This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
File:                     9A97A919AD61446780D593589DED8D76DE76F83A.cer (raw, json)
Hash identifier:          eSB8FIMGonnXGyjGUj8cNi/3v4rtIw20x6jQiii2XWM=
Subject key identifier:   9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3343F8B77DE66455C1DF99945689444214CF8FE1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 21:48:32 +0000
Certificate not after:    Thu 05 Nov 2026 21:53:32 +0000
Subordinate resources:    IP: 36.50.56.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:43:f8:b7:7d:e6:64:55:c1:df:99:94:56:89:44:42:14:cf:8f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  6 21:48:32 2025 GMT
            Not After : Nov  5 21:53:32 2026 GMT
        Subject: CN=9A97A919AD61446780D593589DED8D76DE76F83A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:e4:ce:a4:e0:dd:1e:38:e9:35:05:96:5e:
                    6f:91:ac:43:e2:e6:98:a0:cd:35:21:e9:fb:c1:3a:
                    af:2c:a3:42:dd:a7:50:73:22:13:68:dd:90:91:bf:
                    6b:cd:54:f6:86:3e:dc:c4:ad:3d:0a:ed:30:38:e4:
                    3b:c2:f5:ee:3d:5f:2c:f0:2b:93:39:07:f3:11:33:
                    f6:81:35:23:41:2d:46:7d:c0:0d:ba:8a:80:ee:67:
                    95:08:fd:d9:8f:df:45:71:90:da:31:43:f0:cb:85:
                    a9:3c:a8:76:d0:cb:49:c8:b7:50:25:8e:db:dd:8b:
                    85:ae:08:2b:fe:ea:89:5d:26:e8:60:c7:de:d9:c2:
                    0c:64:3a:db:43:66:8f:0e:36:02:de:d3:7f:de:a6:
                    c4:f6:5b:01:cb:b2:be:6c:27:ff:5e:79:7e:38:71:
                    c6:e9:d6:8b:81:14:6d:db:67:d1:5b:f9:dd:1b:68:
                    96:11:b7:18:aa:6c:f4:a8:ad:4e:42:d8:10:89:ae:
                    6f:ee:95:77:9e:d9:03:aa:af:a0:c5:02:d0:98:08:
                    c3:44:44:50:56:4d:94:3e:65:1e:73:42:09:0f:99:
                    27:47:fa:4e:08:99:de:d3:13:5c:27:ad:f1:83:a9:
                    9b:37:1e:cd:da:37:7a:ec:50:33:39:71:4f:dc:8b:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:9a:45:2f:d0:82:17:72:b9:ee:3e:e9:a8:d9:a8:e6:43:54:
         7a:83:ba:2e:e9:8f:eb:81:f9:16:bb:0d:a3:2e:f4:96:a6:72:
         93:d7:31:bf:03:33:6d:39:ef:ae:fd:d0:d7:0d:b4:92:77:08:
         cb:4e:52:58:2d:4f:f9:e7:7c:63:eb:f2:41:cf:01:9c:56:05:
         4d:74:e6:4a:72:52:44:bd:db:6c:de:23:c5:58:eb:e8:4c:a6:
         78:2f:9f:bc:6f:88:37:88:54:2e:d3:f2:ad:bc:5c:b7:c6:b1:
         ae:73:92:ce:3a:dd:f9:5c:06:8e:c5:a6:dc:55:5e:b7:6f:5b:
         70:c7:4d:4e:ab:16:aa:6b:69:8c:75:9f:c8:12:16:89:62:3a:
         15:5a:01:a7:2a:ae:04:48:fe:35:f6:56:86:b4:22:7b:71:99:
         a2:6d:7b:fe:d2:41:19:e0:11:31:e8:09:6c:ff:b0:6d:60:0c:
         f6:02:61:85:e8:88:f4:3c:ac:4f:6e:49:1a:7f:75:ca:b3:9f:
         28:4f:16:55:36:9c:7c:09:fa:66:6b:b1:f6:53:f6:05:55:97:
         fc:df:ea:0e:f8:d3:b8:4c:1b:0d:b5:01:17:41:a6:fe:04:b7:
         9e:bb:79:d5:50:20:ac:91:dc:63:cd:7b:28:6a:9f:6b:e8:fc:
         1a:99:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:17:10 2025 by rpki-client