This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/93B49EA86589396F687875020DE4D17DE244CD6E.cer
File: 93B49EA86589396F687875020DE4D17DE244CD6E.cer (raw, json)
Hash identifier: YD0W0yD/KMsQeReiYSlrY7fO7W8LCxRIvlNbCJv8rFk=
Subject key identifier: 93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2EBB14424316E88EE98E7608A3B5B2CB97182992
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 14 Nov 2025 02:49:33 +0000
Certificate not after: Fri 13 Nov 2026 02:54:33 +0000
Subordinate resources: IP: 2001:df3:5bc0::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bb:14:42:43:16:e8:8e:e9:8e:76:08:a3:b5:b2:cb:97:18:29:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 14 02:49:33 2025 GMT
Not After : Nov 13 02:54:33 2026 GMT
Subject: CN=93B49EA86589396F687875020DE4D17DE244CD6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:d3:47:44:ba:72:a6:f0:39:f1:5f:7f:f1:
ef:6f:c6:8e:30:78:ed:38:24:5a:71:c7:e2:c8:bf:
81:bf:57:d7:e4:eb:19:64:84:d4:15:55:87:a5:8a:
12:fc:5a:df:77:8b:7e:54:56:be:16:54:63:5e:ef:
b4:6b:b6:88:ea:50:8b:43:68:35:71:47:7b:14:69:
9d:68:20:9d:bf:18:e3:0e:b7:15:4a:5f:4b:63:5c:
c9:21:7f:27:1e:f3:fc:17:ac:e8:e5:86:19:aa:b8:
98:33:da:6e:1c:41:83:89:7c:b4:92:57:1e:b8:1e:
fa:e0:52:c0:a4:f3:25:1c:24:09:75:29:16:a1:21:
81:73:2d:03:b1:ba:92:f1:d6:9a:49:9d:58:bb:c6:
c9:31:a0:76:20:34:59:47:4a:32:6c:41:13:11:57:
ba:3e:c9:ba:2f:40:ba:1a:06:97:03:5f:0b:4f:13:
e2:fa:f6:2f:3a:4c:3c:cf:2d:1a:55:db:1d:44:36:
88:88:f2:1d:e0:ed:45:c4:42:d4:a4:d0:14:96:b9:
78:02:9b:29:ab:ea:84:cb:0b:a8:fe:53:84:b8:13:
e7:dc:af:ce:98:45:f6:4f:82:14:cd:fd:a6:01:4d:
cc:c7:0c:58:19:b8:c9:d2:69:e9:6f:1a:86:74:5d:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:5bc0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:c6:fc:d2:46:be:ad:3a:d7:ca:00:33:35:5f:a2:25:65:cc:
1b:0e:3d:04:aa:72:9b:8f:f7:82:80:47:99:9a:27:aa:46:e7:
4a:69:94:47:67:ca:06:d3:27:e0:46:36:a9:df:dc:e3:6b:1e:
47:a7:f2:8b:72:54:70:28:15:b5:d0:32:bf:bb:01:ac:8d:56:
1e:56:7d:be:84:05:f9:6a:11:83:82:1b:a9:37:dc:57:f7:e9:
3b:29:1d:2f:1a:09:4c:19:4f:68:8e:08:cf:77:46:4c:f5:d4:
36:4a:20:cc:41:7e:e7:b7:48:6e:68:fb:11:fd:b3:0a:d4:b3:
57:80:38:fa:63:c1:4a:53:d0:a1:ab:a3:89:86:28:1e:21:1b:
d6:d5:15:f6:b2:53:a4:1c:16:1d:3d:5e:dd:f2:06:b0:46:af:
61:89:ae:91:5b:a5:4a:c1:79:e9:d5:d8:e1:99:46:be:f1:74:
8d:b6:9a:f4:cd:6d:d2:dd:b4:c5:a7:48:d8:f7:dd:2f:e1:d6:
0c:3f:b6:44:34:71:3b:44:81:4f:bf:d0:99:b5:d1:70:01:62:
56:fe:e2:51:37:81:83:3e:c9:68:12:90:7f:3e:89:a0:90:7d:
8a:05:09:7c:86:69:8c:d1:b3:7f:85:ec:dd:97:38:07:a5:25:
db:89:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:34 2025 by rpki-client