This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer (raw, json) Hash identifier: LsM6YAuRXFbNf7lY3SFbtCcm3ZSGekaEQzgdiNzmglA= Subject key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23B85AAE208C0BA9DE5C9122ABB53871CE148661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft caRepository: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 03:31:58 +0000 Certificate not after: Tue 02 Jun 2026 03:36:58 +0000 Subordinate resources: IP: 103.153.34.0/23 IP: 2001:df4:2d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b8:5a:ae:20:8c:0b:a9:de:5c:91:22:ab:b5:38:71:ce:14:86:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 03:31:58 2025 GMT Not After : Jun 2 03:36:58 2026 GMT Subject: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:9e:a4:ae:3e:5e:d9:72:61:8d:47:87:f5: be:c4:39:e9:8d:01:13:f4:65:48:b4:27:10:b8:f5: f3:00:b2:63:64:55:b1:d3:8b:0f:83:69:23:97:0c: 84:ac:ba:54:bc:8d:1e:ae:84:32:8c:d2:10:43:f2: ed:2b:bb:5f:d7:24:d9:99:69:99:db:ea:e3:54:48: 1a:84:01:7a:34:47:27:e6:ae:28:a0:29:ee:35:8d: 76:30:3a:c1:53:18:32:a2:b8:29:2a:94:93:e5:32: 22:6b:63:60:c9:22:54:c9:73:87:20:f1:94:62:a6: 80:2c:d4:50:82:3d:66:81:8d:d9:83:76:40:a0:8c: 18:8d:bd:e7:8a:f3:3d:a9:8b:8e:bd:ae:4e:a9:41: 0c:c0:ab:ea:4b:dc:2f:74:22:28:ad:d1:7e:0d:65: 79:64:f0:28:be:65:cc:10:2c:87:69:a9:cb:5d:78: aa:9e:46:f9:6d:ca:5c:ba:25:ca:da:27:d0:07:62: cd:e3:c6:46:ea:c6:fc:b8:7a:65:1f:85:cc:60:c1: 30:73:06:47:26:ac:68:19:c9:cc:77:c0:87:b7:43: 94:28:4a:0a:d4:e6:c2:1f:e3:a1:45:50:2a:50:95: bc:e8:18:f6:22:f2:1d:64:92:0e:c7:b8:8d:dc:25: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.34.0/23 IPv6: 2001:df4:2d80::/48 Signature Algorithm: sha256WithRSAEncryption 4e:71:1a:11:31:53:ff:39:92:77:aa:ec:49:34:7c:df:3c:06: c6:9b:de:01:5a:a3:44:bc:3b:e1:94:8d:26:13:da:6f:e1:44: ee:50:e4:3c:6b:2b:97:ed:d1:e0:51:c0:92:dc:0a:d4:28:e8: b3:49:e3:20:93:bb:ed:97:a7:02:7e:1c:d0:85:ba:cf:86:65: 12:a2:54:6c:f3:d6:fd:d2:19:cf:83:35:37:8c:dd:de:86:be: 82:6e:e4:ad:d0:2a:39:03:fe:5a:e5:9a:36:fc:0d:01:d2:df: c5:20:9a:a6:d1:af:f2:23:d1:b3:76:a0:0f:92:93:f4:c0:80: eb:46:21:c8:43:d6:27:fd:f1:d1:20:98:e6:e3:ba:af:d1:27: 64:23:c6:78:3d:91:4f:59:17:d0:a4:fa:b7:c4:d3:94:c4:13: 61:90:6d:ef:b2:7e:6c:54:cc:12:11:8f:c6:18:a3:89:50:ba: 25:71:eb:e0:6d:45:04:14:bc:97:4f:9d:9e:5f:7d:9f:93:68: 91:52:06:3d:e6:4f:f7:37:a9:df:53:8d:be:e7:04:f9:2f:27: b3:45:24:c9:f0:ba:66:f7:c3:6c:80:36:bf:0f:47:1a:60:7c: b0:b4:9e:2c:cf:4e:37:e6:67:47:b8:1b:71:d0:b4:f3:f9:52: c0:d3:a6:fc -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUI7hariCMC6neXJEiq7U4cc4UhmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAzMzE1OFoX DTI2MDYwMjAzMzY1OFowMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJE MTQwMzFEQTIzRTVBQUZDNjRGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPEnqSuPl7ZcmGNR4f1vsQ56Y0BE/RlSLQnELj18wCyY2RVsdOLD4NpI5cM hKy6VLyNHq6EMozSEEPy7Su7X9ck2Zlpmdvq41RIGoQBejRHJ+auKKAp7jWNdjA6 wVMYMqK4KSqUk+UyImtjYMkiVMlzhyDxlGKmgCzUUII9ZoGN2YN2QKCMGI2954rz PamLjr2uTqlBDMCr6kvcL3QiKK3Rfg1leWTwKL5lzBAsh2mpy114qp5G+W3KXLol yton0AdizePGRurG/Lh6ZR+FzGDBMHMGRyasaBnJzHfAh7dDlChKCtTmwh/joUVQ KlCVvOgY9iLyHWSSDse4jdwllF8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLWRBZtq8vXWbrvRQDHaI+Wq/GT3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkYzQxYzFh LWUwODgtNGVmNi05ZDI4LTgxNGM2MTQ1NmQzMC8wL0I1OTEwNTlCNkFGMkY1RDY2 RUJCRDE0MDMxREEyM0U1QUFGQzY0RjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnmSIwDwQCAAIwCQMHACABDfQtgDANBgkqhkiG9w0BAQsFAAOCAQEATnEaETFT /zmSd6rsSTR83zwGxpveAVqjRLw74ZSNJhPab+FE7lDkPGsrl+3R4FHAktwK1Cjo s0njIJO77ZenAn4c0IW6z4ZlEqJUbPPW/dIZz4M1N4zd3oa+gm7krdAqOQP+WuWa NvwNAdLfxSCaptGv8iPRs3agD5KT9MCA60YhyEPWJ/3x0SCY5uO6r9EnZCPGeD2R T1kX0KT6t8TTlMQTYZBt77J+bFTMEhGPxhijiVC6JXHr4G1FBBS8l0+dnl99n5No kVIGPeZP9zep31ONvucE+S8ns0UkyfC6ZvfDbIA2vw9HGmB8sLSeLM9ON+ZnR7gb cdC08/lSwNOm/A== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:49 2025 by rpki-client