This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.cer (raw, json) Hash identifier: fIYPUBPLRRQqPQKmLFBbkQgTAId2X3TBIT051vgmrQE= Subject key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 32165372C8EE260849AAE3246A55357D1C96FAB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft caRepository: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 09 Sep 2025 19:08:28 +0000 Certificate not after: Tue 08 Sep 2026 19:13:28 +0000 Subordinate resources: IP: 103.156.232.0/23 IP: 2406:8fc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:16:53:72:c8:ee:26:08:49:aa:e3:24:6a:55:35:7d:1c:96:fa:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 9 19:08:28 2025 GMT Not After : Sep 8 19:13:28 2026 GMT Subject: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:da:5d:fe:b1:4d:62:9b:d4:86:50:9b:55: ab:b5:4b:1e:db:b0:d1:f4:ec:4c:e2:8a:a5:64:8e: fc:f2:1d:e4:72:c3:cb:94:3d:4c:05:80:fd:48:55: cc:15:dd:95:6e:22:85:fa:92:9c:f3:9e:8d:fe:58: d1:a0:f6:a5:4c:b1:8d:13:dd:9f:de:86:af:d6:3f: d9:1f:ce:99:13:8b:b5:46:11:75:72:f6:53:e3:71: d7:ed:7e:47:ed:33:05:9f:b2:ec:5f:a4:32:dd:82: d1:58:e3:c9:74:c3:47:56:91:34:b2:92:79:88:8a: 88:ea:6a:a8:e3:ee:55:f6:c7:bb:5d:a7:40:98:82: 0c:f3:0e:c9:c9:50:53:3c:7f:6e:cb:f9:09:6b:4f: 99:59:ec:48:35:ae:52:a5:55:ce:20:85:86:bb:d8: 66:01:91:43:88:ec:97:e5:f1:9f:86:f5:d5:c9:7d: 02:43:ac:03:30:15:d3:4f:99:e0:a2:de:6c:a6:28: eb:e1:6d:bb:33:f1:04:eb:5d:63:58:da:78:3f:d6: d0:c0:e9:ca:68:f8:31:fe:59:60:d1:6d:0b:a7:11: dd:0e:7f:3d:c5:24:d5:c4:7f:ed:6a:57:c2:e4:17: d8:85:b8:c0:05:64:14:cc:ec:3f:c5:16:66:b3:61: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.232.0/23 IPv6: 2406:8fc0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:90:61:11:0d:72:ec:38:66:28:44:11:c4:fd:f2:a1:07:1a: 78:c9:10:e5:04:28:57:fb:e0:82:0b:0d:a8:da:ba:bc:9c:bf: 25:fa:80:bf:ff:89:4d:b8:c8:89:eb:03:54:53:66:fc:4c:55: 3d:87:f2:f2:5a:4b:1d:d4:17:86:89:d3:e0:ec:76:fe:49:18: 7b:d5:48:3c:e2:36:5e:05:cc:b6:03:9b:eb:7a:42:2a:67:0b: 4b:5a:0e:db:bc:dd:30:76:dc:fc:7e:c4:a6:af:ca:1f:bb:06: b9:53:e7:d2:0f:86:d9:51:da:a5:7a:52:d1:2c:46:78:d3:62: bc:76:3f:64:5f:ae:8a:ba:73:95:f2:71:62:17:07:be:ae:38: b9:ef:1d:ae:70:31:4d:69:8a:35:67:70:73:74:b3:ec:d8:03: 6a:4f:a8:f8:5c:52:5c:36:b1:52:cd:0f:48:2c:44:64:e0:b9: 3f:f9:c1:2e:dd:e6:e1:03:c1:73:56:5f:69:c2:ef:47:d0:6f: ac:04:5f:06:b0:d7:18:58:19:2e:e5:8b:b9:3a:9d:66:78:d3: 64:1f:19:4a:23:4b:49:54:df:f5:a5:aa:61:e5:62:50:0c:e2: 0c:f6:46:35:c5:f8:c3:2b:0e:c6:dd:fa:6f:06:98:93:f7:e1: 68:14:54:1c -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUMhZTcsjuJghJquMkalU1fRyW+rgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwOTE5MDgyOFoX DTI2MDkwODE5MTMyOFowMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJD RTFDM0E5MjE4OEEyQTgzMzRDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoS2l3+sU1im9SGUJtVq7VLHtuw0fTsTOKKpWSO/PId5HLDy5Q9TAWA/UhV zBXdlW4ihfqSnPOejf5Y0aD2pUyxjRPdn96Gr9Y/2R/OmROLtUYRdXL2U+Nx1+1+ R+0zBZ+y7F+kMt2C0VjjyXTDR1aRNLKSeYiKiOpqqOPuVfbHu12nQJiCDPMOyclQ Uzx/bsv5CWtPmVnsSDWuUqVVziCFhrvYZgGRQ4jsl+Xxn4b11cl9AkOsAzAV00+Z 4KLebKYo6+FtuzPxBOtdY1jaeD/W0MDpymj4Mf5ZYNFtC6cR3Q5/PcUk1cR/7WpX wuQX2IW4wAVkFMzsP8UWZrNhwwMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHspuvSBJHZ2FILOHDqSGIoqgzTOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MmYzZGI0 LTQxZTItNDAyOC05MDhiLTUwOTdjOWIxYzFmNS8wLzdCMjlCQUY0ODEyNDc2NzYx NDgyQ0UxQzNBOTIxODhBMkE4MzM0Q0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnOgwDQQCAAIwBwMFACQGj8AwDQYJKoZIhvcNAQELBQADggEBAAqQYRENcuw4 ZihEEcT98qEHGnjJEOUEKFf74IILDajaurycvyX6gL//iU24yInrA1RTZvxMVT2H 8vJaSx3UF4aJ0+Dsdv5JGHvVSDziNl4FzLYDm+t6QipnC0taDtu83TB23Px+xKav yh+7BrlT59IPhtlR2qV6UtEsRnjTYrx2P2Rfroq6c5XycWIXB76uOLnvHa5wMU1p ijVncHN0s+zYA2pPqPhcUlw2sVLND0gsRGTguT/5wS7d5uEDwXNWX2nC70fQb6wE Xwaw1xhYGS7li7k6nWZ402QfGUojS0lU3/WlqmHlYlAM4gz2RjXF+MMrDsbd+m8G mJP34WgUVBw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:10 2025 by rpki-client