This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.cer (raw, json) Hash identifier: VnNlvpW2EgYAl4fn8+aS6vDHLspx3fz04QkxB/AecQ8= Subject key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4F398C1AF2A3E9AD99062FE0F670F79E5341231C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft caRepository: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Nov 2025 07:14:30 +0000 Certificate not after: Fri 20 Nov 2026 07:19:30 +0000 Subordinate resources: IP: 103.138.218.0/23 IP: 2404:d5c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:39:8c:1a:f2:a3:e9:ad:99:06:2f:e0:f6:70:f7:9e:53:41:23:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 21 07:14:30 2025 GMT Not After : Nov 20 07:19:30 2026 GMT Subject: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:5e:12:16:29:e7:da:ae:fb:4d:ab:9c:5f: 2b:95:70:e0:4b:24:6b:a7:f5:19:37:81:75:e3:6b: 2f:2d:3d:40:75:5f:bc:a1:33:fd:ab:cd:e3:8a:8c: e3:54:db:8e:71:37:0c:ee:68:bd:42:7a:51:8b:27: f1:19:e8:d5:14:fd:2a:fb:3d:b2:80:9f:26:06:59: a6:0f:6a:54:41:04:50:2c:a9:f9:7f:1e:ef:ef:66: e2:11:09:2e:14:a5:fe:25:60:75:f1:8e:18:7b:49: 90:e8:0a:95:c9:7c:89:af:2f:07:6e:fb:ca:ef:16: 31:9b:4a:c3:88:88:13:5f:71:17:70:22:57:9e:d4: c3:7f:97:6b:28:e8:10:2b:e3:86:20:ff:26:8d:52: aa:85:93:a7:48:a2:bb:d0:fa:42:42:7f:9b:15:6b: e2:40:d1:2f:59:c0:cf:4f:d1:30:13:5a:cf:63:08: 35:40:83:cb:51:c5:26:a4:d4:41:71:a3:88:18:cd: 39:bf:66:54:9d:b7:f3:a2:1e:65:bb:27:03:c2:22: d0:88:04:25:10:a0:82:43:6b:c3:2f:e0:d6:b1:7d: 96:29:ae:07:96:5f:10:28:58:fc:07:1b:37:93:22: f6:9f:b6:2a:25:12:b5:59:53:c5:1c:98:40:ae:ed: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.218.0/23 IPv6: 2404:d5c0::/32 Signature Algorithm: sha256WithRSAEncryption 91:62:1b:8b:36:2f:7c:a5:ce:b5:21:b1:fa:b7:a5:64:53:91: 92:3f:5f:d8:00:1e:c7:ff:58:2d:22:06:01:f2:c1:98:d4:00: 6c:f9:af:57:f9:53:8f:0d:23:16:8a:00:a9:0e:81:eb:d6:42: ef:8d:1d:6e:74:bd:40:ec:ad:7e:32:f1:8b:0b:7e:b0:a9:70: 22:38:2f:2c:25:d7:72:89:e1:5d:25:a5:4c:81:a6:11:be:ce: 7d:43:26:39:43:7b:98:b5:ab:bf:3a:94:33:ab:f8:9a:60:6f: 2f:0e:2d:83:bd:aa:cb:05:60:2b:50:25:b2:50:ef:35:64:3f: 87:8f:76:8c:3b:39:4e:80:3a:d6:2d:18:b4:25:ed:56:c9:a6: ac:dd:a1:11:bd:bd:d8:d2:e3:18:a9:8b:5e:a2:00:8b:92:62: 3a:89:70:71:c8:cb:bf:c0:13:b7:82:92:d3:6d:8a:e9:20:8f: 95:c5:ef:af:fe:10:af:88:b5:a2:66:fe:b5:a0:10:6a:1d:9e: 4f:15:d0:31:86:1c:ae:83:53:9c:c5:24:f7:84:fc:3f:f2:e4: 33:57:c2:a3:c8:52:c1:7a:dc:c7:0f:ef:3c:b1:43:ac:95:38: a6:e9:2d:84:ba:9e:e7:11:f3:85:ba:af:cd:29:4f:f4:95:0f: b0:72:58:86 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUTzmMGvKj6a2ZBi/g9nD3nlNBIxwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyMTA3MTQzMFoX DTI2MTEyMDA3MTkzMFowMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZB NTMzRkRBRTVBMEY0MTExNzNEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFsXhIWKefarvtNq5xfK5Vw4Eska6f1GTeBdeNrLy09QHVfvKEz/avN44qM 41TbjnE3DO5ovUJ6UYsn8Rno1RT9Kvs9soCfJgZZpg9qVEEEUCyp+X8e7+9m4hEJ LhSl/iVgdfGOGHtJkOgKlcl8ia8vB277yu8WMZtKw4iIE19xF3AiV57Uw3+Xayjo ECvjhiD/Jo1SqoWTp0iiu9D6QkJ/mxVr4kDRL1nAz0/RMBNaz2MINUCDy1HFJqTU QXGjiBjNOb9mVJ2386IeZbsnA8Ii0IgEJRCggkNrwy/g1rF9limuB5ZfEChY/Acb N5Mi9p+2KiUStVlTxRyYQK7tafsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJbEHP4nf2huNHalM/2uWg9BEXPZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyNTAyMjA1 LTVjNTQtNDdkYi1hZTZmLTlkNDhlMTgzMjQxYy8wLzk2QzQxQ0ZFMjc3RjY4NkUz NDc2QTUzM0ZEQUU1QTBGNDExMTczRDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnitowDQQCAAIwBwMFACQE1cAwDQYJKoZIhvcNAQELBQADggEBAJFiG4s2L3yl zrUhsfq3pWRTkZI/X9gAHsf/WC0iBgHywZjUAGz5r1f5U48NIxaKAKkOgevWQu+N HW50vUDsrX4y8YsLfrCpcCI4Lywl13KJ4V0lpUyBphG+zn1DJjlDe5i1q786lDOr +Jpgby8OLYO9qssFYCtQJbJQ7zVkP4ePdow7OU6AOtYtGLQl7VbJpqzdoRG9vdjS 4xipi16iAIuSYjqJcHHIy7/AE7eCktNtiukgj5XF76/+EK+ItaJm/rWgEGodnk8V 0DGGHK6DU5zFJPeE/D/y5DNXwqPIUsF63McP7zyxQ6yVOKbpLYS6nucR84W6r80p T/SVD7ByWIY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:50 2025 by rpki-client