This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer (raw, json) Hash identifier: uuOHjjbhTB71DwcYNxyQy4VpegcyjJndHWkOxC548qg= Subject key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 044BC5B6E693E4315DD6182BDBF8E4BC5E0F5B86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft caRepository: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Nov 2025 09:18:56 +0000 Certificate not after: Wed 04 Nov 2026 09:23:56 +0000 Subordinate resources: IP: 2001:df4:9a40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4b:c5:b6:e6:93:e4:31:5d:d6:18:2b:db:f8:e4:bc:5e:0f:5b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 5 09:18:56 2025 GMT Not After : Nov 4 09:23:56 2026 GMT Subject: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:88:ba:e8:d5:de:13:79:da:67:8c:8e:3c:cc: 06:f7:c1:de:d1:ce:6f:75:d5:21:93:8b:2f:1d:50: 25:e5:eb:91:9c:5c:09:44:7b:5f:cc:63:c1:48:d7: b0:f6:65:d9:81:21:af:10:ae:a6:61:e9:4a:25:bf: 6a:51:73:99:62:1b:46:66:fa:97:d7:b2:24:d1:72: f3:f3:45:c4:dd:29:36:89:0e:f7:eb:1b:1e:c6:05: 00:0b:2e:c1:0b:a6:76:a8:da:65:1f:2d:d2:42:5d: 6a:f4:2f:0f:3e:68:06:8b:6b:d6:8f:ff:65:7c:fd: 52:d1:4a:c5:6c:2c:44:27:41:d4:bc:4d:26:98:b5: a6:91:c3:4f:87:e1:d3:27:11:9a:64:7d:71:fb:12: 59:36:ff:d0:f3:e2:a0:91:cb:56:84:7d:22:e8:62: 63:e2:44:1f:ca:f0:80:01:0f:88:43:be:44:7c:5e: 26:f1:96:16:8a:c2:eb:4c:96:3d:ac:10:3c:cd:4e: 85:cd:ee:4f:fc:46:e8:11:07:c5:3b:fe:c6:cf:70: d4:36:75:7a:f2:d3:57:37:a6:58:f6:74:0e:ad:ab: 7a:05:06:2a:4a:96:02:ee:d2:33:4d:f4:f0:72:67: 2a:af:ef:01:c4:00:60:ca:43:74:8c:c6:06:47:f9: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9a40::/48 Signature Algorithm: sha256WithRSAEncryption 62:8a:71:85:2f:58:f4:1e:d8:b9:f2:ca:01:5b:c6:99:60:ff: f6:aa:e8:09:79:71:4a:42:9a:1b:3e:e5:06:e7:69:ff:20:37: 56:45:bc:3d:81:0d:c9:33:8c:f4:3c:aa:ab:04:e8:78:d4:5b: c6:0e:b9:d4:65:90:c9:4d:f4:52:85:36:7b:30:76:4e:a0:5f: 1a:6b:58:23:cc:8b:cc:f0:40:f9:8a:14:a4:1d:44:fd:30:9b: 7f:b2:8b:29:65:22:5e:f4:3e:7d:74:ad:b2:95:4e:4b:bb:2a: b6:14:f9:a4:7b:20:4e:79:9a:ac:e8:a5:30:8e:0d:02:83:44: a7:74:02:6f:f4:42:58:32:a5:52:6e:05:df:c5:28:22:14:7f: e4:4a:a2:95:e8:61:ad:12:e6:31:6b:fa:5b:b9:74:74:56:98: e7:d5:5d:58:f8:30:98:bd:a8:bb:d5:ff:d5:dd:00:3e:cc:e0: 69:b6:db:b3:6c:76:80:0c:3a:0c:4e:62:f6:e4:4b:65:fb:2c: 06:41:0f:a7:fb:57:0c:57:54:cb:e8:33:07:ca:2a:36:6e:67: e6:48:53:e3:1c:f7:7e:04:d9:4f:69:55:0c:bb:68:62:cb:67: 63:94:c2:16:dd:28:28:b6:84:32:a6:2f:94:a0:e2:c7:15:d1: eb:3b:45:d6 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUBEvFtuaT5DFd1hgr2/jkvF4PW4YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNTA5MTg1NloX DTI2MTEwNDA5MjM1NlowMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1 NjY5NUNBQkU5Q0U3RkRGNUYyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKIuujV3hN52meMjjzMBvfB3tHOb3XVIZOLLx1QJeXrkZxcCUR7X8xjwUjX sPZl2YEhrxCupmHpSiW/alFzmWIbRmb6l9eyJNFy8/NFxN0pNokO9+sbHsYFAAsu wQumdqjaZR8t0kJdavQvDz5oBotr1o//ZXz9UtFKxWwsRCdB1LxNJpi1ppHDT4fh 0ycRmmR9cfsSWTb/0PPioJHLVoR9IuhiY+JEH8rwgAEPiEO+RHxeJvGWForC60yW PawQPM1Ohc3uT/xG6BEHxTv+xs9w1DZ1evLTVzemWPZ0Dq2regUGKkqWAu7SM030 8HJnKq/vAcQAYMpDdIzGBkf5fdsCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH6N4VSeidS0gLVWaVyr6c5/318kMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zM2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRm LTM4MjMtNDhhZi05NTNkLWFhYTg3M2IwZmI2YS8xLzdFOERFMTU0OUU4OUQ0QjQ4 MEI1NTY2OTVDQUJFOUNFN0ZERjVGMjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30mkAwDQYJKoZIhvcNAQELBQADggEBAGKKcYUvWPQe2LnyygFbxplg//aq 6Al5cUpCmhs+5Qbnaf8gN1ZFvD2BDckzjPQ8qqsE6HjUW8YOudRlkMlN9FKFNnsw dk6gXxprWCPMi8zwQPmKFKQdRP0wm3+yiyllIl70Pn10rbKVTku7KrYU+aR7IE55 mqzopTCODQKDRKd0Am/0QlgypVJuBd/FKCIUf+RKopXoYa0S5jFr+lu5dHRWmOfV XVj4MJi9qLvV/9XdAD7M4Gm227NsdoAMOgxOYvbkS2X7LAZBD6f7VwxXVMvoMwfK KjZuZ+ZIU+Mc934E2U9pVQy7aGLLZ2OUwhbdKCi2hDKmL5Sg4scV0es7RdY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:39 2025 by rpki-client