This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer (raw, json) Hash identifier: GDg039FWYEddkDSPhet595aOmbnXJn583kAV+9qyVBo= Subject key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F8AABA0DC7D5FACD47F6C49B41154EC56326EE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft caRepository: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 Oct 2025 22:47:58 +0000 Certificate not after: Fri 23 Oct 2026 22:52:58 +0000 Subordinate resources: IP: 103.46.4.0/23 IP: 2001:df1:be40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8a:ab:a0:dc:7d:5f:ac:d4:7f:6c:49:b4:11:54:ec:56:32:6e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 24 22:47:58 2025 GMT Not After : Oct 23 22:52:58 2026 GMT Subject: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:07:d0:ea:ef:f9:47:d3:0e:df:2c:5a:31: 2a:ff:94:43:3d:1b:ed:7c:9f:4d:fd:aa:49:a3:d1: 07:08:de:cd:26:54:20:e4:a0:25:bd:9e:9f:6b:13: bc:74:d3:72:aa:69:90:a5:d8:21:6e:2b:8f:68:c5: 08:fb:56:59:02:f7:6e:92:af:d8:a1:cd:1a:e0:87: 39:10:0c:89:22:c9:4e:bf:9e:0c:aa:20:30:60:63: 5c:07:3d:92:2a:fd:81:24:5e:5f:39:71:1f:15:6c: e4:bc:9f:f2:41:2d:1e:88:09:77:df:1f:79:71:53: 5b:1e:e0:9f:95:af:ce:23:28:74:b6:4b:d4:b0:88: 4c:5c:7c:ce:df:8d:2c:45:01:1a:cd:17:94:d0:ad: 70:5d:8a:ac:46:d9:60:80:a1:38:22:51:01:fb:85: 2e:cb:be:39:8f:63:60:bc:c0:ef:36:f0:00:6f:62: bf:bb:5c:c1:be:fa:6d:6f:a5:9e:ef:44:74:cc:2b: f0:f0:d3:00:17:be:80:61:32:19:2c:d5:f6:a6:6f: 36:73:2c:64:cc:b1:1a:4f:88:05:ed:3b:1b:ff:68: 69:48:55:a1:89:dc:11:c6:c9:5e:a6:cc:58:ba:bd: 99:c6:af:1b:9a:e7:28:86:14:93:29:e7:6c:2d:e6: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.46.4.0/23 IPv6: 2001:df1:be40::/48 Signature Algorithm: sha256WithRSAEncryption 94:ac:f0:a7:37:c1:dc:19:e3:3a:12:0c:df:d2:f2:de:3f:79: b2:4f:ab:55:4a:11:91:f5:46:07:ea:8e:ad:1c:a0:aa:1d:12: 18:df:09:10:52:fb:99:4f:82:e3:b2:93:73:85:f4:67:0e:cd: 19:27:f5:b8:d1:4e:23:42:8b:b8:0e:5c:7a:42:da:d2:c4:72: 5c:40:5b:db:ad:56:58:e1:63:ec:1d:f2:5d:53:d3:57:b0:7b: ac:5b:42:f1:e5:b5:44:93:e5:09:c5:4e:71:41:19:92:32:a3: 28:e2:ba:24:f4:56:26:ee:9b:f5:db:cd:fc:d5:76:31:ee:47: 34:01:e7:04:b6:00:59:66:69:a6:99:fc:fb:88:22:b6:b1:18: 6a:34:f1:85:d8:75:2c:48:d0:a1:6e:c5:60:34:9d:51:89:9f: 8e:b0:2e:e7:e2:f7:75:ae:88:62:be:2d:69:d4:b9:f5:66:68: 3e:aa:95:cf:87:cd:29:8b:e6:d8:c7:7a:f1:f5:2b:44:b2:82: b3:6f:d8:05:2c:cd:53:5b:20:57:89:6f:fa:50:ee:b2:54:e2: 20:bb:cc:51:4d:4c:68:4e:dd:81:e9:57:e6:ed:7e:87:fb:6b: 90:b6:32:57:ba:7b:40:79:99:3c:d3:1d:8a:90:e5:8b:92:a0: 4a:e5:02:8e -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUX4qroNx9X6zUf2xJtBFU7FYybukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNDIyNDc1OFoX DTI2MTAyMzIyNTI1OFowMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5 OTBBN0JFQ0FEODVFOEJFQjk1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANk6B9Dq7/lH0w7fLFoxKv+UQz0b7XyfTf2qSaPRBwjezSZUIOSgJb2en2sT vHTTcqppkKXYIW4rj2jFCPtWWQL3bpKv2KHNGuCHORAMiSLJTr+eDKogMGBjXAc9 kir9gSReXzlxHxVs5Lyf8kEtHogJd98feXFTWx7gn5WvziModLZL1LCITFx8zt+N LEUBGs0XlNCtcF2KrEbZYIChOCJRAfuFLsu+OY9jYLzA7zbwAG9iv7tcwb76bW+l nu9EdMwr8PDTABe+gGEyGSzV9qZvNnMsZMyxGk+IBe07G/9oaUhVoYncEcbJXqbM WLq9mcavG5rnKIYUkynnbC3myaUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1u39shuLfmp1qZCnvsrYXovrlTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzhjZGE1 LTM0ODMtNDJiMC1iMzg1LWZjMDcwNzE2ZmJjYy8wLzdENkVERkRCMjFCOEI3RTZB NzVBOTkwQTdCRUNBRDg1RThCRUI5NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnLgQwDwQCAAIwCQMHACABDfG+QDANBgkqhkiG9w0BAQsFAAOCAQEAlKzwpzfB 3BnjOhIM39Ly3j95sk+rVUoRkfVGB+qOrRygqh0SGN8JEFL7mU+C47KTc4X0Zw7N GSf1uNFOI0KLuA5cekLa0sRyXEBb261WWOFj7B3yXVPTV7B7rFtC8eW1RJPlCcVO cUEZkjKjKOK6JPRWJu6b9dvN/NV2Me5HNAHnBLYAWWZpppn8+4gitrEYajTxhdh1 LEjQoW7FYDSdUYmfjrAu5+L3da6IYr4tadS59WZoPqqVz4fNKYvm2Md68fUrRLKC s2/YBSzNU1sgV4lv+lDuslTiILvMUU1MaE7dgelX5u1+h/trkLYyV7p7QHmZPNMd ipDli5KgSuUCjg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:11 2025 by rpki-client