This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer (raw, json) Hash identifier: zFsAYB43vyRgMEOOQdCLPreJxo2sn0t0zqcNPbWVarg= Subject key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 176ADEBD06D63A86C3D9414FA870D6F5FFF313D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft caRepository: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 26 Nov 2025 23:30:57 +0000 Certificate not after: Wed 25 Nov 2026 23:35:57 +0000 Subordinate resources: IP: 121.50.128.0/20 IP: 202.50.200.0/22 IP: 203.190.184.0/21 IP: 2400:c900::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6a:de:bd:06:d6:3a:86:c3:d9:41:4f:a8:70:d6:f5:ff:f3:13:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 26 23:30:57 2025 GMT Not After : Nov 25 23:35:57 2026 GMT Subject: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:ac:84:81:b0:86:c4:c1:84:b7:9e:30:b4: 5a:4c:b2:64:8d:a3:fc:40:19:da:89:d5:e0:a6:44: 23:84:86:0d:29:e5:94:81:ca:99:d0:79:93:04:de: ed:5c:21:9c:16:ea:b7:2a:be:b8:31:4f:0e:05:82: 12:8e:e7:15:e4:06:b4:3c:85:5a:96:f2:b6:a6:70: 66:f3:d5:e1:6b:c4:42:4c:65:9d:8d:53:52:9f:fb: 05:f5:43:21:de:bb:ae:17:86:b4:25:2f:6d:6d:64: 71:32:a1:09:b4:e0:8a:09:c5:d3:fa:ed:92:57:7f: 62:70:31:ef:7e:04:07:93:04:01:1e:be:a8:69:24: 88:1c:c5:c7:30:5b:23:39:e9:89:f3:25:59:86:f9: f9:4a:06:c2:ac:6f:25:03:e7:a8:a1:5e:88:f2:0c: 2e:d1:f6:6a:d0:8c:a3:fc:d6:72:f2:78:95:f6:f2: 32:5e:4c:3b:35:44:e5:62:0f:e3:2b:0e:33:7b:6c: f9:1b:3f:14:e6:99:55:26:26:73:b1:1f:5d:e7:51: 16:ec:ae:92:3e:f4:2e:b2:02:fc:b1:bf:83:b3:5b: 5a:84:55:d3:59:48:05:bc:75:dd:f7:68:dc:80:f3: a4:b1:9e:86:75:a5:b0:73:4d:16:46:19:11:2f:d8: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.50.128.0/20 202.50.200.0/22 203.190.184.0/21 IPv6: 2400:c900::/32 Signature Algorithm: sha256WithRSAEncryption 90:08:0f:4e:d6:19:ba:90:44:a0:d3:98:d0:e5:39:df:96:69: 98:08:e8:ea:0c:03:ba:9e:d6:5e:30:8d:75:f7:63:73:c5:5b: e0:65:f7:bb:35:61:7a:5c:50:13:d9:50:7a:7f:e6:23:d1:b3: fe:d1:67:6f:e2:ef:8a:1f:8e:b3:3e:c6:dd:28:e1:3d:25:e6: 98:c5:9f:d3:2c:57:64:1a:f4:39:9a:00:01:81:9f:73:68:f5: cf:ba:f0:00:46:e0:db:b5:89:92:46:b3:52:1f:38:68:12:58: ed:96:06:6a:29:ef:da:13:6c:de:82:8c:fd:93:15:59:47:06: 30:37:e3:94:1e:4b:ad:ff:77:4a:5e:d9:6b:41:1d:d1:1a:ee: 2a:bc:81:6f:ef:c6:ba:27:ed:d7:86:0c:bc:a9:d9:99:9d:22: c6:2d:5d:c1:91:01:66:29:2d:d5:96:bd:ba:8d:c4:7a:28:10: 90:e6:6f:1f:b7:47:f2:ed:4f:2e:b5:44:06:f9:dd:92:d9:f4: 30:b6:c9:e6:96:95:57:f3:0c:14:53:ff:69:33:f9:2b:ca:28: 24:0c:14:c0:e4:64:31:6c:fa:20:70:bc:85:3f:1a:3f:f6:eb: 18:a4:82:53:8c:79:ff:54:62:35:8b:06:30:5a:25:72:bf:40: e1:2a:59:80 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUF2revQbWOobD2UFPqHDW9f/zE9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNjIzMzA1N1oX DTI2MTEyNTIzMzU1N1owMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5 RUFDNUE4NzIxMDM1RUVBQUI1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ08rISBsIbEwYS3njC0WkyyZI2j/EAZ2onV4KZEI4SGDSnllIHKmdB5kwTe 7VwhnBbqtyq+uDFPDgWCEo7nFeQGtDyFWpbytqZwZvPV4WvEQkxlnY1TUp/7BfVD Id67rheGtCUvbW1kcTKhCbTgignF0/rtkld/YnAx734EB5MEAR6+qGkkiBzFxzBb IznpifMlWYb5+UoGwqxvJQPnqKFeiPIMLtH2atCMo/zWcvJ4lfbyMl5MOzVE5WIP 4ysOM3ts+Rs/FOaZVSYmc7EfXedRFuyukj70LrIC/LG/g7NbWoRV01lIBbx13fdo 3IDzpLGehnWlsHNNFkYZES/Yi00CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLPx2qZ3CaBlYdyerFqHIQNe6qtbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyODgwZGVl LTdhYTItNGJlNC1iZjM1LWNkYmQxMWQ3OTUwNy8wL0IzRjFEQUE2NzcwOUEwNjU2 MURDOUVBQzVBODcyMTAzNUVFQUFCNUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAR5MoADBALKMsgDBAPLvrgwDQQCAAIwBwMFACQAyQAwDQYJKoZIhvcNAQELBQAD ggEBAJAID07WGbqQRKDTmNDlOd+WaZgI6OoMA7qe1l4wjXX3Y3PFW+Bl97s1YXpc UBPZUHp/5iPRs/7RZ2/i74ofjrM+xt0o4T0l5pjFn9MsV2Qa9DmaAAGBn3No9c+6 8ABG4Nu1iZJGs1IfOGgSWO2WBmop79oTbN6CjP2TFVlHBjA345QeS63/d0pe2WtB HdEa7iq8gW/vxron7deGDLyp2ZmdIsYtXcGRAWYpLdWWvbqNxHooEJDmbx+3R/Lt Ty61RAb53ZLZ9DC2yeaWlVfzDBRT/2kz+SvKKCQMFMDkZDFs+iBwvIU/Gj/26xik glOMef9UYjWLBjBaJXK/QOEqWYA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:59 2025 by rpki-client