This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer File: 915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer (raw, json) Hash identifier: WIeExmVaPHeWvLijtoFbSEH4OJ5C/Q3sM/okKUtg5zA= Subject key identifier: 91:5F:81:BA:8B:D8:28:80:FF:7D:BC:AD:0D:C9:96:85:CC:BD:17:B5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 20B11C77C4AFA122DA8334E9DF904E9A73B66B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft caRepository: rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Dec 2025 09:14:35 +0000 Certificate not after: Tue 01 Dec 2026 09:19:35 +0000 Subordinate resources: IP: 103.3.46.0/24 IP: 2001:df0:230::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b1:1c:77:c4:af:a1:22:da:83:34:e9:df:90:4e:9a:73:b6:6b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 2 09:14:35 2025 GMT Not After : Dec 1 09:19:35 2026 GMT Subject: CN=915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:7f:36:06:87:19:46:8e:0f:6d:ea:7e:22: ed:57:cf:b6:62:84:29:0d:38:e5:8f:7a:36:72:23: fa:b8:fd:09:c7:ea:50:30:18:1c:63:0c:17:9a:8e: 99:40:7c:51:93:1b:5f:60:4d:2c:12:df:9a:71:fb: a7:59:24:72:48:e2:59:1d:38:f6:f6:20:68:69:45: 2b:57:d3:17:70:42:09:9e:12:96:74:61:43:38:51: cd:82:57:64:e0:37:a8:29:f2:b4:6d:42:51:be:13: b1:ec:3a:cc:04:02:1b:11:b1:23:73:31:25:0f:72: 48:ef:5a:79:40:fa:98:80:52:f8:c9:9c:29:95:bf: 91:6a:17:22:e3:aa:46:ce:21:96:6e:4c:52:aa:c2: ca:13:da:20:34:09:cc:e1:57:b6:30:d3:1a:3e:08: c5:11:39:0a:94:1a:6a:65:3c:18:61:26:a3:ed:84: e4:05:ff:dc:f3:1a:a1:6b:51:93:ba:6d:4c:91:2b: be:e1:30:ee:27:8e:c8:ca:07:54:a4:8d:cb:15:7e: f2:1a:e0:50:e4:00:23:9b:07:de:68:aa:a9:d5:79: fb:29:97:a5:67:fb:41:c3:fd:0e:05:c1:46:5c:2a: a6:22:3f:c0:4f:8d:e8:e1:3f:04:56:31:3b:a4:d0: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:5F:81:BA:8B:D8:28:80:FF:7D:BC:AD:0D:C9:96:85:CC:BD:17:B5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.46.0/24 IPv6: 2001:df0:230::/48 Signature Algorithm: sha256WithRSAEncryption 1e:69:c7:48:60:e9:a4:79:e1:10:0e:75:1b:91:81:9d:2a:f3: 6f:3c:6e:cc:f6:28:9c:d2:62:82:56:52:31:69:76:0b:51:ae: f0:3e:2a:79:f7:6f:25:ce:28:51:ce:39:91:28:97:3d:eb:4e: cf:e5:e6:27:c2:52:bf:8a:54:bb:b6:18:d1:ad:1d:d3:18:86: 77:b8:92:49:4e:9f:5b:c9:4f:e7:dc:ac:76:70:52:87:ce:8b: c8:b2:47:db:92:3c:c8:7a:6b:75:36:3a:f4:12:5a:cd:42:fc: 1f:2f:5e:5a:c3:d4:d4:2b:ca:7e:98:03:99:29:42:24:f7:bb: 0a:34:4c:36:ec:0b:f2:03:48:38:c5:58:20:d7:91:f3:bd:65: 3f:91:c9:21:a3:d6:b5:a3:00:bd:e7:26:5c:aa:0a:c3:c9:1c: 71:5b:3e:73:5c:ef:f8:20:fa:59:1a:cf:f5:2b:0d:01:4f:55: f1:31:f5:cf:01:70:44:2c:16:8e:36:01:e2:e0:7f:fd:14:12: f2:2a:d1:c6:94:7b:86:3a:e7:a1:30:d2:51:54:64:ca:ca:e2: 35:ed:7e:2b:be:b3:3d:1e:c1:85:6f:76:b5:b4:8d:79:dd:5a: 7f:e9:29:f7:72:c3:fb:8a:d5:7a:e4:e9:7e:27:32:7c:55:40: 12:40:46:4c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUILEcd8SvoSLagzTp35BOmnO2a0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMjA5MTQzNVoX DTI2MTIwMTA5MTkzNVowMzExMC8GA1UEAxMoOTE1RjgxQkE4QkQ4Mjg4MEZGN0RC Q0FEMERDOTk2ODVDQ0JEMTdCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7cfzYGhxlGjg9t6n4i7VfPtmKEKQ045Y96NnIj+rj9CcfqUDAYHGMMF5qO mUB8UZMbX2BNLBLfmnH7p1kkckjiWR049vYgaGlFK1fTF3BCCZ4SlnRhQzhRzYJX ZOA3qCnytG1CUb4Tsew6zAQCGxGxI3MxJQ9ySO9aeUD6mIBS+MmcKZW/kWoXIuOq Rs4hlm5MUqrCyhPaIDQJzOFXtjDTGj4IxRE5CpQaamU8GGEmo+2E5AX/3PMaoWtR k7ptTJErvuEw7ieOyMoHVKSNyxV+8hrgUOQAI5sH3miqqdV5+ymXpWf7QcP9DgXB RlwqpiI/wE+N6OE/BFYxO6TQGWcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJFfgbqL2CiA/328rQ3JloXMvRe1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZmJlMTBkMS1mZTY0LTQzM2YtYjVlOC0wOWU4YzcwNGVjOTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmYmUxMGQx LWZlNjQtNDMzZi1iNWU4LTA5ZThjNzA0ZWM5MS8wLzkxNUY4MUJBOEJEODI4ODBG RjdEQkNBRDBEQzk5Njg1Q0NCRDE3QjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnAy4wDwQCAAIwCQMHACABDfACMDANBgkqhkiG9w0BAQsFAAOCAQEAHmnHSGDp pHnhEA51G5GBnSrzbzxuzPYonNJiglZSMWl2C1Gu8D4qefdvJc4oUc45kSiXPetO z+XmJ8JSv4pUu7YY0a0d0xiGd7iSSU6fW8lP59ysdnBSh86LyLJH25I8yHprdTY6 9BJazUL8Hy9eWsPU1CvKfpgDmSlCJPe7CjRMNuwL8gNIOMVYINeR871lP5HJIaPW taMAvecmXKoKw8kccVs+c1zv+CD6WRrP9SsNAU9V8TH1zwFwRCwWjjYB4uB//RQS 8irRxpR7hjrnoTDSUVRkysriNe1+K76zPR7BhW92tbSNed1af+kp93LD+4rVeuTp ficyfFVAEkBGTA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:35 2025 by rpki-client