This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer (raw, json) Hash identifier: V8vnr4XToxXdrLfZUU4stmtX9WPBiEZ4zc8rmJMMBsY= Subject key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 762B4500522D5C4AA610C309E887BD5017302160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 08 Nov 2025 23:42:40 +0000 Certificate not after: Sat 07 Nov 2026 23:47:40 +0000 Subordinate resources: IP: 103.147.219.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2b:45:00:52:2d:5c:4a:a6:10:c3:09:e8:87:bd:50:17:30:21:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 23:42:40 2025 GMT Not After : Nov 7 23:47:40 2026 GMT Subject: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:1f:c2:11:f7:89:9b:f0:47:08:e7:b9:be: 51:61:6d:4e:a0:45:63:04:c3:b0:e3:5d:55:7e:27: 59:55:99:6e:b3:58:b5:2e:aa:d8:a7:8f:23:c9:f1: 59:89:1e:11:6e:54:6a:04:33:cb:b9:03:62:2c:60: 28:a5:bc:03:a0:6c:72:dd:7b:90:4f:c4:43:bc:17: 5a:3d:28:e6:23:10:56:36:8a:dd:11:19:1e:0a:7f: 9d:8b:ab:43:4f:5c:d2:86:ea:02:f1:48:2f:bb:aa: 32:75:5f:04:f0:8b:c4:31:3a:e9:cf:f8:c6:5a:97: eb:5c:a8:2a:da:c6:5c:0d:34:66:a0:fa:88:1a:68: fd:02:44:bc:cc:ae:04:f9:01:f3:40:9b:d3:35:21: 68:3c:04:5c:ed:3b:73:54:4f:10:3e:9f:5b:72:34: 12:ac:2c:84:92:ad:14:7a:f8:70:c1:0d:ba:8f:c2: e5:ad:9b:16:4d:d3:ab:90:3b:d6:da:67:5f:a6:82: b3:0e:92:28:9b:8e:62:3b:ee:7b:26:15:21:84:06: df:54:f4:b4:93:04:16:f0:e7:b6:09:69:9e:b6:de: 7c:0a:69:61:b9:7a:8f:7e:ab:56:b1:cb:66:3f:f7: 62:81:6b:ef:7f:28:a5:b8:65:9a:88:b9:43:01:fb: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.219.0/24 Signature Algorithm: sha256WithRSAEncryption 54:94:06:c7:de:7f:09:84:ae:80:e2:5b:d4:7d:bc:a8:09:c5: 11:d6:44:2d:b4:c1:cc:e4:4f:e7:b9:a2:e6:f7:40:51:05:83: b0:05:15:92:2e:41:89:f5:3a:46:90:df:b7:73:35:41:94:4a: 89:9d:58:40:e4:c5:b0:67:82:d5:dd:e0:a7:7c:6d:04:02:4c: d7:5c:dc:36:54:bb:6e:02:61:2f:57:0b:df:eb:13:5b:f4:5b: f4:0e:34:5a:55:c3:d9:68:e8:71:bb:0e:9d:ed:d5:11:21:e9: 62:80:94:6a:35:8a:77:55:8c:e8:1a:2e:35:c0:c3:99:15:5b: 3a:c2:43:3e:68:07:db:c3:6a:af:2c:9c:d9:e3:12:39:d9:59: 2c:51:e8:37:00:b9:52:10:c6:0f:8a:95:1c:fe:42:6b:33:99: b9:57:72:02:be:83:73:94:73:b7:9a:2e:95:55:8b:c4:c5:30: da:95:55:9e:6d:ca:74:c5:64:46:aa:12:a4:73:bb:9c:d7:7b: 5f:aa:23:cd:03:d5:4f:7e:5c:f9:6c:43:e9:ce:c9:4c:f1:86: 99:74:cf:5f:c0:90:01:7a:34:3d:b2:e2:8a:e0:c1:f5:e0:89: 56:50:7d:43:b3:8f:9c:97:d3:0d:cb:05:9e:1a:d3:ff:23:06: 83:c7:72:09 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUditFAFItXEqmEMMJ6Ie9UBcwIWAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwODIzNDI0MFoX DTI2MTEwNzIzNDc0MFowMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0 MEI1M0E2RjcxQzc4NUY3RTlBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCYH8IR94mb8EcI57m+UWFtTqBFYwTDsONdVX4nWVWZbrNYtS6q2KePI8nx WYkeEW5UagQzy7kDYixgKKW8A6Bsct17kE/EQ7wXWj0o5iMQVjaK3REZHgp/nYur Q09c0obqAvFIL7uqMnVfBPCLxDE66c/4xlqX61yoKtrGXA00ZqD6iBpo/QJEvMyu BPkB80Cb0zUhaDwEXO07c1RPED6fW3I0EqwshJKtFHr4cMENuo/C5a2bFk3Tq5A7 1tpnX6aCsw6SKJuOYjvueyYVIYQG31T0tJMEFvDntglpnrbefAppYbl6j36rVrHL Zj/3YoFr738opbhlmoi5QwH7P+0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7+J9KeepdZg6JAtTpvcceF9+mmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NzZmMmU1 LWRmYmQtNGY3Zi04YjNkLTdiOTcwZDU0MWI4Zi8wL0FFRkUyN0QyOUU3QTk3NTk4 M0EyNDBCNTNBNkY3MUM3ODVGN0U5QTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnk9swDQYJKoZIhvcNAQELBQADggEBAFSUBsfefwmEroDiW9R9vKgJxRHWRC20 wczkT+e5oub3QFEFg7AFFZIuQYn1OkaQ37dzNUGUSomdWEDkxbBngtXd4Kd8bQQC TNdc3DZUu24CYS9XC9/rE1v0W/QONFpVw9lo6HG7Dp3t1REh6WKAlGo1indVjOga LjXAw5kVWzrCQz5oB9vDaq8snNnjEjnZWSxR6DcAuVIQxg+KlRz+QmszmblXcgK+ g3OUc7eaLpVVi8TFMNqVVZ5tynTFZEaqEqRzu5zXe1+qI80D1U9+XPlsQ+nOyUzx hpl0z1/AkAF6ND2y4orgwfXgiVZQfUOzj5yX0w3LBZ4a0/8jBoPHcgk= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:59 2025 by rpki-client