This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer File: B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer (raw, json) Hash identifier: fPqDXoYxn8RS/DoQoNjrm8mSvVwmLEr+E9k9OuF46qI= Subject key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 371214B3432A9AE74B355E65EFC772F38BC59F08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft caRepository: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:30:15 +0000 Certificate not after: Tue 02 Jun 2026 10:35:15 +0000 Subordinate resources: IP: 103.119.139.0/24 IP: 2001:df5:ed00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:12:14:b3:43:2a:9a:e7:4b:35:5e:65:ef:c7:72:f3:8b:c5:9f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:30:15 2025 GMT Not After : Jun 2 10:35:15 2026 GMT Subject: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a8:ca:77:0f:ea:c9:16:ec:2f:48:88:9b:2f: 14:26:81:a5:af:3a:85:11:54:ce:f4:aa:4a:4f:34: ef:2a:84:a6:d2:5e:f6:f1:99:8d:b5:34:6a:f3:ab: ec:b3:80:1f:f7:6f:6d:86:e6:0b:81:25:69:c5:7a: f3:be:29:42:34:32:43:66:55:e2:d3:e0:42:06:84: 92:cb:61:99:90:bc:f7:c6:7a:23:e6:f1:dc:32:61: d8:7c:0c:b5:d2:cc:22:48:df:04:55:d2:71:59:36: bd:fe:19:64:40:ce:57:9f:e3:86:2e:68:5e:f8:ce: 6f:3e:cf:79:86:22:08:11:cd:cc:6b:e7:1e:18:90: 88:82:99:5c:89:76:4b:15:a3:cc:6b:a5:0c:35:56: 92:eb:90:7c:e1:2c:c4:5c:b6:98:50:35:bb:33:62: 88:42:39:71:9b:48:88:30:e9:a0:3c:3b:75:30:1c: 84:a0:19:fc:d6:dd:62:db:1c:51:52:de:4f:1b:e4: 92:20:66:3d:f8:c9:22:cb:6d:87:6c:c8:35:03:11: fe:a7:7f:7c:4f:13:e9:69:8f:b0:47:36:fb:36:87: 53:b4:6b:5c:1e:82:30:26:fb:8a:55:c3:fa:fb:0a: ed:21:89:80:33:62:e7:5b:c1:a0:35:9d:77:7f:18: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.139.0/24 IPv6: 2001:df5:ed00::/48 Signature Algorithm: sha256WithRSAEncryption 10:85:f3:d2:8e:e8:32:03:d0:7a:b8:d9:02:e2:c7:74:65:81: 0a:47:8f:b3:f5:0f:fa:f0:e9:03:dc:3b:f9:80:ab:37:0d:3c: 57:e4:ba:5c:40:49:7c:72:48:12:a6:25:1e:ba:f8:92:dc:ad: d6:78:69:83:f6:d3:93:11:35:30:19:97:35:33:1a:e8:8d:b6: 9c:e7:52:c8:17:d3:b1:a0:e3:0d:29:c0:b0:12:29:ad:7a:52: fb:4f:8b:7c:b9:9c:e0:a1:2d:7e:c3:66:5b:fb:ff:a9:cb:34: eb:7c:0d:c7:b9:c8:1d:90:47:9b:aa:6c:f7:95:0f:27:c4:5c: c9:9a:0a:58:9c:9f:ff:b7:48:fb:ae:ae:dc:c5:f8:21:cc:80: 6a:42:4f:f0:81:26:67:6d:6a:6c:ca:43:d3:cf:5f:ee:fe:4f: 7f:6c:bf:3c:43:5a:2c:77:ff:af:df:31:39:17:87:bd:d7:1f: f3:46:5a:8b:d2:3e:c5:b2:24:d2:6d:90:bf:7b:cf:94:e9:f9: 06:dd:bf:1a:41:a7:8f:c7:f9:da:66:64:1f:84:97:f5:a5:52: 8c:6a:04:ae:11:03:48:f5:69:c4:56:50:2d:48:b5:43:59:1b: 17:d1:bb:7e:48:e5:2c:f1:d9:8c:ac:65:e1:59:c2:66:bd:fb: 2d:68:25:e0 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUNxIUs0MqmudLNV5l78dy84vFnwgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwMzAxNVoX DTI2MDYwMjEwMzUxNVowMzExMC8GA1UEAxMoQjk0RjQ4QkNBQjZEOEIwQTI4QjM5 NTU1MDQ5NzVDMTU5RkFDMDc2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPGoyncP6skW7C9IiJsvFCaBpa86hRFUzvSqSk807yqEptJe9vGZjbU0avOr 7LOAH/dvbYbmC4ElacV6874pQjQyQ2ZV4tPgQgaEksthmZC898Z6I+bx3DJh2HwM tdLMIkjfBFXScVk2vf4ZZEDOV5/jhi5oXvjObz7PeYYiCBHNzGvnHhiQiIKZXIl2 SxWjzGulDDVWkuuQfOEsxFy2mFA1uzNiiEI5cZtIiDDpoDw7dTAchKAZ/NbdYtsc UVLeTxvkkiBmPfjJIstth2zINQMR/qd/fE8T6WmPsEc2+zaHU7RrXB6CMCb7ilXD +vsK7SGJgDNi51vBoDWdd38YFZECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLlPSLyrbYsKKLOVVQSXXBWfrAdqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NjRjMzE1NS1jOGZmLTQyMDctYTJkYy01MWUwMDU1MzBiNTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2NGMzMTU1 LWM4ZmYtNDIwNy1hMmRjLTUxZTAwNTUzMGI1Mi8wL0I5NEY0OEJDQUI2RDhCMEEy OEIzOTU1NTA0OTc1QzE1OUZBQzA3NkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnd4swDwQCAAIwCQMHACABDfXtADANBgkqhkiG9w0BAQsFAAOCAQEAEIXz0o7o MgPQerjZAuLHdGWBCkePs/UP+vDpA9w7+YCrNw08V+S6XEBJfHJIEqYlHrr4ktyt 1nhpg/bTkxE1MBmXNTMa6I22nOdSyBfTsaDjDSnAsBIprXpS+0+LfLmc4KEtfsNm W/v/qcs063wNx7nIHZBHm6ps95UPJ8RcyZoKWJyf/7dI+66u3MX4IcyAakJP8IEm Z21qbMpD089f7v5Pf2y/PENaLHf/r98xOReHvdcf80Zai9I+xbIk0m2Qv3vPlOn5 Bt2/GkGnj8f52mZkH4SX9aVSjGoErhEDSPVpxFZQLUi1Q1kbF9G7fkjlLPHZjKxl 4VnCZr37LWgl4A== -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:48 2025 by rpki-client