This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer (raw, json) Hash identifier: kvRcC3hSCJOvvT1knfyEQSJA6J9Uo/w1YSRzRFuEFsQ= Subject key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 596FB23A0380313E6568A86BA610FF412509E709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft caRepository: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 31 Oct 2025 21:22:57 +0000 Certificate not after: Fri 30 Oct 2026 21:27:57 +0000 Subordinate resources: IP: 103.132.169.0/24 IP: 103.148.79.0/24 IP: 2001:df2:c680::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6f:b2:3a:03:80:31:3e:65:68:a8:6b:a6:10:ff:41:25:09:e7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 31 21:22:57 2025 GMT Not After : Oct 30 21:27:57 2026 GMT Subject: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:4d:49:2c:13:b5:6b:d6:e5:aa:a7:7f:0c: 41:5c:48:7c:e5:c7:7a:98:57:ce:1b:85:b3:db:b9: 50:68:c7:33:b7:bd:27:57:8e:a0:b4:3a:92:b7:b8: fa:b9:fd:bd:4b:2a:b8:3f:ec:63:a9:59:3c:b8:3e: 84:f2:4f:1f:21:70:a4:bf:aa:8a:6c:17:2d:3e:a3: 0d:a3:b3:cb:7d:2b:d9:76:58:7b:56:14:e3:3b:2a: cd:9d:f9:f2:8f:33:45:f8:62:6c:58:2b:c8:fa:28: bf:41:53:13:38:86:74:6f:a8:39:64:e7:b0:93:8b: 5f:34:51:bc:d5:c6:2b:d8:0a:80:33:8f:56:8e:f9: 57:49:dc:4f:cc:b4:f9:8d:f5:5c:71:e4:a0:39:f2: e8:13:89:8d:c8:29:ed:59:dc:8e:bf:05:01:5d:f7: 6b:f6:c8:48:f8:20:b6:4c:64:b7:d0:40:c0:2f:d1: 1f:37:37:b9:35:9d:7e:fa:d6:5f:46:ca:79:17:2d: 22:38:9a:6b:e3:ab:8e:8c:72:e5:56:d1:53:d4:7c: 11:c1:a3:8a:a6:62:c6:ee:e9:4a:7d:82:c9:d7:e2: a5:8c:2b:70:f0:93:93:7f:65:f5:4f:7b:ef:15:d3: f0:dc:d9:5d:1a:84:20:75:ec:56:f8:22:40:d7:d7: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.169.0/24 103.148.79.0/24 IPv6: 2001:df2:c680::/48 Signature Algorithm: sha256WithRSAEncryption 22:8a:48:ba:07:b3:43:5c:85:c2:7d:9b:2d:0b:35:ef:d4:d3: e5:77:55:e1:f2:fd:f2:ca:0f:07:5e:82:4e:82:dc:28:da:54: ad:6a:69:9f:74:64:50:25:0f:36:87:bf:90:86:4d:41:42:ea: c5:47:81:fc:6e:1f:43:b0:b6:1f:f8:72:b3:07:a7:01:a9:8f: 65:ff:8f:3f:ae:66:32:b4:93:56:ee:51:bf:07:e3:91:ce:7f: 4d:b1:3e:fb:21:8e:ab:2e:66:09:71:e9:dc:2a:07:c5:3b:d5: 09:02:f8:3c:b0:6d:0d:38:cc:57:e7:4b:a4:c8:dc:87:4d:a5: 08:ec:fb:fa:91:27:7e:ed:d2:54:88:ad:30:0d:d4:01:3a:c6: 03:91:6d:c8:1d:c7:86:39:70:f2:31:18:12:dc:5d:8d:ee:5a: ea:21:e7:8e:6c:7e:16:7b:81:24:c9:7b:3d:19:7b:66:ac:f1: df:8f:b9:13:07:8a:f3:60:77:f7:07:9a:95:d6:cd:29:d7:a2: 28:0f:d2:47:6d:a9:d0:86:37:2d:7a:ca:3a:24:d6:e6:23:a9: 08:f6:b9:73:b6:1f:08:10:98:43:08:ff:9e:0c:55:ec:2b:6a: db:84:1e:55:61:4f:f2:f8:16:a0:5e:a9:23:77:67:b5:fd:e4: 23:d2:b8:69 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUWW+yOgOAMT5laKhrphD/QSUJ5wkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAzMTIxMjI1N1oX DTI2MTAzMDIxMjc1N1owMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0 NUZDNEI5MjA5MjNGNUU0OUUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEQTUksE7Vr1uWqp38MQVxIfOXHephXzhuFs9u5UGjHM7e9J1eOoLQ6kre4 +rn9vUsquD/sY6lZPLg+hPJPHyFwpL+qimwXLT6jDaOzy30r2XZYe1YU4zsqzZ35 8o8zRfhibFgryPoov0FTEziGdG+oOWTnsJOLXzRRvNXGK9gKgDOPVo75V0ncT8y0 +Y31XHHkoDny6BOJjcgp7Vncjr8FAV33a/bISPggtkxkt9BAwC/RHzc3uTWdfvrW X0bKeRctIjiaa+Orjoxy5VbRU9R8EcGjiqZixu7pSn2CydfipYwrcPCTk39l9U97 7xXT8NzZXRqEIHXsVvgiQNfXP5cCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHwzkhspMi66rGZF/EuSCSP15J4aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZTRjZDk2 LWNmYzEtNDU3Ny1hZDNmLTc5ODNjMDUyM2MxMC8wLzdDMzM5MjFCMjkzMjJFQkFB QzY2NDVGQzRCOTIwOTIzRjVFNDlFMUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnhKkDBABnlE8wDwQCAAIwCQMHACABDfLGgDANBgkqhkiG9w0BAQsFAAOCAQEA IopIugezQ1yFwn2bLQs179TT5XdV4fL98soPB16CToLcKNpUrWppn3RkUCUPNoe/ kIZNQULqxUeB/G4fQ7C2H/hyswenAamPZf+PP65mMrSTVu5Rvwfjkc5/TbE++yGO qy5mCXHp3CoHxTvVCQL4PLBtDTjMV+dLpMjch02lCOz7+pEnfu3SVIitMA3UATrG A5FtyB3Hhjlw8jEYEtxdje5a6iHnjmx+FnuBJMl7PRl7Zqzx34+5EweK82B39wea ldbNKdeiKA/SR22p0IY3LXrKOiTW5iOpCPa5c7YfCBCYQwj/ngxV7Ctq24QeVWFP 8vgWoF6pI3dntf3kI9K4aQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:16 2025 by rpki-client