This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer (raw, json) Hash identifier: TDDPgt5G4Uwq6e7eUbp9N1lHJngS54mAz8EO1XQMXE4= Subject key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 19A23D4BE54F127A8B7F74430A0B6B9025169B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft caRepository: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Dec 2025 20:18:58 +0000 Certificate not after: Mon 30 Nov 2026 20:23:58 +0000 Subordinate resources: IP: 202.47.160.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a2:3d:4b:e5:4f:12:7a:8b:7f:74:43:0a:0b:6b:90:25:16:9b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 1 20:18:58 2025 GMT Not After : Nov 30 20:23:58 2026 GMT Subject: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:62:c2:db:56:75:0e:73:b8:01:8d:1f:31: 4b:82:38:80:3a:ab:c6:f0:92:b7:ef:75:33:96:5d: ff:e8:1d:ce:72:43:ab:eb:50:66:6d:a7:32:4a:c0: 84:27:36:c4:cd:fb:81:f0:55:f8:4e:53:be:19:61: fa:b4:1c:d3:2a:98:c2:1c:32:b1:6b:36:43:76:ad: 0f:33:2a:a7:8e:44:18:5c:75:2f:90:6e:6b:de:e8: fa:0c:3e:2d:30:57:20:e1:e1:7e:f9:15:7d:79:5b: 26:eb:b8:3b:28:d2:69:28:a9:fd:5e:8a:36:82:b3: e3:ac:db:aa:c8:0c:1e:bc:4e:8c:3a:02:2b:9c:8c: b8:d0:46:3e:90:7d:11:fb:c7:93:6d:5b:70:00:de: a4:23:1a:fb:60:f0:3d:47:7f:79:02:cb:71:8e:66: f0:78:0a:69:e3:f1:4d:ec:38:54:ae:8e:b5:82:f3: f3:49:bb:b0:d3:20:cd:e7:d7:72:4f:b9:de:60:40: cb:2b:cc:90:f1:62:98:1b:4f:a1:2f:16:07:97:89: 83:09:6c:65:1d:92:61:8c:18:c2:77:af:f5:1b:f5: 40:9e:2b:fc:73:71:fc:03:99:ac:c4:d4:92:7d:c9: 04:3e:ef:2d:77:8f:12:8a:38:1e:c3:5d:0a:b8:d9: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.160.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:7a:05:45:51:bd:a7:d8:58:26:7e:60:98:f8:6d:68:4a:c8: af:f8:af:22:d9:19:28:4a:e6:fd:65:a7:82:63:d1:0c:4c:86: 6b:0b:8a:c7:8d:4f:d8:13:13:a6:38:58:da:2b:4a:bb:f9:e1: 4b:6d:ac:47:c0:0a:35:aa:eb:0b:6b:df:bc:9e:10:91:37:2b: 99:25:60:be:94:0a:12:45:90:f4:11:78:49:24:2e:e2:44:99: 06:65:be:77:2f:b1:fe:17:94:1e:d9:b0:02:51:6f:78:41:80: 8d:bc:4c:b8:ef:78:71:3b:b1:62:c9:d8:8e:0d:0c:70:63:75: f6:dd:07:c6:49:1c:f0:2b:bc:e9:25:09:33:da:8f:6a:ce:8c: 99:4a:b6:4a:a8:24:51:83:6e:0a:41:80:c7:c3:11:34:9d:d2: 87:4a:21:54:7a:7e:24:f0:4e:cb:83:6e:10:ad:f7:fc:e2:1e: 77:97:b6:9b:6e:c8:0a:86:a1:65:a8:77:70:5a:f3:10:dc:73: da:89:53:a2:23:0e:96:f8:2f:d7:00:3e:d4:be:0a:4f:72:f2: 38:81:bc:f2:cd:fb:72:88:92:08:da:c9:17:08:e1:fb:11:9b: 3b:5c:43:ab:fd:06:d1:62:bf:56:2d:9c:f2:4d:8d:72:a6:40: a7:ad:9d:82 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGaI9S+VPEnqLf3RDCgtrkCUWm2QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMTIwMTg1OFoX DTI2MTEzMDIwMjM1OFowMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0Qx N0YxQzVCNkYwQzU0QjBGNUYxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFrYsLbVnUOc7gBjR8xS4I4gDqrxvCSt+91M5Zd/+gdznJDq+tQZm2nMkrA hCc2xM37gfBV+E5Tvhlh+rQc0yqYwhwysWs2Q3atDzMqp45EGFx1L5Bua97o+gw+ LTBXIOHhfvkVfXlbJuu4OyjSaSip/V6KNoKz46zbqsgMHrxOjDoCK5yMuNBGPpB9 EfvHk21bcADepCMa+2DwPUd/eQLLcY5m8HgKaePxTew4VK6OtYLz80m7sNMgzefX ck+53mBAyyvMkPFimBtPoS8WB5eJgwlsZR2SYYwYwnev9Rv1QJ4r/HNx/AOZrMTU kn3JBD7vLXePEoo4HsNdCrjZ6MECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIlY6x6gAi3veD0X8cW28MVLD18eMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyODg3NjJj LTNmYzUtNDljYy05NDlhLTU5NGIzMzFhMTNhMS8wLzg5NThFQjFFQTAwMjJERUY3 ODNEMTdGMUM1QjZGMEM1NEIwRjVGMUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADKL6AwDQYJKoZIhvcNAQELBQADggEBAEp6BUVRvafYWCZ+YJj4bWhKyK/4ryLZ GShK5v1lp4Jj0QxMhmsLiseNT9gTE6Y4WNorSrv54UttrEfACjWq6wtr37yeEJE3 K5klYL6UChJFkPQReEkkLuJEmQZlvncvsf4XlB7ZsAJRb3hBgI28TLjveHE7sWLJ 2I4NDHBjdfbdB8ZJHPArvOklCTPaj2rOjJlKtkqoJFGDbgpBgMfDETSd0odKIVR6 fiTwTsuDbhCt9/ziHneXtptuyAqGoWWod3Ba8xDcc9qJU6IjDpb4L9cAPtS+Ck9y 8jiBvPLN+3KIkgjayRcI4fsRmztcQ6v9BtFiv1YtnPJNjXKmQKetnYI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:18:27 2025 by rpki-client