f8: 5e:08:1a:76:b5:8c:8c:5f:df:2d:3f:fd:de:d5:5e:b2:49:3b: 09:0c:ac:8d:57:fa:c3:2f:ae:55:06:cd:b3:08:a8:f7:84:67: e7:5b:ec:4e:9b:a0:17:8d:b1:25:f2:a5:39:55:5a:29:ab:13: 3b:a0:b6:e8:0c:80:a8:26:a7:02:32:71:d1:1f:9a:fd:48:bf: 87:69:c0:53:84:82:93:51:cd:4b:a1:84:ad:f8:1e:20:72:28: 19:a4:26:85:34:f9:6a:6c:9d:63:ec:0f:31:a0:82:fb:50:63: f1:23:10:a3:86:11:37:9a:a1:83:53:fd:55:4e:90:96:e0:d2: f2:ed:69:03:53:9f:a1:58:b4:a1:99:7e:e8:32:3c:a6:fc:0a: c2:33:24:e2:20:80:6d:8c:f1:60:68:91:7a:01:8e:23:c2:ff: 0c:4c:7a:1a:11:69:7e:90:a4:30:d9:73:57:53:39:3e:16:a1: 91:71:0b:ff:ef:30:15:8d:b7:c7:6d:9f:03:41:43:a6:b4:1e: 4f:f5:77:9b:3b:1e:17:83:2c:30:51:3e:69:1d:56:d9:69:09: f4:8e:db:0c:43:00:1a:11:c6:87:20:e7:5b:db:97:47:f4:d6: 0b:7b:56:53 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUWVgmG0iopkbUGtugoAtsDHTx5c4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNDE3MTgxNloX DTI2MTEyMzE3MjMxNlowMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhB MUVCREQ5RDM3RkNCRkIzN0I1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL44q38X5I3b9ObFFGIfW1gC3ZVcVysaUMcSvjNasfN9R+TlMUehZVdHCe+5 p2ICCtF8CIzImspHzXlK3gt3UxIwtG3zIzd4GY+SbNBByGInl7Pyga2t+C8OQxLh /JU7Ue8rUHg5uhP0sEYUxgBYPBByzWcmS/XpjZA4hG5VqZx4/lbAV/+8CPYVw8u3 WH6MboKcJirF6sRLwx1IVVmQ5Ode2ei+AvkMhASqXbMf18J/Hn4SoyYDZm6jHeke vMHeQBC0wEUn3a6qNc+BmF5e3a2uZfVS4YCJ82Ig+NVjgqkG8N/MRarBAF6olftA 9o7bGTGF5VG5CJZpyO+mcerJGQECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGpp78XIl5B8dMih692dN/y/s3tTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFi LTY1NmMtNDg5ZC05ZWQzLWNjYzc3YzgzMDE4ZC8wLzZBNjlFRkM1Qzg5NzkwN0M3 NEM4QTFFQkREOUQzN0ZDQkZCMzdCNTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJniAwwDQQCAAIwBwMFACQEicAwDQYJKoZIhvcNAQELBQADggEBAGYQn1+vG/1v Rk1FYJlkcMYU+F4IGna1jIxf3y0//d7VXrJJOwkMrI1X+sMvrlUGzbMIqPeEZ+db 7E6boBeNsSXypTlVWimrEzugtugMgKgmpwIycdEfmv1Iv4dpwFOEgpNRzUuhhK34 HiByKBmkJoU0+WpsnWPsDzGggvtQY/EjEKOGETeaoYNT/VVOkJbg0vLtaQNTn6FY tKGZfugyPKb8CsIzJOIggG2M8WBokXoBjiPC/wxMehoRaX6QpDDZc1dTOT4WoZFx C//vMBWNt8dtnwNBQ6a0Hk/1d5s7HheDLDBRPmkdVtlpCfSO2wxDABoRxocg51vb l0f01gt7VlM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:33 2025 by rpki-client