This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer (raw, json) Hash identifier: Q58bXhmCgEMtL6ZouAKRkuaBZDR1IiCduENDJiKaSs8= Subject key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 08CC0CA990175C57F295DBEAFBFD546102C54B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft caRepository: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:29:22 +0000 Certificate not after: Tue 02 Jun 2026 10:34:22 +0000 Subordinate resources: IP: 103.23.232.0/23 IP: 103.81.100.0/23 IP: 2405:1e40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cc:0c:a9:90:17:5c:57:f2:95:db:ea:fb:fd:54:61:02:c5:4b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:29:22 2025 GMT Not After : Jun 2 10:34:22 2026 GMT Subject: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:54:3c:25:03:e2:b8:c9:ea:ac:55:39:f6: 12:2d:fa:b8:7c:81:9a:97:8f:c0:bc:1b:14:b8:84: 45:37:f7:ac:55:aa:46:b1:2d:3e:4f:f4:28:c3:07: e2:e6:6d:4c:4c:c8:f1:4c:26:c3:6e:ab:e5:96:48: 9a:91:40:1d:65:81:ba:f0:47:41:3e:96:fb:cd:1d: 74:21:6d:35:cd:bb:ac:06:3e:53:fc:aa:c3:6e:93: 6e:7f:40:0a:7a:70:e1:7e:76:32:ea:39:48:ee:f6: a8:05:d9:4f:2f:59:10:2d:d9:2e:b8:39:a7:9b:c6: bc:a4:84:be:dd:c3:07:57:6e:45:5d:3b:7a:6d:08: ec:19:7a:f3:2f:93:d5:60:27:39:50:8e:16:00:5d: c8:11:45:bd:cf:53:a1:84:e8:ee:f2:5f:7c:11:96: b1:be:f1:00:36:ab:16:45:db:c5:25:ec:e1:04:bf: bb:f3:31:4e:f0:d8:4b:af:0a:44:cc:1f:db:8a:d2: 31:26:3a:7d:dc:1e:cd:9c:8d:b5:b5:ce:10:7a:f8: 73:64:75:b0:8f:f7:94:d9:83:13:3d:7a:3f:cf:74: 1b:26:28:d1:4b:c0:4c:c4:5d:e7:54:da:d4:0f:1c: d0:3b:f4:f0:a8:e7:2f:77:bf:30:9a:b6:f1:d5:04: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.232.0/23 103.81.100.0/23 IPv6: 2405:1e40::/32 Signature Algorithm: sha256WithRSAEncryption 62:d1:a7:87:8c:80:90:7f:e7:f0:ea:29:db:28:ef:a0:01:94: 9f:2a:32:8f:97:9f:ca:9d:ac:e5:e8:8c:27:de:54:c0:10:16: ca:9f:60:ec:66:69:a8:b7:f4:12:82:89:7e:fe:a5:23:90:05: 9e:3a:b8:2c:7a:2d:eb:a6:1a:c1:b1:50:cf:71:c4:d1:f7:2f: dd:e9:8d:4a:9c:73:d6:24:82:6f:1f:43:25:a9:58:35:20:84: 03:52:21:5d:ba:d9:47:de:9d:82:b8:83:32:55:51:8b:77:f3: f6:f2:ae:32:5b:77:7e:cf:c5:9d:e7:fa:43:06:ff:1f:f6:f4: 5b:be:d5:ef:24:d3:f2:f9:5c:a0:bf:c9:39:85:46:5c:2d:20: 89:7d:a3:91:47:ef:a0:5d:e7:c1:f7:3e:c7:25:68:b5:7d:b6: 65:6f:b5:05:e1:94:3e:33:a5:0e:d0:b0:fc:26:dd:5d:8d:cc: 7f:3f:bb:29:a9:b7:04:46:32:39:78:34:8b:31:24:84:0e:63: a3:d1:70:02:6c:59:fc:7e:e9:e5:57:1f:74:fa:28:0d:71:02: 0e:62:a1:70:38:f7:bf:42:93:7d:63:ea:a9:57:70:b1:b5:39: 0b:36:1b:56:fe:c6:40:8a:05:77:9b:f2:e5:3a:12:b6:cc:68: f4:87:e3:c3 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUCMwMqZAXXFfyldvq+/1UYQLFSwowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwMjkyMloX DTI2MDYwMjEwMzQyMlowMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5 NzdDRjRBQzY1OTZGREQ5N0I5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuoVDwlA+K4yeqsVTn2Ei36uHyBmpePwLwbFLiERTf3rFWqRrEtPk/0KMMH 4uZtTEzI8Uwmw26r5ZZImpFAHWWBuvBHQT6W+80ddCFtNc27rAY+U/yqw26Tbn9A Cnpw4X52Muo5SO72qAXZTy9ZEC3ZLrg5p5vGvKSEvt3DB1duRV07em0I7Bl68y+T 1WAnOVCOFgBdyBFFvc9ToYTo7vJffBGWsb7xADarFkXbxSXs4QS/u/MxTvDYS68K RMwf24rSMSY6fdwezZyNtbXOEHr4c2R1sI/3lNmDEz16P890GyYo0UvATMRd51Ta 1A8c0Dv08KjnL3e/MJq28dUEwxcCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKUeN1I7BbFmt96XfPSsZZb92XuYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4ZjM5YmQ0 LWNkYWMtNDFjZi04ODU4LWQ3NDEwZjY0ZDE1NS8wL0E1MUUzNzUyM0IwNUIxNjZC N0RFOTc3Q0Y0QUM2NTk2RkREOTdCOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAFnF+gDBAFnUWQwDQQCAAIwBwMFACQFHkAwDQYJKoZIhvcNAQELBQADggEBAGLR p4eMgJB/5/DqKdso76ABlJ8qMo+Xn8qdrOXojCfeVMAQFsqfYOxmaai39BKCiX7+ pSOQBZ46uCx6LeumGsGxUM9xxNH3L93pjUqcc9Ykgm8fQyWpWDUghANSIV262Ufe nYK4gzJVUYt38/byrjJbd37PxZ3n+kMG/x/29Fu+1e8k0/L5XKC/yTmFRlwtIIl9 o5FH76Bd58H3PsclaLV9tmVvtQXhlD4zpQ7QsPwm3V2NzH8/uymptwRGMjl4NIsx JIQOY6PRcAJsWfx+6eVXH3T6KA1xAg5ioXA4979Ck31j6qlXcLG1OQs2G1b+xkCK BXeb8uU6ErbMaPSH48M= -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:59 2025 by rpki-client