This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer
File: B8E13B8031811FE78FA73151056FBFABEE076814.cer (raw, json)
Hash identifier: Xu0wSwyhYQT96i4t+X7b4CXSZb+S08WtIKxDH2kkuM4=
Subject key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 1BC16BDA5A30B056B28D43DA48EBF55EDA142F39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
caRepository: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 04 Jun 2025 06:59:25 +0000
Certificate not after: Wed 03 Jun 2026 07:04:25 +0000
Subordinate resources: IP: 103.143.70.0/23
IP: 2405:4a40::/32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 18:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c1:6b:da:5a:30:b0:56:b2:8d:43:da:48:eb:f5:5e:da:14:2f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 4 06:59:25 2025 GMT
Not After : Jun 3 07:04:25 2026 GMT
Subject: CN=B8E13B8031811FE78FA73151056FBFABEE076814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:da:0c:a4:6d:26:6e:7b:ea:fd:14:94:6e:
58:74:10:df:3a:f6:5e:4e:98:61:6b:82:29:40:07:
db:18:74:99:74:8c:eb:18:36:f8:f2:fd:63:2a:d1:
20:86:ba:d7:8e:33:c7:a4:d2:97:8d:4e:ce:04:1d:
f5:e2:3c:f8:9f:96:4a:ec:7a:5c:ba:a5:66:4e:bd:
5d:c8:45:80:62:9a:d5:e3:df:7e:8e:ec:05:40:a2:
3b:9b:7e:5d:9e:31:3e:5c:f0:01:13:3e:fb:a3:e1:
08:32:05:4a:ca:ff:22:f2:a5:47:0f:d0:20:e8:5c:
d6:2c:2d:d6:52:88:d5:cb:08:8a:bc:ab:30:24:28:
17:f1:7e:20:bb:74:f5:67:ba:de:d4:d5:de:2e:87:
5d:f1:09:d2:c0:1c:f9:4b:f2:5f:e6:ba:1e:fd:02:
0d:2c:ad:84:02:19:61:5a:31:fc:a1:8c:3c:0b:cf:
a8:dd:56:a9:8d:72:2e:91:45:2c:02:fb:a3:b8:a5:
1c:a9:a6:c9:e2:4c:38:4a:0a:58:18:7b:9c:59:b4:
0f:35:4f:a9:f1:4d:db:97:98:82:31:f6:2a:b3:ec:
e9:67:bf:8a:32:09:0f:56:85:8c:d2:4d:e3:e5:74:
f9:34:c6:57:49:da:bd:61:6b:51:b5:84:9c:d1:8a:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.70.0/23
IPv6:
2405:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
90:7b:ca:4e:f2:44:73:d1:c8:a6:c8:54:8f:5a:2a:28:3f:a8:
cd:91:e1:ba:a5:68:1d:99:e7:a1:97:6c:9c:59:23:33:a5:d1:
ce:8e:5c:f9:6f:f7:e3:fd:cf:c1:6a:9b:e0:c5:1a:a6:94:c9:
e1:0d:53:b8:47:68:2d:c2:5c:51:ec:53:46:39:fe:23:37:35:
99:1e:eb:78:62:e1:5d:c0:49:4e:fd:be:42:94:5d:05:d7:1d:
8f:59:0c:7d:b7:3c:02:f4:fd:f0:c4:f7:0a:84:3b:ac:7b:a6:
c5:96:e9:6f:3e:29:77:4f:f8:ba:8d:bf:67:f9:50:c8:9c:29:
da:c7:d9:22:e6:66:03:4b:c7:89:dc:31:3c:e8:d2:0e:62:6b:
92:25:87:1b:85:99:4b:f0:fc:e4:3f:84:82:6a:c5:a8:77:5e:
38:46:b1:84:c4:43:19:98:ec:39:be:34:c7:59:d6:42:e4:26:
ab:b4:f5:a9:05:6e:21:7a:66:8c:97:92:18:97:ea:4c:06:a7:
a8:00:95:69:a5:ae:38:c0:ec:82:0e:ac:a5:56:bb:d3:b8:d7:
35:bf:cf:33:d6:b7:9c:01:3c:e7:bd:b5:ad:58:2b:53:47:d9:
2f:2b:48:27:a1:eb:fb:75:58:15:30:1a:85:28:a0:f7:20:a8:
70:65:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:32:17 2025 by rpki-client