This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.cer (raw, json)
Hash identifier: hfjpS2tQYbAKUtVO/m8kd7yS0pNLUjiyXBdZWo39cyQ=
Subject key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 91E6E860ED946D6B2CE53B02C3CB7359369FF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
caRepository: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 19 Mar 2025 04:17:48 +0000
Certificate not after: Wed 18 Mar 2026 04:22:48 +0000
Subordinate resources: IP: 103.7.226.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
91:e6:e8:60:ed:94:6d:6b:2c:e5:3b:02:c3:cb:73:59:36:9f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 19 04:17:48 2025 GMT
Not After : Mar 18 04:22:48 2026 GMT
Subject: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:6a:04:eb:e4:87:25:90:fd:10:a5:e8:5d:
40:e5:df:01:88:7c:41:fa:05:2c:44:84:a4:a6:24:
d3:9d:8f:b6:15:3c:e4:7f:fe:14:d0:69:0f:7b:98:
84:69:b1:c9:06:b8:9a:90:fa:68:22:a8:da:d7:74:
5e:55:e9:aa:19:cd:c3:c1:bd:ff:d8:e3:20:cc:5d:
1d:5d:af:cd:d1:39:9b:5f:40:ba:28:22:73:31:19:
b6:ad:60:98:27:d2:a0:d8:51:1f:1a:30:54:36:ac:
66:fb:5c:1e:6c:22:7c:0c:24:e0:72:d5:12:82:ad:
e1:3c:94:21:13:1f:8c:82:43:9f:11:2a:99:36:b5:
05:47:f8:e6:ca:f9:2c:91:2e:40:5a:dd:21:82:62:
f9:33:03:3f:b7:6f:e2:de:a7:39:34:7b:56:23:03:
ba:ad:e8:0a:1f:fb:1c:eb:9d:91:6b:66:7d:57:f5:
53:d0:48:7d:5f:22:12:93:90:23:30:c3:e5:95:45:
b4:6a:5e:5d:20:83:15:c6:88:96:84:ec:53:7a:5b:
0e:b9:42:7e:c0:ca:4c:a2:55:29:b3:4a:11:e3:a1:
5a:6f:b7:1d:4f:6e:94:78:dd:e5:91:51:c5:58:65:
71:7c:e6:8d:c2:7a:98:fc:49:d5:e2:c5:40:5c:8d:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.7.226.0/23
Signature Algorithm: sha256WithRSAEncryption
81:a1:cb:9c:e1:98:6b:ef:f8:09:f9:02:f5:51:4a:18:d7:10:
47:07:d7:6a:b0:46:3c:80:34:d6:cc:bc:c2:40:fd:48:99:ad:
d1:82:12:bf:eb:fd:9d:ea:a9:fd:c7:36:fe:4d:5f:20:b6:29:
6e:55:e6:11:c9:cd:06:13:fb:51:68:9c:75:bd:9e:88:a0:84:
98:0c:08:56:fc:c0:6c:a2:63:9f:28:7f:3c:b5:d1:d0:c6:e0:
72:30:d6:4b:01:f2:09:2d:62:46:8e:3c:4c:98:83:c2:28:06:
32:46:97:80:bd:50:86:cb:9a:53:69:4b:79:a9:1b:81:89:04:
a9:2e:8a:24:6b:58:23:a3:a4:c3:b2:9d:dd:a6:03:cb:44:fd:
d1:95:47:68:32:b9:58:3c:8d:3b:b8:7c:84:36:42:9e:2c:4b:
6f:76:49:63:8f:3a:7f:37:d8:81:4d:5c:6d:c7:19:46:83:72:
08:4c:ac:04:9f:e2:ac:34:2b:cf:73:ba:be:08:8c:b5:af:dc:
4b:d6:93:44:dd:f9:4c:4a:a3:15:9e:9c:e4:e9:e9:2c:9e:e6:
78:d5:6c:b2:4b:07:e3:a2:ac:e2:9d:79:26:08:a6:36:15:38:
c9:27:71:c1:e2:7a:41:a8:c4:ca:28:8b:95:67:77:8a:46:0d:
36:4e:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:18:26 2025 by rpki-client