This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer File: C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.cer (raw, json) Hash identifier: GQEYzx3jKEVV3Pe/cp7sCuSQ9HHIJZPczn0UzW9EUOQ= Subject key identifier: C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B9137413976DB513F88DD95C3BE2390055D701D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft caRepository: rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 26 Nov 2025 02:54:13 +0000 Certificate not after: Wed 25 Nov 2026 02:59:13 +0000 Subordinate resources: IP: 103.151.145.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:91:37:41:39:76:db:51:3f:88:dd:95:c3:be:23:90:05:5d:70:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 26 02:54:13 2025 GMT Not After : Nov 25 02:59:13 2026 GMT Subject: CN=C5B92B59C4DF6510BAE830177B33AA62BFF43C8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:8b:9b:73:82:71:58:07:8d:62:e4:6f:8a: 3a:fd:95:9f:f0:7f:d5:76:e4:84:2a:0e:5c:3e:0e: 6f:bf:f3:e2:f9:6c:c0:3e:b4:ee:6b:ad:ce:77:c3: 87:5c:12:b2:48:79:7a:a6:b9:64:92:14:92:31:65: fd:70:22:61:c9:52:4b:db:5f:03:9b:b8:e1:97:21: 47:57:55:83:88:74:ef:ad:68:63:3d:74:6f:50:88: d5:25:a8:15:80:83:72:77:3d:c6:96:ff:fa:e3:be: 19:97:3d:ab:30:76:64:54:c1:9e:53:81:0c:75:d7: c3:2e:af:71:b1:b2:cf:a9:24:1e:03:8c:d8:23:82: 47:bf:a0:79:0e:7a:b6:de:68:7d:0e:7f:dc:d8:b5: 8e:f8:20:88:10:06:77:79:b3:4d:7f:13:54:31:80: 0b:14:90:09:4f:6f:01:42:c6:4a:2b:71:68:c9:93: ef:64:98:8a:3c:30:51:3e:51:ca:c0:08:94:6f:e3: fc:bd:d5:5f:3c:c2:60:a8:85:ed:38:82:a0:0d:e9: d6:84:f4:c6:82:e2:49:1a:a8:ab:b0:08:49:1c:e2: 68:24:20:73:06:37:45:50:f7:82:27:96:0f:2e:f2: 81:e8:82:7f:c5:24:bb:29:71:63:f3:be:21:66:7f: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:B9:2B:59:C4:DF:65:10:BA:E8:30:17:7B:33:AA:62:BF:F4:3C:8F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44765f06-b4c9-47c1-ad9a-0612c7c02d1c/0/C5B92B59C4DF6510BAE830177B33AA62BFF43C8F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.145.0/24 Signature Algorithm: sha256WithRSAEncryption 38:ac:3a:ca:e9:5d:be:de:5d:ff:75:42:c0:5c:6e:e4:32:0a: ee:7e:f9:23:9a:be:16:ab:ea:47:d9:84:22:be:af:e7:46:4e: 3a:ff:a9:44:a6:3e:5d:ce:61:22:19:43:60:a1:ba:04:e2:01: 99:bc:fe:91:69:c1:64:07:f1:19:3f:41:9c:3f:d5:81:46:7d: 35:62:b0:fe:34:cc:26:c9:60:12:9b:ee:d1:32:60:57:7d:42: 9d:6c:e5:21:9a:f8:d6:d4:1d:19:80:b6:7c:eb:ae:30:e0:70: 19:ff:91:e8:1f:4d:f3:b4:35:31:e9:04:54:dd:66:40:67:01: e6:84:fc:03:dc:9d:8d:36:5b:bf:86:5e:bb:11:d6:7f:82:3e: c2:c2:98:68:85:b1:24:d7:23:06:96:fa:31:23:15:24:e5:28: 2a:f4:a5:ad:3d:31:2f:d3:52:5c:e0:f9:90:9d:bd:40:75:85: b1:f8:ba:da:40:e1:a9:b5:e6:4b:c9:df:56:59:c2:3e:3f:fb: ae:da:09:91:6d:6e:f5:d1:9d:c7:69:3f:40:cb:de:9d:c8:03: c1:93:eb:cb:e3:8a:e0:c2:b2:cd:e7:f6:80:57:ba:63:88:72: 51:64:42:1c:5f:0e:17:ca:d3:63:ac:a8:f9:3e:6f:2e:aa:ef: 80:9e:30:4a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUW5E3QTl221E/iN2Vw74jkAVdcB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNjAyNTQxM1oX DTI2MTEyNTAyNTkxM1owMzExMC8GA1UEAxMoQzVCOTJCNTlDNERGNjUxMEJBRTgz MDE3N0IzM0FBNjJCRkY0M0M4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5bi5tzgnFYB41i5G+KOv2Vn/B/1XbkhCoOXD4Ob7/z4vlswD607mutznfD h1wSskh5eqa5ZJIUkjFl/XAiYclSS9tfA5u44ZchR1dVg4h0761oYz10b1CI1SWo FYCDcnc9xpb/+uO+GZc9qzB2ZFTBnlOBDHXXwy6vcbGyz6kkHgOM2COCR7+geQ56 tt5ofQ5/3Ni1jvggiBAGd3mzTX8TVDGACxSQCU9vAULGSitxaMmT72SYijwwUT5R ysAIlG/j/L3VXzzCYKiF7TiCoA3p1oT0xoLiSRqoq7AISRziaCQgcwY3RVD3gieW Dy7ygeiCf8UkuylxY/O+IWZ/Qu8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMW5K1nE32UQuugwF3szqmK/9DyPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDc2NWYwNi1iNGM5LTQ3YzEtYWQ5YS0wNjEyYzdjMDJkMWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzY1ZjA2 LWI0YzktNDdjMS1hZDlhLTA2MTJjN2MwMmQxYy8wL0M1QjkyQjU5QzRERjY1MTBC QUU4MzAxNzdCMzNBQTYyQkZGNDNDOEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnl5EwDQYJKoZIhvcNAQELBQADggEBADisOsrpXb7eXf91QsBcbuQyCu5++SOa vhar6kfZhCK+r+dGTjr/qUSmPl3OYSIZQ2ChugTiAZm8/pFpwWQH8Rk/QZw/1YFG fTVisP40zCbJYBKb7tEyYFd9Qp1s5SGa+NbUHRmAtnzrrjDgcBn/kegfTfO0NTHp BFTdZkBnAeaE/APcnY02W7+GXrsR1n+CPsLCmGiFsSTXIwaW+jEjFSTlKCr0pa09 MS/TUlzg+ZCdvUB1hbH4utpA4am15kvJ31ZZwj4/+67aCZFtbvXRncdpP0DL3p3I A8GT68vjiuDCss3n9oBXumOIclFkQhxfDhfK02OsqPk+by6q74CeMEo= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:53 2025 by rpki-client