This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
File:                     B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer (raw, json)
Hash identifier:          F0F2RhksxTBpzhUl9uXc8q8PzMTjTh89ojY8GdX6Mgc=
Subject key identifier:   B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4327CF7EA423043516010A755C35FAFDAB60CCB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 16:20:32 +0000
Certificate not after:    Wed 25 Mar 2026 16:25:32 +0000
Subordinate resources:    IP: 61.29.252.0/23
                          IP: 103.130.198.0/23
                          IP: 117.103.116.0/24
                          IP: 160.20.222.0/24
                          IP: 2407:14c0::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Dec 2025 03:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:27:cf:7e:a4:23:04:35:16:01:0a:75:5c:35:fa:fd:ab:60:cc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar 26 16:20:32 2025 GMT
            Not After : Mar 25 16:25:32 2026 GMT
        Subject: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:7c:05:4b:9c:56:b1:d0:04:b6:63:90:c0:
                    24:ea:42:22:cf:2d:83:91:72:38:6b:c6:18:a9:6a:
                    02:dc:d8:07:f4:b4:be:a6:f7:32:14:7b:fe:e8:d0:
                    29:09:7d:b4:b2:85:9b:c8:09:96:4f:9b:44:e1:aa:
                    4b:18:c4:ec:be:93:4e:01:0a:47:30:9f:73:28:61:
                    a1:db:05:32:d5:cf:9c:46:63:c8:8c:30:c2:7e:61:
                    6d:1b:d3:2f:a0:53:d5:b6:e3:df:5f:45:0e:c4:ae:
                    d1:aa:f2:b2:9d:b4:06:cb:b2:50:99:ae:a8:aa:e1:
                    1c:2b:42:92:7e:d6:8f:11:38:8e:58:15:03:d2:d7:
                    30:fd:f5:2e:ef:5d:cc:d4:54:ed:fe:75:17:e0:20:
                    bd:83:05:ec:b4:d2:41:31:ab:6c:45:d6:9c:e8:0e:
                    15:8b:e0:70:bd:40:44:6d:f4:05:e8:36:11:1e:d5:
                    12:3b:69:eb:e9:5a:75:8c:b1:66:ec:b9:77:b8:35:
                    c1:01:be:f3:7c:0f:f3:a4:42:b0:32:e2:7d:10:9d:
                    8c:c5:f2:3d:e2:05:dc:35:8d:cf:57:7a:27:ca:b4:
                    81:7f:62:b9:9d:38:be:8e:4d:f9:f5:1d:8c:85:e6:
                    75:92:36:3a:5e:53:43:35:94:25:ad:be:99:c1:05:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.29.252.0/23
                  103.130.198.0/23
                  117.103.116.0/24
                  160.20.222.0/24
                IPv6:
                  2407:14c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:51:25:ef:c6:0b:e6:5e:7d:20:92:d1:58:e5:19:57:1a:1d:
         a3:32:73:48:56:12:57:59:7e:e2:9e:61:ff:df:6d:13:7c:2e:
         da:22:a6:ee:30:cc:2a:21:e5:a7:c2:f8:db:ca:8f:57:00:c0:
         ca:fd:3f:b6:19:21:5d:6e:6f:91:33:f4:8d:c0:14:3b:1e:5d:
         2e:0d:0e:77:54:83:c2:6b:27:22:61:e6:58:d2:f9:50:ca:7f:
         83:de:55:5d:d3:1f:aa:9d:fb:f8:08:11:82:67:b8:29:ab:27:
         d7:91:3a:a7:41:7f:aa:b8:12:14:09:8e:cf:4f:c9:01:27:7d:
         4b:71:42:e8:ec:0c:7e:84:d3:a1:ca:e7:0a:58:2f:75:61:af:
         2b:5d:ae:4b:97:52:b7:13:5a:b9:77:fa:45:d2:10:48:28:ba:
         d6:0c:cb:20:97:d5:48:3f:4c:ba:52:f2:64:12:46:5e:df:b4:
         da:a5:27:a9:ae:b8:53:dc:c3:9e:41:18:02:65:9c:de:92:6b:
         3b:ca:55:11:f1:41:69:64:50:df:0b:0c:68:32:95:f3:4e:2e:
         4e:b9:e6:be:ad:7f:6d:bb:97:8e:95:2f:df:07:48:88:55:90:
         cf:91:5d:f2:dd:7d:c3:33:4d:a5:ef:d6:51:a4:35:32:52:1c:
         a3:6c:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----