This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer File: C380A411E3CE15C60336341BB4B0994B307B920D.cer (raw, json) Hash identifier: a+FgI7juVkxBIcsW2w+OCiQ5rGj48kL6b5yAKgwIl0Y= Subject key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49CCB33E324C80558611DD8C01D2376D62644614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft caRepository: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Dec 2025 04:08:36 +0000 Certificate not after: Fri 11 Dec 2026 04:13:36 +0000 Subordinate resources: IP: 103.143.24.0/23 IP: 2001:df1:6880::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 05:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cc:b3:3e:32:4c:80:55:86:11:dd:8c:01:d2:37:6d:62:64:46:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 12 04:08:36 2025 GMT Not After : Dec 11 04:13:36 2026 GMT Subject: CN=C380A411E3CE15C60336341BB4B0994B307B920D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:6f:be:e1:8d:df:77:50:0b:67:5c:13:1b: 03:7e:16:bc:34:b9:e9:9d:7b:e0:e3:cd:ac:bf:86: 36:9d:cd:d6:ca:2b:77:bb:d4:56:42:b9:5e:ab:37: ca:ad:78:e1:e5:fc:29:00:45:38:4f:ad:a2:55:6e: 4c:f3:28:bb:43:15:d2:bf:46:5f:48:1e:b4:f9:72: 89:5b:1b:95:89:0a:23:b8:2e:8e:48:9e:53:91:9a: 19:d9:a8:36:85:e1:84:cf:9f:48:35:8a:62:29:ba: 9d:1d:d4:b0:c2:06:d5:71:bf:49:87:d3:e1:38:1b: 8b:67:12:1f:ee:08:c4:a0:12:20:c0:d5:c3:23:7b: 2e:cc:2e:66:94:e2:b1:f1:45:9c:a8:12:03:dc:b4: 4b:1b:34:e9:4a:aa:e8:8e:bd:7c:12:45:de:26:d8: c3:cd:ae:0c:14:75:83:a8:f5:9f:4a:40:4a:ba:cb: 9c:2e:8c:92:04:d4:9b:9a:4f:12:73:26:4c:cd:d9: 9d:0e:0a:34:14:67:c1:5c:f1:4c:ee:03:bf:a0:42: 78:e0:07:e3:0c:e4:76:f3:cb:92:a8:9c:e8:4b:8d: e5:6f:25:46:98:59:11:52:f0:08:d3:9d:34:33:68: 3b:37:b2:f8:69:54:28:22:a9:bc:e0:62:c5:58:28: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.24.0/23 IPv6: 2001:df1:6880::/48 Signature Algorithm: sha256WithRSAEncryption 2a:a5:32:45:b6:c7:c9:5f:f2:8c:7e:00:17:e5:b0:4d:b5:92: 82:7f:b5:4d:11:63:16:99:39:5e:c0:8a:fa:b3:fb:ee:bb:6c: d3:54:20:23:62:55:ee:c2:88:50:9f:44:59:b1:6c:cb:90:6b: 94:55:d5:96:78:65:4a:70:dc:74:4f:be:03:b6:16:e8:5f:5e: 20:6b:4a:be:fb:9d:89:11:e4:aa:13:9d:3a:57:4b:6a:07:31: 61:dd:74:eb:49:ce:5d:ad:c6:46:bb:39:90:e8:69:d1:eb:f8: 45:4f:32:89:a4:73:40:5a:12:d7:33:1f:65:f1:7a:42:c9:df: ed:9c:db:64:df:fb:3c:57:e8:2f:c5:71:fb:64:c3:98:6d:44: 03:ed:23:b7:1e:43:07:e0:8a:4c:e2:ce:ba:42:bd:00:eb:c4: 6b:fc:dd:4d:fb:a8:fb:bf:40:b2:c6:de:64:77:13:d5:84:8e: 3a:4d:30:dc:f0:0f:55:10:20:ea:5f:48:a8:b1:3f:1f:ab:06: 76:73:f2:4a:40:15:7a:9c:d8:f7:0f:0a:a3:d4:a3:51:44:d0: fd:6c:7b:38:98:52:e6:78:11:d2:18:7d:8a:f2:33:2f:af:c3: f3:80:49:f1:09:d7:92:72:dd:cf:63:c8:be:d9:ae:dd:41:5a: a7:84:76:07 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUScyzPjJMgFWGEd2MAdI3bWJkRhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIxMjA0MDgzNloX DTI2MTIxMTA0MTMzNlowMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYz NDFCQjRCMDk5NEIzMDdCOTIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB4b77hjd93UAtnXBMbA34WvDS56Z174OPNrL+GNp3N1sord7vUVkK5Xqs3 yq144eX8KQBFOE+tolVuTPMou0MV0r9GX0getPlyiVsblYkKI7gujkieU5GaGdmo NoXhhM+fSDWKYim6nR3UsMIG1XG/SYfT4Tgbi2cSH+4IxKASIMDVwyN7LswuZpTi sfFFnKgSA9y0Sxs06Uqq6I69fBJF3ibYw82uDBR1g6j1n0pASrrLnC6MkgTUm5pP EnMmTM3ZnQ4KNBRnwVzxTO4Dv6BCeOAH4wzkdvPLkqic6EuN5W8lRphZEVLwCNOd NDNoOzey+GlUKCKpvOBixVgoEdMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMOApBHjzhXGAzY0G7SwmUswe5INMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1YzQwMGQx LTliYmQtNGUyYi04ZDU4LTZmNzQ5ZGJjMzkyZC8wL0MzODBBNDExRTNDRTE1QzYw MzM2MzQxQkI0QjA5OTRCMzA3QjkyMEQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnjxgwDwQCAAIwCQMHACABDfFogDANBgkqhkiG9w0BAQsFAAOCAQEAKqUyRbbH yV/yjH4AF+WwTbWSgn+1TRFjFpk5XsCK+rP77rts01QgI2JV7sKIUJ9EWbFsy5Br lFXVlnhlSnDcdE++A7YW6F9eIGtKvvudiRHkqhOdOldLagcxYd1060nOXa3GRrs5 kOhp0ev4RU8yiaRzQFoS1zMfZfF6Qsnf7ZzbZN/7PFfoL8Vx+2TDmG1EA+0jtx5D B+CKTOLOukK9AOvEa/zdTfuo+79AssbeZHcT1YSOOk0w3PAPVRAg6l9IqLE/H6sG dnPySkAVepzY9w8Ko9SjUUTQ/Wx7OJhS5ngR0hh9ivIzL6/D84BJ8QnXknLdz2PI vtmu3UFap4R2Bw== -----END CERTIFICATE-----Generated at Tue Dec 16 03:10:51 2025 by rpki-client