This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer (raw, json) Hash identifier: HOY7d+B/bJM4tVafNlVY27n2wcmTCBl/fuYDoYDfifU= Subject key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 194139947044C2588A03132CA7727F2192B7FAE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft caRepository: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 17 Nov 2025 09:30:52 +0000 Certificate not after: Mon 16 Nov 2026 09:35:52 +0000 Subordinate resources: IP: 203.175.126.0/23 IP: 2001:df3:5c40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:41:39:94:70:44:c2:58:8a:03:13:2c:a7:72:7f:21:92:b7:fa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 17 09:30:52 2025 GMT Not After : Nov 16 09:35:52 2026 GMT Subject: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:ad:a6:70:5d:e1:38:c8:41:ab:65:b0:84: 47:2b:88:c1:e1:00:b7:c9:f4:a5:3c:4d:94:98:e0: d2:f4:2d:d2:8d:d1:4c:4a:61:f8:56:8c:73:d0:96: 9b:94:86:7a:55:05:3f:3c:96:a3:89:84:f4:ef:d6: b8:18:7d:c6:45:86:08:e5:4a:83:0e:7e:85:fe:cb: 1b:41:62:c0:2c:21:41:c1:f8:ec:0e:ab:a1:26:e0: 46:f7:1e:f5:e4:36:23:e9:a2:19:3b:4b:1a:6d:e7: e4:74:50:0f:58:52:f5:9f:39:c4:83:98:65:2a:3a: d7:4b:e7:6d:3b:a5:a2:6d:60:e5:79:d9:55:a7:ce: 4f:31:da:e2:5a:33:42:c5:95:84:b3:3d:54:44:24: da:9c:6e:24:97:d2:0a:4a:bb:94:e1:b9:63:90:78: b8:9b:c5:9a:ff:e1:a9:00:f2:b1:37:9a:b1:26:a3: 27:22:c7:c6:04:d2:81:ef:ee:28:64:a7:e4:76:5c: 56:0f:a6:80:8a:20:83:c0:44:89:0f:2b:ad:35:d4: 8e:f0:42:7f:8b:ea:30:39:f2:41:9d:e8:ab:31:b0: 5f:66:5d:f0:4c:c3:f4:93:28:f9:20:1f:2a:7f:2c: f0:da:2d:30:85:bd:14:3a:61:d4:b7:96:07:96:d7: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.126.0/23 IPv6: 2001:df3:5c40::/48 Signature Algorithm: sha256WithRSAEncryption 08:b0:e2:06:5c:f4:3a:66:fa:1f:c7:e8:74:30:c6:af:4e:b6: ac:ba:7a:50:5d:19:54:56:b8:9c:63:f8:fa:bf:b6:95:42:f7: 0f:66:d8:3f:37:24:82:21:5b:f8:ab:28:1a:4d:fd:c2:8a:a6: 04:0e:22:e6:1e:4e:8d:5c:fa:eb:cc:e3:fc:8b:2b:61:36:87: cd:07:d5:a5:ca:6c:c7:ad:49:a2:fa:00:db:42:c3:86:1c:81: a1:47:13:a7:3c:d8:be:67:8b:2c:4a:6a:df:3b:0c:ef:0e:38: 66:70:42:69:7f:17:70:2d:0d:d1:68:55:dd:fb:d3:c4:50:fc: 9c:75:93:90:63:ef:38:ae:24:bd:88:e2:26:44:5c:6a:83:e3: 3c:45:e7:87:70:cb:61:28:f3:58:8d:5d:57:68:1b:1e:11:02: b7:e2:16:f1:bb:9d:3b:67:7f:d1:cb:71:ea:37:34:59:3a:ca: a3:e7:5a:00:9b:3b:4b:a1:e5:91:f9:5f:84:db:ec:7f:b6:ed: a0:fd:b2:4d:6c:dc:91:56:81:4d:60:58:ad:98:7c:9e:a9:87: 67:c7:6d:fb:4d:5a:37:56:b4:9e:e6:8f:6f:02:b0:49:5d:b7: 6c:b5:07:34:dc:e1:d3:d0:ad:67:0d:dc:60:97:bf:67:68:da: 2e:21:cb:ff -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUGUE5lHBEwliKAxMsp3J/IZK3+uAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExNzA5MzA1MloX DTI2MTExNjA5MzU1MlowMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZC MTdDQ0VEMjgzMkI0M0ZFNDFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3ZraZwXeE4yEGrZbCERyuIweEAt8n0pTxNlJjg0vQt0o3RTEph+FaMc9CW m5SGelUFPzyWo4mE9O/WuBh9xkWGCOVKgw5+hf7LG0FiwCwhQcH47A6roSbgRvce 9eQ2I+miGTtLGm3n5HRQD1hS9Z85xIOYZSo610vnbTulom1g5XnZVafOTzHa4loz QsWVhLM9VEQk2pxuJJfSCkq7lOG5Y5B4uJvFmv/hqQDysTeasSajJyLHxgTSge/u KGSn5HZcVg+mgIogg8BEiQ8rrTXUjvBCf4vqMDnyQZ3oqzGwX2Zd8EzD9JMo+SAf Kn8s8NotMIW9FDph1LeWB5bXhHsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGv9ZWqfpj+4mBaxfM7SgytD/kHNMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlMGNiNjMw LTYzNmEtNGI2YS05M2RmLWI1ZDkwOGZlNmVlNy8wLzZCRkQ2NTZBOUZBNjNGQjg5 ODE2QjE3Q0NFRDI4MzJCNDNGRTQxQ0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAHLr34wDwQCAAIwCQMHACABDfNcQDANBgkqhkiG9w0BAQsFAAOCAQEACLDiBlz0 Omb6H8fodDDGr062rLp6UF0ZVFa4nGP4+r+2lUL3D2bYPzckgiFb+KsoGk39woqm BA4i5h5OjVz668zj/IsrYTaHzQfVpcpsx61JovoA20LDhhyBoUcTpzzYvmeLLEpq 3zsM7w44ZnBCaX8XcC0N0WhV3fvTxFD8nHWTkGPvOK4kvYjiJkRcaoPjPEXnh3DL YSjzWI1dV2gbHhECt+IW8budO2d/0ctx6jc0WTrKo+daAJs7S6HlkflfhNvsf7bt oP2yTWzckVaBTWBYrZh8nqmHZ8dt+01aN1a0nuaPbwKwSV23bLUHNNzh09CtZw3c YJe/Z2jaLiHL/w== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:59 2025 by rpki-client