This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.cer (raw, json) Hash identifier: 4bTVQoUByu6o0QehaP+Ne2ucdK0q7UyOlxIdUUZwo8o= Subject key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0AFABC3463D85BD90F7B4F5C5E1586BE469B5150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft caRepository: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Nov 2025 14:44:33 +0000 Certificate not after: Wed 04 Nov 2026 14:49:33 +0000 Subordinate resources: IP: 103.123.85.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fa:bc:34:63:d8:5b:d9:0f:7b:4f:5c:5e:15:86:be:46:9b:51:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 5 14:44:33 2025 GMT Not After : Nov 4 14:49:33 2026 GMT Subject: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:41:60:ea:7c:50:96:ed:9f:32:5c:1a:da: 61:25:1b:9c:e6:1a:a0:7e:7a:93:ce:4f:2e:93:90: 42:39:be:f7:c0:9d:d2:79:74:e8:32:2d:f9:74:36: 54:da:af:e5:ea:97:7f:08:f6:45:63:4c:1a:d6:07: 05:96:5a:37:0a:c2:f2:07:67:1d:59:d2:d2:92:76: d7:e4:96:90:01:fc:82:a2:3e:76:09:b4:f2:06:9e: ce:88:d6:05:38:41:33:30:63:4d:a2:46:ff:bb:f0: 6e:d0:ae:5f:2e:11:d3:e7:4f:3b:2c:e1:00:18:e3: 79:6d:03:f4:4b:94:75:9a:d6:d0:4e:8a:10:c3:2a: ee:0d:ce:98:50:e8:d4:e2:9d:18:01:51:85:b0:ab: 2a:61:10:c7:3e:14:8d:09:c6:e0:f3:5f:70:a3:cb: 91:69:38:76:72:2e:fd:74:c7:07:3b:dc:20:a0:c3: 1d:69:72:bb:bc:a6:f5:84:4a:db:2e:1a:dc:9e:99: 85:5b:f9:db:88:e3:4d:b3:f2:f3:a2:a1:f7:81:e5: a1:b5:be:43:71:ef:72:02:20:b2:14:ec:cd:3e:03: 06:73:6e:8a:19:32:0c:4f:b4:88:d6:56:4a:99:d9: 49:bd:1a:df:e6:9a:25:26:70:9c:ff:59:83:44:c1: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.85.0/24 Signature Algorithm: sha256WithRSAEncryption 57:d2:b0:1a:86:0c:62:fd:e7:30:36:be:97:26:37:ba:b7:be: 2c:e6:34:eb:96:b5:ef:51:93:6a:1e:f8:ab:fe:fa:ac:78:f4: 01:4e:fc:7b:9a:5c:4f:4e:97:28:5c:be:1a:d9:ff:8a:fc:96: ca:62:70:64:df:a4:e4:6b:15:0e:af:ea:75:24:eb:4a:df:aa: b0:ec:80:72:44:b5:35:85:9c:ec:cb:59:bf:23:fc:0d:ea:02: 37:17:ba:fc:2d:ba:ac:7b:2f:62:aa:87:35:f0:7b:c1:26:11: 5c:57:0b:93:25:d5:77:b3:cd:66:1c:98:d7:76:69:23:b5:d6: 53:09:c2:dd:05:b1:e2:28:30:a5:4f:2c:bd:ed:0c:c5:32:01: bd:38:9d:c9:f8:67:c5:72:6a:fb:1d:3e:9b:3f:c6:fc:10:34: 3b:5f:ae:b5:8d:dc:c3:46:dc:40:8b:38:7f:25:07:c1:33:2d: 9a:02:20:31:08:38:60:ea:1b:98:8a:f9:47:2b:24:2b:a6:ce: b6:c3:2d:7c:05:a2:53:4d:3d:88:53:23:35:04:1a:d9:ea:b0: 51:c4:8f:fb:f1:1a:d4:b3:23:50:93:bf:f0:53:cd:9e:d6:49: b0:fc:18:ac:85:7c:6b:9c:e0:d7:12:83:cb:b7:5e:94:9d:d5: a7:88:84:9b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCvq8NGPYW9kPe09cXhWGvkabUVAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNTE0NDQzM1oX DTI2MTEwNDE0NDkzM1owMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4 NzIyODNFQTBGOTNCNTc4NDExNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2nQWDqfFCW7Z8yXBraYSUbnOYaoH56k85PLpOQQjm+98Cd0nl06DIt+XQ2 VNqv5eqXfwj2RWNMGtYHBZZaNwrC8gdnHVnS0pJ21+SWkAH8gqI+dgm08gaezojW BThBMzBjTaJG/7vwbtCuXy4R0+dPOyzhABjjeW0D9EuUdZrW0E6KEMMq7g3OmFDo 1OKdGAFRhbCrKmEQxz4UjQnG4PNfcKPLkWk4dnIu/XTHBzvcIKDDHWlyu7ym9YRK 2y4a3J6ZhVv524jjTbPy86Kh94HlobW+Q3HvcgIgshTszT4DBnNuihkyDE+0iNZW SpnZSb0a3+aaJSZwnP9Zg0TBuI8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJzV3sqOFGoCMa6HIoPqD5O1eEEUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkMmI0Zjc3 LTc0ZDAtNDc5Ny1hZWUwLTllYTkwNzY1NDczMC8wLzlDRDVERUNBOEUxNDZBMDIz MUFFODcyMjgzRUEwRjkzQjU3ODQxMTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABne1UwDQYJKoZIhvcNAQELBQADggEBAFfSsBqGDGL95zA2vpcmN7q3vizmNOuW te9Rk2oe+Kv++qx49AFO/HuaXE9OlyhcvhrZ/4r8lspicGTfpORrFQ6v6nUk60rf qrDsgHJEtTWFnOzLWb8j/A3qAjcXuvwtuqx7L2KqhzXwe8EmEVxXC5Ml1XezzWYc mNd2aSO11lMJwt0FseIoMKVPLL3tDMUyAb04ncn4Z8VyavsdPps/xvwQNDtfrrWN 3MNG3ECLOH8lB8EzLZoCIDEIOGDqG5iK+UcrJCumzrbDLXwFolNNPYhTIzUEGtnq sFHEj/vxGtSzI1CTv/BTzZ7WSbD8GKyFfGuc4NcSg8u3XpSd1aeIhJs= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:14 2025 by rpki-client