This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer (raw, json) Hash identifier: fWyZtFsURVwCo/tS0Rqob7kefnlGLjkWoV9r+PocFIg= Subject key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 34F3CDF7D9B476D19B522F53E3E0E192BEE15713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft caRepository: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 May 2025 07:22:37 +0000 Certificate not after: Fri 22 May 2026 07:27:37 +0000 Subordinate resources: IP: 103.171.179.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f3:cd:f7:d9:b4:76:d1:9b:52:2f:53:e3:e0:e1:92:be:e1:57:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 23 07:22:37 2025 GMT Not After : May 22 07:27:37 2026 GMT Subject: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:6d:3b:50:52:d3:84:76:16:4c:38:61:c1: 30:3e:b2:e0:12:70:8a:78:a6:91:e9:38:3a:de:4a: 7e:17:01:91:0d:ec:5b:98:df:02:ca:a8:ae:9a:8b: 29:04:ed:4e:b6:53:76:1c:86:b9:d9:4d:86:d0:46: b7:11:f1:82:22:97:56:a6:3f:be:e2:a0:c1:df:b6: ec:65:60:0a:c3:7b:72:53:27:04:38:af:dc:57:a2: 6c:c5:96:6f:09:e3:54:aa:5a:e4:0d:35:0c:8f:12: 9a:23:24:7a:87:7d:a7:8b:57:30:03:95:cd:d5:15: b0:72:61:e2:b7:83:31:c3:fb:de:bf:57:47:84:2c: 43:4d:e3:29:4f:d1:7c:88:1c:18:8d:41:67:05:1c: 89:2d:82:37:b1:95:08:68:6b:33:86:10:ab:23:21: e9:5d:50:8c:32:ef:10:e4:07:47:f0:1d:12:95:7f: d9:15:b8:e3:35:86:3a:5c:81:37:45:b9:83:da:6a: 14:ea:7a:31:fd:e5:78:52:4c:d9:4e:49:db:83:a5: 63:e0:0c:b7:eb:42:55:1a:a7:4f:74:94:f8:50:11: 04:96:ab:35:30:37:8a:3a:45:11:ab:41:d4:99:df: ad:d8:e8:d6:3b:ea:d4:d0:77:6e:7b:0d:f6:53:49: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.179.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:25:13:1e:5f:e4:5c:1c:ce:8e:84:d3:10:a3:97:a6:78:d9: c2:72:39:ef:a6:22:eb:ca:28:c6:c7:4d:f0:e7:c7:44:88:0a: 67:f1:4e:32:ed:84:90:9e:39:10:c3:3c:a8:14:89:55:e9:56: 80:2b:e6:3a:ef:3c:a1:52:4a:f0:85:2b:b4:51:ba:fe:be:9f: 4f:b1:a0:2f:8d:8a:9d:ae:98:4d:a2:cb:b1:29:0f:16:a2:3c: 49:bd:d2:12:bc:26:a4:0c:8e:46:f8:5c:53:67:c7:48:64:a0: 7e:fa:fe:b4:f7:a6:e5:56:9a:66:cf:47:81:2d:7b:7e:8d:3c: c6:7c:fd:b4:b6:7b:c6:2e:53:57:0a:9d:be:70:41:ba:5b:87: 23:8c:72:ff:76:a9:d2:e9:0c:85:97:5a:35:2f:b4:f9:e1:04: 23:de:b2:80:f6:52:a2:95:75:60:31:5f:d0:48:3e:aa:94:29: f7:fd:f5:d4:b1:92:21:0f:bc:4b:76:92:0a:16:02:78:93:fb: 32:9c:de:f5:28:6d:31:97:ec:9a:ba:6c:c6:d7:f7:de:ea:02: 2e:e8:33:17:63:f3:66:8f:c0:7d:25:f5:44:b5:2b:09:c4:b7: 3f:93:b0:0e:d0:f2:89:0c:a6:3a:d4:31:6d:2e:9b:ce:f1:dd: e4:5e:9a:f3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNPPN99m0dtGbUi9T4+Dhkr7hVxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMzA3MjIzN1oX DTI2MDUyMjA3MjczN1owMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdB OUFCNTQ5QURERTIwQkU4QTRCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoAbTtQUtOEdhZMOGHBMD6y4BJwinimkek4Ot5KfhcBkQ3sW5jfAsqorpqL KQTtTrZTdhyGudlNhtBGtxHxgiKXVqY/vuKgwd+27GVgCsN7clMnBDiv3FeibMWW bwnjVKpa5A01DI8SmiMkeod9p4tXMAOVzdUVsHJh4reDMcP73r9XR4QsQ03jKU/R fIgcGI1BZwUciS2CN7GVCGhrM4YQqyMh6V1QjDLvEOQHR/AdEpV/2RW44zWGOlyB N0W5g9pqFOp6Mf3leFJM2U5J24OlY+AMt+tCVRqnT3SU+FARBJarNTA3ijpFEatB 1Jnfrdjo1jvq1NB3bnsN9lNJ94ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJR5uMXVro+r3Fepq1Sa3eIL6KSzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hOTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5MGFhMTU4 LTY1ODEtNGNiZS1iNmNlLWQ4NzIxYzcxOWZhMC8wLzk0NzlCOEM1RDVBRThGQUJE QzU3QTlBQjU0OUFEREUyMEJFOEE0QjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnq7MwDQYJKoZIhvcNAQELBQADggEBAA4lEx5f5Fwczo6E0xCjl6Z42cJyOe+m IuvKKMbHTfDnx0SICmfxTjLthJCeORDDPKgUiVXpVoAr5jrvPKFSSvCFK7RRuv6+ n0+xoC+Nip2umE2iy7EpDxaiPEm90hK8JqQMjkb4XFNnx0hkoH76/rT3puVWmmbP R4Ete36NPMZ8/bS2e8YuU1cKnb5wQbpbhyOMcv92qdLpDIWXWjUvtPnhBCPesoD2 UqKVdWAxX9BIPqqUKff99dSxkiEPvEt2kgoWAniT+zKc3vUobTGX7Jq6bMbX997q Ai7oMxdj82aPwH0l9US1KwnEtz+TsA7Q8okMpjrUMW0um87x3eRemvM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:15 2025 by rpki-client