This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer File: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer (raw, json) Hash identifier: DauzB7wSWVJahUSLt8jULDj6Ft/hpa90DjDMbk9fMpY= Subject key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E75CED7A77440B9C6840B60ABDB083980C9E74C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft caRepository: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 18:21:26 +0000 Certificate not after: Tue 02 Jun 2026 18:26:26 +0000 Subordinate resources: IP: 103.107.248.0/22 IP: 117.74.120.0/21 IP: 2402:600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:75:ce:d7:a7:74:40:b9:c6:84:0b:60:ab:db:08:39:80:c9:e7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 18:21:26 2025 GMT Not After : Jun 2 18:26:26 2026 GMT Subject: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:06:55:c9:06:54:1a:38:76:34:49:ae:e4: 58:bc:3f:87:4f:59:37:ce:7f:fe:52:29:df:c2:d8: b3:70:65:92:14:4c:07:7a:54:0a:df:93:4c:ff:49: 45:6d:af:55:55:e5:f9:09:df:30:4c:a2:c6:1c:bf: c4:d1:d7:71:21:ed:dc:bd:8b:71:a4:75:ce:6d:87: e4:66:23:9e:86:70:26:cb:63:13:a8:8f:aa:6f:3f: 56:b6:63:6c:81:85:4c:6e:89:65:87:02:f8:0e:0c: 93:3c:c0:c0:2f:3f:05:7e:57:5b:6e:51:5e:cd:15: 88:61:c0:bb:20:22:e8:6f:2c:7d:20:f9:73:bc:54: 06:71:85:fb:d9:34:aa:f3:72:c7:88:1a:11:51:94: 59:71:95:a8:65:64:d5:54:c1:14:37:00:15:0e:c6: 8d:0c:c2:20:e3:72:95:ce:2e:2f:5a:69:05:90:46: da:f6:3b:9f:83:f0:6d:6f:24:b2:50:4d:b2:04:67: 7b:d3:50:b5:c3:73:3e:a2:ba:48:03:05:c2:1d:09: 22:77:86:14:a4:fb:e6:4d:b8:ad:60:cf:91:bd:31: 58:0d:37:4f:29:51:57:a8:0b:fb:2a:4d:18:d9:31: 2c:35:e5:36:35:c0:63:53:d5:85:4a:e2:ed:71:b8: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.248.0/22 117.74.120.0/21 IPv6: 2402:600::/32 Signature Algorithm: sha256WithRSAEncryption 29:b7:5f:1d:36:67:b1:bc:0e:44:7a:94:49:4c:15:41:64:75: 09:f3:26:61:de:59:16:25:e6:b5:38:90:fc:69:74:8c:7b:08: 2f:76:42:82:c0:51:22:d8:80:04:72:d3:80:fb:05:27:80:d2: b6:2d:4c:fc:6e:31:ee:d7:9e:0a:9d:53:7b:37:a7:e6:02:37: 2f:c6:17:68:9e:2b:f2:bb:d2:96:23:9b:8e:6e:6b:95:c6:42: d7:8a:e1:5f:79:f1:e6:b7:a7:01:89:8c:4d:21:07:6f:48:ee: 6a:94:ff:89:22:f4:91:3b:f0:89:11:62:b7:7e:b5:26:31:db: a9:e8:44:b2:79:d1:73:43:d4:ca:84:c2:ec:2c:c5:a5:e7:b6: 41:38:38:95:7b:a9:d0:20:e6:fb:76:c1:0a:e6:ff:69:de:45: e5:2a:e7:8e:94:0c:45:5e:ac:ac:70:89:3d:d7:4b:c0:a6:5d: 8c:36:b4:47:ee:22:e9:e9:89:d4:f1:8d:39:05:98:92:95:d6: b3:cf:f6:c4:43:91:a8:93:7a:1c:36:b2:e8:0c:0f:98:81:f0: 14:60:d9:ea:b6:fe:a5:ff:92:d7:5a:9a:cc:e8:6a:1d:36:cc: 51:3d:9d:6f:de:2a:5c:ad:c5:1f:e4:5f:7b:e7:9a:b2:68:ce: a1:29:63:dc -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIULnXO16d0QLnGhAtgq9sIOYDJ50wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE4MjEyNloX DTI2MDYwMjE4MjYyNlowMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFC RjNCREYyMEQ4MkEyRERGRDhGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdrBlXJBlQaOHY0Sa7kWLw/h09ZN85//lIp38LYs3BlkhRMB3pUCt+TTP9J RW2vVVXl+QnfMEyixhy/xNHXcSHt3L2LcaR1zm2H5GYjnoZwJstjE6iPqm8/VrZj bIGFTG6JZYcC+A4MkzzAwC8/BX5XW25RXs0ViGHAuyAi6G8sfSD5c7xUBnGF+9k0 qvNyx4gaEVGUWXGVqGVk1VTBFDcAFQ7GjQzCIONylc4uL1ppBZBG2vY7n4PwbW8k slBNsgRne9NQtcNzPqK6SAMFwh0JIneGFKT75k24rWDPkb0xWA03TylRV6gL+ypN GNkxLDXlNjXAY1PVhUri7XG4zCsCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJNdstRIj64sEeG/O98g2Cot39jzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5 LTM1MzctNGJjNy04NjEzLThlOTgxNjI5ZTRjYS8wLzkzNURCMkQ0NDg4RkFFMkMx MUUxQkYzQkRGMjBEODJBMkRERkQ4RjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJna/gDBAN1SngwDQQCAAIwBwMFACQCBgAwDQYJKoZIhvcNAQELBQADggEBACm3 Xx02Z7G8DkR6lElMFUFkdQnzJmHeWRYl5rU4kPxpdIx7CC92QoLAUSLYgARy04D7 BSeA0rYtTPxuMe7XngqdU3s3p+YCNy/GF2ieK/K70pYjm45ua5XGQteK4V958ea3 pwGJjE0hB29I7mqU/4ki9JE78IkRYrd+tSYx26noRLJ50XND1MqEwuwsxaXntkE4 OJV7qdAg5vt2wQrm/2neReUq546UDEVerKxwiT3XS8CmXYw2tEfuIunpidTxjTkF mJKV1rPP9sRDkaiTehw2sugMD5iB8BRg2eq2/qX/ktdamszoah02zFE9nW/eKlyt xR/kX3vnmrJozqEpY9w= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:46 2025 by rpki-client