This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer (raw, json) Hash identifier: 1qrEriWGyXIdYXNRCyFi8tbqvm+LbWmW/k67y4m7qnk= Subject key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 20EAA894EE32726A0F780DFEBF23BFB6F8561B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft caRepository: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Sep 2025 20:51:16 +0000 Certificate not after: Tue 15 Sep 2026 20:56:16 +0000 Subordinate resources: IP: 103.39.70.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ea:a8:94:ee:32:72:6a:0f:78:0d:fe:bf:23:bf:b6:f8:56:1b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 16 20:51:16 2025 GMT Not After : Sep 15 20:56:16 2026 GMT Subject: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:2b:fa:99:90:0a:d3:79:92:92:64:68:3e: cc:d9:0d:2e:82:54:45:d7:f9:1c:70:87:6a:9f:4b: 34:d7:81:e6:36:ba:6a:8e:74:6e:7a:9b:ad:4f:b8: 06:72:db:6a:9f:43:dd:e2:6c:03:42:6e:69:b6:cd: f1:c5:6d:7f:9b:1b:80:39:da:28:2f:a2:6d:a2:4b: 6b:8d:1f:80:42:c4:5d:82:e8:14:9d:34:58:2c:61: 7c:6a:6e:99:b1:a1:53:1c:9d:17:26:d2:0b:65:55: bd:ea:79:b0:de:0c:67:c3:b4:91:82:8a:fd:7b:6c: f7:cd:70:11:34:21:bd:38:aa:ae:99:47:ca:f9:7b: 04:9d:fd:40:fa:ef:b5:5d:7f:f3:b4:b6:92:46:91: dd:0e:8f:b6:11:3b:e6:0a:7c:88:85:0f:0f:e6:6f: 83:e0:f9:56:b7:89:75:ff:b0:86:62:b9:c0:5b:d2: 8e:1a:d5:5b:57:ad:38:2e:d3:74:3f:ee:28:fd:17: 83:e3:75:d6:33:23:5e:12:83:b4:38:cd:aa:d3:8e: 47:eb:6a:7b:2e:e7:e3:83:4a:e9:2d:36:13:aa:28: 30:30:c1:1b:01:b8:72:64:e2:0a:d1:02:d6:24:72: 3c:88:3c:3a:8c:f4:53:0a:af:38:01:2f:0f:11:0e: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.70.0/23 Signature Algorithm: sha256WithRSAEncryption 15:3e:5b:b1:15:cd:8f:67:ee:a9:01:d0:94:df:73:77:6d:d1: 86:ca:1d:45:3a:b4:c0:45:0f:95:f4:fb:5d:03:84:3c:98:de: 48:15:0f:ec:fb:e1:8c:d8:1e:f0:b6:8d:15:ba:c1:69:96:36: 6d:f6:85:ee:78:54:ee:a3:1c:37:6c:9e:19:e8:6e:3f:4f:fb: 19:8a:d3:20:4b:43:07:30:f4:7e:5c:01:24:38:46:13:0d:af: e4:bc:59:c8:50:7f:12:7c:ce:a5:8e:ae:5c:0f:c0:ff:1c:e0: d7:71:77:78:90:3f:e2:e9:08:e7:26:a6:25:37:02:f0:34:7b: 66:07:b2:3a:31:2a:21:64:5c:83:bd:88:6d:fa:90:4b:31:9c: 5d:8f:8d:eb:1f:53:84:e9:b9:51:66:fb:5c:d3:e2:50:dc:dd: 30:1b:7a:30:87:35:c0:2c:4b:1c:02:99:cf:47:4a:bd:ad:dd: 55:81:50:ac:b6:16:ba:1e:90:97:be:da:15:f2:5b:1c:7a:06: f5:0c:f1:cf:07:20:4a:35:4e:7f:ce:e5:2c:fa:38:d8:ce:ad: 70:c3:76:2d:18:5f:d8:88:ab:fe:46:56:ab:a6:79:69:37:70: ef:2e:23:30:5d:29:98:6d:67:16:fb:60:53:6f:5c:11:e2:e4: 4e:ef:6b:a3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIOqolO4ycmoPeA3+vyO/tvhWG4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNjIwNTExNloX DTI2MDkxNTIwNTYxNlowMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJE RDYwREY3REU5MkU5NEY1QUI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlCK/qZkArTeZKSZGg+zNkNLoJURdf5HHCHap9LNNeB5ja6ao50bnqbrU+4 BnLbap9D3eJsA0JuabbN8cVtf5sbgDnaKC+ibaJLa40fgELEXYLoFJ00WCxhfGpu mbGhUxydFybSC2VVvep5sN4MZ8O0kYKK/Xts981wETQhvTiqrplHyvl7BJ39QPrv tV1/87S2kkaR3Q6PthE75gp8iIUPD+Zvg+D5VreJdf+whmK5wFvSjhrVW1etOC7T dD/uKP0Xg+N11jMjXhKDtDjNqtOOR+tqey7n44NK6S02E6ooMDDBGwG4cmTiCtEC 1iRyPIg8Ooz0UwqvOAEvDxEOiFECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/8Rrqj8ZUir1vdYN996S6U9at7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNTdkNTQz LWJhZjAtNDM0OC04ODU3LTNkMjYwMWMzYTgwMy8wLzlGRkM0NkJBQTNGMTk1MjJB RjVCREQ2MERGN0RFOTJFOTRGNUFCN0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnJ0YwDQYJKoZIhvcNAQELBQADggEBABU+W7EVzY9n7qkB0JTfc3dt0YbKHUU6 tMBFD5X0+10DhDyY3kgVD+z74YzYHvC2jRW6wWmWNm32he54VO6jHDdsnhnobj9P +xmK0yBLQwcw9H5cASQ4RhMNr+S8WchQfxJ8zqWOrlwPwP8c4Ndxd3iQP+LpCOcm piU3AvA0e2YHsjoxKiFkXIO9iG36kEsxnF2PjesfU4TpuVFm+1zT4lDc3TAbejCH NcAsSxwCmc9HSr2t3VWBUKy2FroekJe+2hXyWxx6BvUM8c8HIEo1Tn/O5Sz6ONjO rXDDdi0YX9iIq/5GVqumeWk3cO8uIzBdKZhtZxb7YFNvXBHi5E7va6M= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:23 2025 by rpki-client