This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
File:                     B392381083372148D0977D0066CFF38FD5A32CDB.cer (raw, json)
Hash identifier:          2gKcyF7xuoVxs5I7znfQHhGqZlFPnMxakr4U32L4R00=
Subject key identifier:   B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4C60D84DE2F8FCB361776525F521F2172DA4CE44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Dec 2025 23:49:17 +0000
Certificate not after:    Tue 08 Dec 2026 23:54:17 +0000
Subordinate resources:    IP: 103.185.82.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 13:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:60:d8:4d:e2:f8:fc:b3:61:77:65:25:f5:21:f2:17:2d:a4:ce:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  9 23:49:17 2025 GMT
            Not After : Dec  8 23:54:17 2026 GMT
        Subject: CN=B392381083372148D0977D0066CFF38FD5A32CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:3d:28:b4:9b:46:2a:a1:89:ec:d4:9d:d8:
                    e3:0e:5e:4e:e7:d6:af:de:00:cc:de:07:71:c8:b6:
                    d4:fc:e0:02:27:75:f5:f7:08:a4:af:13:48:53:ad:
                    7f:fd:bd:ba:06:8d:d3:c8:c1:9e:cd:62:f1:c7:91:
                    78:5e:73:44:c9:92:c0:c1:61:88:87:b4:4b:43:04:
                    92:ec:4b:a1:8c:1c:72:65:9e:55:f7:26:66:01:d1:
                    e1:1f:02:8a:f4:d8:ac:14:bd:f3:a4:6d:30:ec:64:
                    1f:53:27:c5:a4:1b:4f:aa:4d:3a:63:1b:78:20:f3:
                    b5:56:b4:d9:55:10:e9:f0:b7:b6:62:71:e0:5c:39:
                    0c:14:1b:86:d6:85:87:a5:5b:35:b7:bb:c0:db:04:
                    99:a7:dd:48:2b:a2:27:f4:af:5b:dd:82:32:69:f7:
                    23:a0:ae:87:17:21:a7:f6:bf:af:f9:c1:47:28:36:
                    8e:e9:29:ee:a8:78:12:0e:04:f6:38:53:7b:43:58:
                    7c:d6:db:e3:7b:8e:4d:21:91:89:a7:dd:f2:a0:dc:
                    e0:96:47:7a:20:84:e9:2a:57:54:7d:1d:70:57:99:
                    bd:46:98:b6:44:5d:93:0e:9f:b0:a9:15:b4:f4:7f:
                    68:c7:01:9b:44:48:bf:d1:72:d9:d4:eb:ff:18:25:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:8c:f2:c9:01:53:92:75:72:d1:75:3f:e6:c2:1f:b3:db:b6:
         6f:12:04:ac:1b:12:4d:54:e7:a7:da:b9:25:3a:bd:4e:ac:f8:
         23:fb:c6:44:80:cb:88:62:63:28:ab:85:58:72:36:a1:25:b8:
         b1:fe:7a:80:b3:9c:46:8c:c8:3e:45:0e:d7:e0:63:d8:b4:12:
         27:e8:48:5b:4b:41:9e:39:96:3b:3d:7c:be:6e:9b:28:d7:ae:
         c9:14:1e:06:d9:f7:e2:12:54:c1:42:18:b0:22:b0:36:04:74:
         54:53:36:31:a8:15:23:25:bd:63:c7:16:a1:c1:59:2a:58:17:
         6a:cf:96:ac:ce:6d:35:5c:26:be:19:01:0e:63:38:b6:a0:45:
         36:91:f8:f1:f1:ef:b9:62:d6:27:66:67:18:ba:c0:b7:8f:39:
         13:bb:e7:e5:bf:06:cf:a2:8e:4c:90:8e:7d:ef:91:2c:ae:5f:
         5b:d5:af:10:5a:b9:7b:27:af:5e:d3:81:4a:f5:38:f5:00:b0:
         43:72:3e:15:26:eb:a4:ac:6b:a5:14:51:38:00:42:1f:26:92:
         d8:0f:f5:21:de:b0:96:55:70:da:07:90:a6:00:a1:da:ab:7d:
         63:81:a6:03:38:1d:ce:1b:df:33:f8:ff:45:5b:3a:bb:f4:b3:
         ff:67:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:37:26 2025 by rpki-client