This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer (raw, json) Hash identifier: ZUxt9UUM4FYTkrEyG6rk2pp56LcOAe/LBpfs8Exrz+4= Subject key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A53B9722B5E16FE9794A277D02BD89D76BC2FA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft caRepository: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Nov 2025 06:39:53 +0000 Certificate not after: Fri 06 Nov 2026 06:44:53 +0000 Subordinate resources: IP: 103.56.80.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:53:b9:72:2b:5e:16:fe:97:94:a2:77:d0:2b:d8:9d:76:bc:2f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 7 06:39:53 2025 GMT Not After : Nov 6 06:44:53 2026 GMT Subject: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:7b:ca:67:b9:5d:64:76:8c:5a:af:11:ce: 12:82:89:dc:3d:e6:ed:4b:b9:18:28:43:c1:ff:94: df:24:07:ba:4a:9c:35:49:33:f3:09:ee:90:4d:c4: 3d:b7:57:9e:79:14:ce:8d:20:43:65:8b:84:97:1c: 64:ae:d3:8c:9b:0d:d5:a0:d2:6a:27:91:6b:a3:f9: 5c:17:58:bb:77:cb:ae:d6:a0:72:ab:25:ee:0f:2a: 32:21:15:03:86:b5:40:34:df:d0:70:89:cd:7d:ee: dd:74:90:7c:e1:1d:29:6b:27:7a:bc:40:20:c1:6e: eb:70:4c:59:7b:02:2c:22:17:5d:4d:e1:77:35:91: c9:08:ce:55:c2:58:a6:61:71:56:86:bd:39:97:55: 3e:4c:a0:5c:f4:ee:4a:ae:09:91:89:fc:0c:56:69: df:72:b1:8e:97:d8:31:5f:8e:8b:e1:68:f7:70:dc: 2c:92:4e:b5:42:dc:82:85:4a:c9:34:81:c9:df:f0: 85:e0:1c:64:8d:bc:ca:36:07:ab:8e:fb:67:00:31: 15:36:ed:a1:25:42:9b:a2:f1:94:a6:89:ed:a8:e8: 2a:1a:f4:c3:e5:05:0a:86:bb:11:7e:4f:2a:d6:b8: 7e:38:0e:d8:bf:17:1a:06:59:ec:73:b6:cd:f0:78: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.80.0/23 Signature Algorithm: sha256WithRSAEncryption 93:d7:a8:c1:39:20:b1:26:6a:b3:09:ff:e7:ab:25:0b:4b:48: e4:42:3f:f3:6e:3a:15:34:ec:c5:86:46:e8:8f:9c:18:a7:96: d6:28:da:b2:bb:01:0b:11:bd:4e:42:ed:36:54:7f:d9:5c:32: dd:e7:0c:7b:24:db:be:1f:70:c8:bf:6a:ad:26:8c:0f:94:6f: 3d:0e:80:fb:9a:86:f2:64:b8:b2:ab:07:83:a7:c2:93:27:c4: b8:5b:83:2f:df:96:06:f3:82:df:ef:5e:8d:58:02:8d:ed:99: 87:73:88:f2:f4:bd:cd:b7:dc:5b:28:27:91:88:fa:b4:7d:52: 46:a2:63:ee:89:08:72:cd:c5:a5:0a:39:e1:3e:4a:37:33:06: fd:c9:ed:d3:93:02:fd:79:ee:c1:51:07:de:7d:ce:c7:72:de: 2b:3f:73:03:28:17:69:14:e2:33:76:0d:c1:ed:78:3f:a9:61: 34:6d:7e:69:99:e9:08:76:b8:e9:ac:f7:c7:5d:4e:43:c2:3d: bc:fb:40:96:ce:e5:46:41:7c:3c:93:3d:ae:af:6e:5f:e1:05: 77:f3:aa:43:b1:ba:9c:9d:bd:81:12:89:80:bf:ae:9f:89:32: f3:0a:71:9c:09:bc:56:07:f5:cf:09:9c:5b:80:57:65:b2:83: c2:f0:6c:be -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUalO5citeFv6XlKJ30CvYnXa8L6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNzA2Mzk1M1oX DTI2MTEwNjA2NDQ1M1owMzExMC8GA1UEAxMoQTJGMEFGMTEzMTgyMzY4NTU1RjVG MEY5MkRDMUEwRUJEOTg5NTU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJne8pnuV1kdoxarxHOEoKJ3D3m7Uu5GChDwf+U3yQHukqcNUkz8wnukE3E PbdXnnkUzo0gQ2WLhJccZK7TjJsN1aDSaieRa6P5XBdYu3fLrtagcqsl7g8qMiEV A4a1QDTf0HCJzX3u3XSQfOEdKWsnerxAIMFu63BMWXsCLCIXXU3hdzWRyQjOVcJY pmFxVoa9OZdVPkygXPTuSq4JkYn8DFZp33KxjpfYMV+Oi+Fo93DcLJJOtULcgoVK yTSByd/wheAcZI28yjYHq477ZwAxFTbtoSVCm6LxlKaJ7ajoKhr0w+UFCoa7EX5P Kta4fjgO2L8XGgZZ7HO2zfB4czcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKLwrxExgjaFVfXw+S3BoOvZiVWWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZWQyOGRlOC0zMGExLTQ5MzItYjUzOS0yMjM4YmE3NTkzMGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlZDI4ZGU4 LTMwYTEtNDkzMi1iNTM5LTIyMzhiYTc1OTMwYS8wL0EyRjBBRjExMzE4MjM2ODU1 NUY1RjBGOTJEQzFBMEVCRDk4OTU1OTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnOFAwDQYJKoZIhvcNAQELBQADggEBAJPXqME5ILEmarMJ/+erJQtLSORCP/Nu OhU07MWGRuiPnBinltYo2rK7AQsRvU5C7TZUf9lcMt3nDHsk274fcMi/aq0mjA+U bz0OgPuahvJkuLKrB4OnwpMnxLhbgy/flgbzgt/vXo1YAo3tmYdziPL0vc233Fso J5GI+rR9UkaiY+6JCHLNxaUKOeE+SjczBv3J7dOTAv157sFRB959zsdy3is/cwMo F2kU4jN2DcHteD+pYTRtfmmZ6Qh2uOms98ddTkPCPbz7QJbO5UZBfDyTPa6vbl/h BXfzqkOxupydvYESiYC/rp+JMvMKcZwJvFYH9c8JnFuAV2Wyg8LwbL4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:50 2025 by rpki-client