This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer (raw, json) Hash identifier: 4kqZhIN90JxTTPpvX4iNy3VCh5A8JHPvNNsoQeR+byM= Subject key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 19821AE4C432244B51961E5B0FDE43D39C9C9AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft caRepository: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Jul 2025 15:57:52 +0000 Certificate not after: Fri 24 Jul 2026 16:02:52 +0000 Subordinate resources: IP: 103.62.202.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:82:1a:e4:c4:32:24:4b:51:96:1e:5b:0f:de:43:d3:9c:9c:9a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 25 15:57:52 2025 GMT Not After : Jul 24 16:02:52 2026 GMT Subject: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:17:4e:db:85:5f:56:f7:3d:1e:3c:22:d2: 70:a3:3b:11:1e:2e:ce:1d:05:fc:80:53:54:94:4b: f5:80:e3:28:71:f0:3f:55:cc:98:3f:11:38:20:a4: 6d:64:40:5a:74:fa:d1:61:59:ab:de:9b:39:2d:44: de:2b:86:02:94:6a:84:c5:76:3e:43:6b:75:2f:a8: 07:db:c5:cc:23:93:e6:8d:aa:34:6c:ce:36:82:22: f0:61:1b:50:42:e7:d3:d5:9c:4b:95:1f:b5:bc:ae: ad:77:09:ff:13:0d:c7:d8:ec:42:6d:6b:e6:7b:cb: 83:37:36:22:f6:f5:d9:57:1b:95:dc:df:4b:25:8d: 57:3d:aa:aa:ea:ca:69:20:72:c1:45:f5:2c:b8:c8: 9a:20:32:f6:ab:50:9f:9d:cd:13:a4:84:67:29:e7: 7d:c1:74:97:6d:55:d9:19:a4:5e:0a:c4:24:9f:5e: a9:25:90:00:1d:bf:36:bd:ca:76:e1:26:cc:d5:fd: 9a:27:32:4f:1d:3f:ab:f6:4c:82:57:97:d1:4c:0e: 3d:61:e0:c9:7c:ca:9e:15:84:b5:7e:c2:4b:34:c1: ec:7c:92:e0:d8:e4:73:42:bf:c8:14:0e:b2:b5:f7: 69:87:ab:af:d4:fd:bd:7c:4f:40:0b:e5:88:b1:ec: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.62.202.0/23 Signature Algorithm: sha256WithRSAEncryption 35:43:8a:a1:84:82:88:b3:1f:34:8b:f8:2f:89:e1:3a:e3:da: 6e:e3:d7:ee:fd:d8:af:08:ff:ce:f9:9e:63:06:c5:b5:78:bd: 10:e8:b1:cf:9f:9e:d5:05:6b:26:11:f5:19:98:c4:9b:cb:25: 85:d8:2d:fd:44:ee:f4:c8:be:ab:67:b4:07:f9:49:76:60:1b: 0f:92:0b:d0:1a:6d:bf:72:9a:b3:d7:b5:6e:d6:92:38:c4:7e: ac:8f:b3:e4:d1:2d:d0:e2:bf:f6:57:68:c6:37:29:73:0f:12: cd:83:ed:a0:65:6d:55:af:e6:09:18:4b:cf:ae:28:6b:da:45: e2:1d:b1:7b:97:92:02:66:2c:b5:8e:d9:03:a3:db:cf:86:d1: 55:8d:02:60:30:02:ef:c4:52:a7:b4:43:3c:5a:aa:b8:fa:d3: bc:9b:5d:92:84:9b:8b:c8:d3:41:29:be:a9:40:a5:1a:cf:9b: 13:a7:58:ac:06:8c:d9:90:65:52:ec:6a:5e:86:2f:5b:c4:96: 4a:26:6f:f1:4c:97:a0:c5:44:9e:b9:02:e1:29:8c:d6:37:df: 27:0d:9e:3a:24:9d:96:e0:c3:99:5a:9d:a9:cc:70:0f:4b:71: 27:92:93:a1:a3:5e:23:87:53:ab:24:34:78:4e:3c:ef:12:5f: c4:4f:7a:29 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGYIa5MQyJEtRlh5bD95D05ycmuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyNTE1NTc1MloX DTI2MDcyNDE2MDI1MlowMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQz OEE4QURGRkNEOUVGM0EyNzJFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMn1F07bhV9W9z0ePCLScKM7ER4uzh0F/IBTVJRL9YDjKHHwP1XMmD8ROCCk bWRAWnT60WFZq96bOS1E3iuGApRqhMV2PkNrdS+oB9vFzCOT5o2qNGzONoIi8GEb UELn09WcS5UftbyurXcJ/xMNx9jsQm1r5nvLgzc2Ivb12VcbldzfSyWNVz2qqurK aSBywUX1LLjImiAy9qtQn53NE6SEZynnfcF0l21V2RmkXgrEJJ9eqSWQAB2/Nr3K duEmzNX9micyTx0/q/ZMgleX0UwOPWHgyXzKnhWEtX7CSzTB7HyS4Njkc0K/yBQO srX3aYerr9T9vXxPQAvliLHsD+8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFICZkXR1AaPNWKQ4qK3/zZ7zonLlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4MWY0NGFh LTg5YTMtNGJjMy1iYjI5LWRiNmM5ODJhMTM2Yi8wLzgwOTk5MTc0NzUwMUEzQ0Q1 OEE0MzhBOEFERkZDRDlFRjNBMjcyRTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnPsowDQYJKoZIhvcNAQELBQADggEBADVDiqGEgoizHzSL+C+J4Trj2m7j1+79 2K8I/875nmMGxbV4vRDosc+fntUFayYR9RmYxJvLJYXYLf1E7vTIvqtntAf5SXZg Gw+SC9Aabb9ymrPXtW7WkjjEfqyPs+TRLdDiv/ZXaMY3KXMPEs2D7aBlbVWv5gkY S8+uKGvaReIdsXuXkgJmLLWO2QOj28+G0VWNAmAwAu/EUqe0Qzxaqrj607ybXZKE m4vI00EpvqlApRrPmxOnWKwGjNmQZVLsal6GL1vElkomb/FMl6DFRJ65AuEpjNY3 3ycNnjoknZbgw5lananMcA9LcSeSk6GjXiOHU6skNHhOPO8SX8RPeik= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:51 2025 by rpki-client