This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer (raw, json) Hash identifier: oGHb7WrnCOlhX/p52Si5vwsGorMG1blYihyuAvE1050= Subject key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 47C987DD53F124BC95E816B1C79669F3CB0AD692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft caRepository: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 22 May 2025 12:24:35 +0000 Certificate not after: Thu 21 May 2026 12:29:35 +0000 Subordinate resources: IP: 103.186.192.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c9:87:dd:53:f1:24:bc:95:e8:16:b1:c7:96:69:f3:cb:0a:d6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 22 12:24:35 2025 GMT Not After : May 21 12:29:35 2026 GMT Subject: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:7f:84:19:1b:0c:43:49:31:35:42:1b:3f: 0b:bc:74:a8:59:3e:c8:bf:52:48:e4:b7:01:43:6f: 41:cc:0d:e8:d2:09:89:95:26:af:7a:0c:75:1e:3b: cc:01:23:a8:83:5c:41:86:b6:77:a6:b6:1e:f7:53: 9c:e5:d8:9a:83:47:10:ba:01:be:a5:11:2b:70:e8: e6:9f:74:09:fb:6e:75:37:cb:95:49:e2:03:cc:1f: 2e:83:a8:bd:2a:94:f6:b8:5d:fc:d2:39:89:fc:48: 14:66:ce:36:16:53:a1:9e:f7:e8:e3:b3:03:2c:d9: 42:12:70:c2:2d:c8:20:61:db:bd:74:18:83:78:ae: 31:5f:c5:4d:9b:64:43:66:8f:bf:24:4c:ec:bf:89: 98:19:ed:c7:f4:0e:aa:08:37:7b:32:95:31:1b:cc: 7e:55:58:4a:5a:ae:da:a6:22:fd:2c:08:cb:6b:96: da:a2:d2:ef:52:13:10:47:6e:54:ef:e9:80:7d:8d: 80:59:e2:a2:12:b5:58:e3:0c:f3:96:6b:ec:6f:a4: 3a:24:6a:f5:28:93:93:d6:06:0f:8b:8b:c3:89:a9: ff:80:09:2d:b8:db:43:fe:de:81:7b:0a:9b:38:02: fa:2f:a7:e3:48:f2:58:c2:78:92:a7:2e:12:9c:17: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.192.0/24 Signature Algorithm: sha256WithRSAEncryption 04:52:11:20:1a:44:30:96:9c:e3:a0:3b:df:3d:79:a3:81:8e: fd:6b:c3:07:af:a8:a5:08:ce:48:e6:12:f8:cc:c4:79:b7:1b: 94:c3:15:55:14:d7:ea:4b:5c:79:54:f8:42:39:5c:28:7d:8d: 80:46:ee:9a:0f:ca:f2:c7:d9:3b:72:75:ee:ea:57:85:93:04: 98:ef:76:36:df:73:89:5f:5b:61:26:a0:55:95:57:fe:bd:3a: 7a:97:fc:65:ad:80:df:c2:f1:2d:94:0c:19:5c:51:89:85:85: 6a:e2:ea:7e:64:01:1a:24:6d:81:6b:8c:3c:ac:41:03:aa:bd: ab:84:03:f1:be:23:1f:32:fe:71:b3:d5:b8:9e:94:e1:dd:d7: 1a:bd:8d:50:fc:28:23:58:b2:98:4c:02:1e:1d:6f:cc:4e:6f: 7c:66:74:fe:6a:ce:c6:70:c1:aa:26:a1:e8:a3:c8:1c:96:c3: ae:5e:ff:13:62:ab:52:0d:e6:7f:3a:f3:48:da:b1:fc:ae:9f: c4:88:b3:c3:95:85:84:b4:28:62:aa:c7:98:6a:ff:88:6f:ac: 7f:b0:d9:e7:5a:40:2e:08:18:46:45:8c:31:34:ed:30:9d:23: 17:87:07:db:97:3b:4e:4c:9e:b9:12:62:eb:4a:93:05:ae:7f: 3c:df:cc:9e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUR8mH3VPxJLyV6Baxx5Zp88sK1pIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMjEyMjQzNVoX DTI2MDUyMTEyMjkzNVowMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5 NkZGQjNBMkZEOThDQTQyNzk2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcbf4QZGwxDSTE1Qhs/C7x0qFk+yL9SSOS3AUNvQcwN6NIJiZUmr3oMdR47 zAEjqINcQYa2d6a2HvdTnOXYmoNHELoBvqURK3Do5p90CftudTfLlUniA8wfLoOo vSqU9rhd/NI5ifxIFGbONhZToZ736OOzAyzZQhJwwi3IIGHbvXQYg3iuMV/FTZtk Q2aPvyRM7L+JmBntx/QOqgg3ezKVMRvMflVYSlqu2qYi/SwIy2uW2qLS71ITEEdu VO/pgH2NgFniohK1WOMM85Zr7G+kOiRq9SiTk9YGD4uLw4mp/4AJLbjbQ/7egXsK mzgC+i+n40jyWMJ4kqcuEpwXZvkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRHr8RUfc8Wok6W/7Oi/ZjKQnlqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzNWE5ZGRm LWMxMDktNGZjMS1hMzBkLThmMDRiODMzODFiZS8wL0M0NDdBRkM0NTQ3RENGMTZB MjRFOTZGRkIzQTJGRDk4Q0E0Mjc5NkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnusAwDQYJKoZIhvcNAQELBQADggEBAARSESAaRDCWnOOgO989eaOBjv1rwwev qKUIzkjmEvjMxHm3G5TDFVUU1+pLXHlU+EI5XCh9jYBG7poPyvLH2Ttyde7qV4WT BJjvdjbfc4lfW2EmoFWVV/69OnqX/GWtgN/C8S2UDBlcUYmFhWri6n5kARokbYFr jDysQQOqvauEA/G+Ix8y/nGz1bielOHd1xq9jVD8KCNYsphMAh4db8xOb3xmdP5q zsZwwaomoeijyByWw65e/xNiq1IN5n8680jasfyun8SIs8OVhYS0KGKqx5hq/4hv rH+w2edaQC4IGEZFjDE07TCdIxeHB9uXO05MnrkSYutKkwWufzzfzJ4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:49 2025 by rpki-client