This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer
File:                     8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer (raw, json)
Hash identifier:          5JiQUf84wO85t0Uq6TVLWHbsBeL0a1W5VwupCiU6GFY=
Subject key identifier:   86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       E3744E701B32C76C4F33A9C8F3379130C01B5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Dec 2025 15:30:23 +0000
Certificate not after:    Wed 16 Dec 2026 15:35:23 +0000
Subordinate resources:    IP: 103.148.18.0/23
                          IP: 2405:c7c0::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e3:74:4e:70:1b:32:c7:6c:4f:33:a9:c8:f3:37:91:30:c0:1b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 17 15:30:23 2025 GMT
            Not After : Dec 16 15:35:23 2026 GMT
        Subject: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:82:e9:20:8e:0c:f8:87:db:30:be:d4:4b:
                    85:55:2d:90:73:71:53:1b:cd:9e:2d:aa:75:37:7e:
                    4d:26:97:2a:05:3e:27:1d:29:04:48:2b:16:c8:c7:
                    1b:32:a8:6d:15:19:b6:4d:d1:df:09:4d:b4:59:b7:
                    2d:a7:91:71:cd:af:21:82:ad:1a:d7:b0:e0:f1:ff:
                    7b:3c:48:1f:e4:ff:ed:9a:c1:2c:68:cc:6b:c0:b6:
                    40:75:ca:6a:91:6f:0c:7f:ba:31:ec:1c:be:c7:06:
                    de:7c:ab:ac:aa:10:66:db:0e:3d:ee:26:00:d0:fa:
                    47:2d:9d:ad:8b:c0:00:e7:73:2d:40:00:55:45:ad:
                    78:c3:34:a3:61:47:5a:9a:64:d5:16:56:ea:0e:50:
                    26:08:fa:7f:3c:f8:5c:5f:af:3a:8d:3e:af:44:e9:
                    28:04:e8:89:4f:43:09:65:9c:ce:f5:7c:70:e2:52:
                    fc:31:dd:2e:f1:70:0c:f2:13:b8:88:2e:38:e3:fc:
                    05:44:18:f9:87:e4:7e:1b:c5:d8:98:58:e4:55:5f:
                    10:88:d6:35:78:37:e2:78:c9:94:a6:d4:bc:89:66:
                    29:41:5a:7c:3a:12:e3:97:cb:7d:01:b9:ac:c2:4b:
                    02:70:0a:64:75:c4:b8:b0:09:1b:b0:c4:19:e4:bd:
                    d8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.18.0/23
                IPv6:
                  2405:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:71:25:f8:e4:c8:2b:41:88:1c:aa:32:29:4b:f2:18:9a:87:
         a0:9d:33:34:f4:a2:10:60:c0:52:97:d7:fb:49:9f:cb:fe:65:
         c7:08:05:a2:3c:fe:ae:e0:8f:43:a5:60:bb:d6:c3:f6:28:24:
         32:a8:e9:63:38:47:b9:1b:ba:ae:5f:b9:ff:90:12:96:fb:16:
         39:f8:59:f3:c1:c4:4d:62:78:d9:9e:da:f6:9d:d9:dd:c7:18:
         9a:41:5b:b9:26:30:37:77:0c:ac:48:83:f4:46:49:67:79:40:
         10:e4:ac:30:53:5f:61:36:cf:b1:46:8b:fb:31:77:b6:67:21:
         a5:8f:84:6c:33:04:59:51:65:de:d8:ff:ca:13:cb:d4:47:a3:
         3e:b4:ea:41:69:58:21:b1:57:6d:7f:0a:46:48:80:7a:d8:d8:
         dd:2c:d2:1c:a0:f2:7f:37:50:38:cf:63:dc:7e:ab:e3:54:c0:
         7b:8c:9d:12:79:00:41:c9:ec:09:53:a7:af:97:78:45:b1:e6:
         ba:06:d7:6b:f0:e5:38:33:d4:e1:dc:e2:41:f2:3d:da:4b:3c:
         7b:55:73:84:e9:12:b1:a2:09:a5:03:d0:45:0a:76:8c:0e:27:
         5e:34:d4:59:8a:1d:21:8e:ee:58:40:32:2b:f4:19:63:62:95:
         b9:71:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----