This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.cer (raw, json) Hash identifier: xkghXcd7Iz1SG/wm7QZvUeJKJjRdd0BUR+cjn8SsRgk= Subject key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3E7E0A50F2ABC14FECA72E63D4D50F17B66C5371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft caRepository: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 24 Oct 2025 17:43:33 +0000 Certificate not after: Fri 23 Oct 2026 17:48:33 +0000 Subordinate resources: IP: 103.16.223.0/24 IP: 103.51.131.0/24 IP: 103.108.119.0/24 IP: 2001:df5:3200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7e:0a:50:f2:ab:c1:4f:ec:a7:2e:63:d4:d5:0f:17:b6:6c:53:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 24 17:43:33 2025 GMT Not After : Oct 23 17:48:33 2026 GMT Subject: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:d7:f3:b8:f9:f6:9f:d2:b0:41:b8:65:fc: db:63:07:7d:01:10:d1:fa:0f:1a:0c:8a:50:6e:c9: e7:37:02:6a:6c:f2:65:f6:af:5f:8c:30:91:21:f3: 4c:69:85:10:58:8c:d5:b1:18:f8:72:9c:ed:da:4f: c5:06:58:f2:cd:5f:b2:75:a0:f6:28:c7:5b:fe:6a: dc:6b:b8:34:c5:af:89:f9:0f:34:ee:ef:01:5d:86: b4:ae:d6:fd:ce:3a:2f:69:85:a9:48:03:ac:21:2f: bc:ca:d7:07:23:7a:9f:cc:f6:e3:93:39:2c:7e:7b: bf:65:ed:72:b5:1b:18:e0:08:a3:2a:a1:71:79:13: 51:f3:ef:07:5b:6a:80:d6:f2:53:d8:58:22:b1:65: 74:18:2f:5c:88:a8:5b:0c:80:1b:38:51:be:9f:e3: 49:73:8b:ea:aa:14:69:42:4a:89:6d:29:fc:49:10: 06:53:e5:91:ae:41:0e:39:3b:27:e6:cf:77:35:ec: ca:9d:ab:d6:f6:80:5a:bd:04:9e:e3:10:75:71:40: 80:33:c6:57:29:23:93:d9:9c:5e:39:a9:74:9e:9f: ab:d4:d1:83:85:9d:17:7f:a7:9a:8a:6d:2e:06:6c: 87:83:2c:0f:59:9e:34:81:7e:2d:7a:4f:5d:1d:7d: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.223.0/24 103.51.131.0/24 103.108.119.0/24 IPv6: 2001:df5:3200::/48 Signature Algorithm: sha256WithRSAEncryption 66:ab:60:5b:df:19:a7:e8:30:09:e9:e1:de:ff:9d:14:9a:46: 37:de:b2:c1:34:d7:78:fd:e4:e4:6a:57:6d:12:fa:e3:b8:01: 05:d1:3e:a7:3c:fe:f9:b7:a2:4d:8f:3c:ee:b4:58:e7:80:7f: 08:77:e0:44:13:66:74:5f:c7:dc:f9:31:27:23:73:93:7e:95: 6f:be:14:72:b1:0d:75:2a:ab:09:d2:33:90:58:08:b0:84:b3: 0d:26:b6:46:9f:67:88:e7:53:b7:15:b0:1b:df:b0:29:9c:c7: cb:e2:a6:fe:fa:70:69:0d:b9:1a:af:ff:63:89:69:5a:1f:d8: ac:72:71:aa:37:db:ee:67:b3:9c:cf:f5:f5:c8:47:82:11:1e: 3b:ef:c0:0e:8d:1d:21:6c:6f:f8:64:10:2b:86:31:43:b9:3a: c4:dc:65:72:ac:80:53:4d:6f:61:2e:cf:6f:be:57:94:62:f7: 06:44:88:fb:21:c5:6e:23:74:f9:1b:3d:df:94:e5:7a:b5:b6: 98:5a:72:47:9d:0d:3a:d3:be:45:f8:76:5a:b0:a8:cf:07:33: b0:96:e9:2d:92:1c:4a:71:ef:9a:fa:e2:67:9f:84:3e:67:87: 7b:07:8d:f3:ac:41:6a:0f:3e:e6:e7:8c:30:f4:17:47:81:e5: 0d:09:89:5a -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUPn4KUPKrwU/spy5j1NUPF7ZsU3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNDE3NDMzM1oX DTI2MTAyMzE3NDgzM1owMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0 ODJBMDMwMkFGMTJCM0NCQzY3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1G1/O4+faf0rBBuGX822MHfQEQ0foPGgyKUG7J5zcCamzyZfavX4wwkSHz TGmFEFiM1bEY+HKc7dpPxQZY8s1fsnWg9ijHW/5q3Gu4NMWvifkPNO7vAV2GtK7W /c46L2mFqUgDrCEvvMrXByN6n8z245M5LH57v2XtcrUbGOAIoyqhcXkTUfPvB1tq gNbyU9hYIrFldBgvXIioWwyAGzhRvp/jSXOL6qoUaUJKiW0p/EkQBlPlka5BDjk7 J+bPdzXsyp2r1vaAWr0EnuMQdXFAgDPGVykjk9mcXjmpdJ6fq9TRg4WdF3+nmopt LgZsh4MsD1meNIF+LXpPXR19wwUCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIBDetrd9chSKEVIKgMCrxKzy8Z9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JiYzgzYjU1 LWM4YzEtNDYxZC1iMjhiLTBkNGE5OTUzZTFkZC8wLzgwNDM3QURBRERGNUM4NTIy ODQ1NDgyQTAzMDJBRjEyQjNDQkM2N0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnEN8DBABnM4MDBABnbHcwDwQCAAIwCQMHACABDfUyADANBgkqhkiG9w0BAQsF AAOCAQEAZqtgW98Zp+gwCenh3v+dFJpGN96ywTTXeP3k5GpXbRL647gBBdE+pzz+ +beiTY887rRY54B/CHfgRBNmdF/H3PkxJyNzk36Vb74UcrENdSqrCdIzkFgIsISz DSa2Rp9niOdTtxWwG9+wKZzHy+Km/vpwaQ25Gq//Y4lpWh/YrHJxqjfb7meznM/1 9chHghEeO+/ADo0dIWxv+GQQK4YxQ7k6xNxlcqyAU01vYS7Pb75XlGL3BkSI+yHF biN0+Rs935TlerW2mFpyR50NOtO+Rfh2WrCozwczsJbpLZIcSnHvmvriZ5+EPmeH eweN86xBag8+5ueMMPQXR4HlDQmJWg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:52 2025 by rpki-client