This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer (raw, json)
Hash identifier: ggkj+3bha6vCpoxtMHj0YGRJLHpGOri0iTUgiqZs9y4=
Subject key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 43F3D3B7DCFAC77DFA2FD8B1736141C23CE4DC5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
caRepository: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sat 27 Sep 2025 21:11:23 +0000
Certificate not after: Sat 26 Sep 2026 21:16:23 +0000
Subordinate resources: IP: 103.179.89.0/24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f3:d3:b7:dc:fa:c7:7d:fa:2f:d8:b1:73:61:41:c2:3c:e4:dc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 27 21:11:23 2025 GMT
Not After : Sep 26 21:16:23 2026 GMT
Subject: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:e7:f4:f5:b1:c0:b2:46:54:3c:ac:42:a0:
81:08:ea:7f:88:84:a4:f6:a9:37:dc:37:bf:0b:b9:
6d:2c:35:af:84:fb:d8:d1:20:80:98:24:90:bd:d9:
d8:f6:36:e0:c2:48:a1:6e:c5:97:8e:1f:ef:ec:d5:
06:5d:a5:fb:1c:15:c0:2d:62:21:ce:a4:fc:2f:1d:
cc:2b:08:52:d5:4f:49:6d:57:7e:46:c5:1c:c6:cb:
63:3e:20:fe:0e:89:ac:c1:1d:5b:18:1d:6d:47:ac:
55:85:6c:a7:89:83:ca:c1:1b:ba:ff:89:68:46:3d:
e4:da:e6:29:dc:3e:6a:b9:49:2a:f3:4c:1e:78:ce:
04:a0:9e:d1:89:db:9c:8d:71:a6:7a:67:b2:4e:70:
db:de:d8:6a:db:36:a7:c7:33:ea:5d:bc:db:c2:93:
55:74:f5:cf:0c:8b:cd:b8:0e:b2:ca:80:95:a7:23:
9e:fd:8c:98:01:e7:24:7f:dc:19:7e:35:ee:1b:97:
91:95:fb:6a:a3:5c:d9:ac:cd:95:ef:1d:61:00:82:
9b:a7:48:a4:6a:b6:72:41:ff:68:91:03:96:d1:9b:
be:13:4a:b3:0a:4c:2f:58:17:bf:9e:fa:b2:7e:a3:
97:fc:ff:19:0d:80:6a:05:c2:11:10:e4:d5:1c:82:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.89.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c6:ff:9c:70:03:64:e4:37:04:16:c1:53:ce:59:f6:81:3f:
55:97:e7:93:a7:3e:21:16:ac:83:71:ec:bf:f7:24:47:91:2b:
3b:eb:0a:94:ec:6e:bc:e3:77:2c:cc:00:d9:a8:7e:89:cb:87:
bb:83:9b:1d:5d:7a:8b:98:95:80:e5:e8:9f:ae:14:a6:cf:95:
8d:27:76:b1:c1:41:59:ce:4b:04:10:31:78:c8:ff:cc:18:72:
42:44:11:80:cc:fd:09:0a:bd:93:7d:44:48:4d:90:8d:da:de:
49:f3:96:88:53:a2:bd:0c:05:de:03:6c:5d:e9:58:43:ca:dd:
bf:29:fd:e4:be:22:38:45:53:ac:ec:3e:a9:c0:dc:18:17:d6:
29:6a:7c:82:66:14:74:ef:b5:e1:b7:55:4c:ae:1a:8b:92:ea:
f1:07:07:df:65:ff:a6:fd:1f:32:11:5b:12:01:ae:52:7f:11:
52:1b:ce:41:8d:a0:84:38:54:32:93:7f:71:9b:b0:ac:ec:09:
e5:e6:7e:ee:d4:e2:28:5e:f2:63:ed:ab:13:44:67:83:c2:eb:
ef:91:4f:04:ca:94:8f:8a:b9:78:26:c3:6c:27:3e:d7:0c:4e:
cd:68:4e:03:42:7c:ed:9b:07:df:c9:83:a1:46:6e:6b:4b:3d:
15:0b:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:52 2025 by rpki-client