This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer (raw, json) Hash identifier: 2imxTI2Se2iiDIdVZkgt/KpxwX90RLhj06cJnJokbk0= Subject key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3F3E6915F7A9083EF98049A58A14F3CC71E33036 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft caRepository: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 09:47:49 +0000 Certificate not after: Thu 05 Nov 2026 09:52:49 +0000 Subordinate resources: IP: 103.121.96.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3e:69:15:f7:a9:08:3e:f9:80:49:a5:8a:14:f3:cc:71:e3:30:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 6 09:47:49 2025 GMT Not After : Nov 5 09:52:49 2026 GMT Subject: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:5b:88:3c:34:02:56:b5:ac:84:ad:d4:b0: 8f:3f:4a:88:ae:92:ff:f8:2f:5e:ef:eb:26:30:a3: dc:25:0d:97:5a:a1:0c:2a:73:82:ec:f5:91:ae:c0: ad:40:17:9e:9e:65:e6:10:6c:fb:08:7e:10:2c:ac: c5:60:4e:5b:1e:e9:0c:7e:b4:f5:1b:28:53:23:c9: cc:b9:06:ac:8d:6d:26:e5:71:21:05:75:00:8c:44: 6b:71:57:21:81:9e:98:75:8b:df:41:9d:67:6d:f2: 12:07:07:78:b3:8f:61:2a:2f:7f:73:47:e0:62:86: f4:57:4c:9d:bd:4f:7f:3f:ed:df:7f:1e:8a:f0:8e: b2:d8:ad:2d:97:ff:87:bf:88:13:bb:a9:76:26:53: 82:85:ee:64:4b:68:65:c8:f1:d5:76:6b:56:ff:f7: b2:5b:cd:84:b2:d8:4e:b7:20:cd:80:f3:e6:fd:bd: 97:e4:02:a3:f8:86:41:72:1a:5a:cd:ff:b2:40:e3: ad:4f:b0:91:94:58:dc:78:e7:dd:5d:dc:21:7e:5b: 91:8c:9a:ff:f7:9b:f6:4a:4d:e2:7a:c2:ed:8e:19: 5d:0e:f6:f1:25:88:56:ed:a7:7c:43:75:81:e5:f9: ae:dc:bb:3b:ac:e1:d4:63:33:53:ef:f6:d9:88:47: 91:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.96.0/22 Signature Algorithm: sha256WithRSAEncryption 34:20:ae:88:60:f9:87:15:87:4d:a7:7d:8a:3e:90:2b:2f:8f: ae:3d:80:5e:ea:85:a2:be:00:82:9c:89:90:52:12:57:35:6f: 6f:48:a9:5d:7d:65:b6:dd:4b:22:c1:03:e5:a1:93:7f:1c:7b: 3c:61:4f:19:7d:bc:c3:f0:77:4c:31:fd:e3:ed:44:f2:55:a5: 7e:f8:be:b2:4f:e0:d9:d3:19:e7:62:a4:6a:df:5c:1a:1a:c9: 86:5a:5c:e1:92:0f:be:d4:37:54:2f:6f:b8:6d:ff:60:d8:43: f8:e7:34:c4:8d:d7:03:53:34:75:55:31:18:f4:50:6f:b0:46: c0:03:cc:75:ce:7d:80:4c:10:a9:9c:1d:ad:94:e6:31:d9:de: f2:32:52:7a:b0:99:df:ff:07:a3:09:3c:06:3f:17:a9:5b:80: 94:15:47:01:da:07:cf:cf:1b:96:b9:42:67:e4:a4:6d:32:ec: 70:25:de:0e:e2:e7:99:5a:02:a9:10:52:be:41:5c:a6:b0:3c: 13:03:81:fe:9f:77:e5:08:60:b1:17:a3:48:05:27:2d:e1:38: 12:ce:d0:58:b2:94:82:5f:42:7d:df:8e:dc:dd:cd:c6:34:cb: 27:ee:e4:b9:45:fd:4a:30:c9:84:f0:a1:f2:d8:f4:9f:42:cf: fc:c9:20:25 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPz5pFfepCD75gEmlihTzzHHjMDYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNjA5NDc0OVoX DTI2MTEwNTA5NTI0OVowMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFB RTI0Mzc0Q0MyRDhGRTM0RkExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMN9W4g8NAJWtayErdSwjz9KiK6S//gvXu/rJjCj3CUNl1qhDCpzguz1ka7A rUAXnp5l5hBs+wh+ECysxWBOWx7pDH609RsoUyPJzLkGrI1tJuVxIQV1AIxEa3FX IYGemHWL30GdZ23yEgcHeLOPYSovf3NH4GKG9FdMnb1Pfz/t338eivCOstitLZf/ h7+IE7updiZTgoXuZEtoZcjx1XZrVv/3slvNhLLYTrcgzYDz5v29l+QCo/iGQXIa Ws3/skDjrU+wkZRY3Hjn3V3cIX5bkYya//eb9kpN4nrC7Y4ZXQ728SWIVu2nfEN1 geX5rty7O6zh1GMzU+/22YhHkbsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK4SWB89IKhwiNquJDdMwtj+NPoSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzNzc0NjFk LWZlNGYtNDk2MS05MmU1LTk2NTVhZjI1NzU0YS8wL0FFMTI1ODFGM0QyMEE4NzA4 OERBQUUyNDM3NENDMkQ4RkUzNEZBMTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJneWAwDQYJKoZIhvcNAQELBQADggEBADQgrohg+YcVh02nfYo+kCsvj649gF7q haK+AIKciZBSElc1b29IqV19ZbbdSyLBA+Whk38cezxhTxl9vMPwd0wx/ePtRPJV pX74vrJP4NnTGedipGrfXBoayYZaXOGSD77UN1Qvb7ht/2DYQ/jnNMSN1wNTNHVV MRj0UG+wRsADzHXOfYBMEKmcHa2U5jHZ3vIyUnqwmd//B6MJPAY/F6lbgJQVRwHa B8/PG5a5QmfkpG0y7HAl3g7i55laAqkQUr5BXKawPBMDgf6fd+UIYLEXo0gFJy3h OBLO0FiylIJfQn3fjtzdzcY0yyfu5LlF/UowyYTwofLY9J9Cz/zJICU= -----END CERTIFICATE-----Generated at Wed Dec 3 12:42:13 2025 by rpki-client