This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer File: C7D4D30314160FDACB9582CF972E90EC10AE206F.cer (raw, json) Hash identifier: azTuHZ3KUL/hTFbA6Q8FO9+P9ADqAJ1RVXFKh4ppNpU= Subject key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1FA418752BA3A3AEFCB351B22C62573E95A41919 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft caRepository: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 03:01:47 +0000 Certificate not after: Tue 02 Jun 2026 03:06:47 +0000 Subordinate resources: IP: 103.50.218.0/24 IP: 103.144.22.0/24 IP: 2001:df0:3300::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a4:18:75:2b:a3:a3:ae:fc:b3:51:b2:2c:62:57:3e:95:a4:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 03:01:47 2025 GMT Not After : Jun 2 03:06:47 2026 GMT Subject: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:df:cc:50:41:fd:4a:a6:f3:f1:92:41:67: 60:97:8e:c3:19:c1:ad:fc:d2:a5:fb:a5:d8:20:18: a0:7f:ce:2e:82:2a:0a:97:2a:6c:ea:b7:27:a0:a7: d6:c8:42:99:37:46:8b:ec:19:82:46:d7:16:07:22: b5:34:ad:ad:61:9e:9c:99:bc:87:d8:e4:fc:3f:3c: 34:19:c4:13:95:2d:0e:70:5c:37:63:81:d3:6b:f7: 04:cf:48:d3:cc:23:3a:c3:6d:4c:af:97:29:e0:f4: d3:00:4c:af:47:43:f4:c6:42:87:fc:8b:ab:bb:91: 08:87:65:26:a9:e8:f9:79:e5:ee:1a:c0:7b:58:eb: 28:49:16:e7:29:e0:23:fb:78:1e:63:e5:cb:db:e2: 9a:a5:0d:23:6e:9d:d9:3c:e2:89:e0:87:3f:5c:db: 0d:c7:0d:be:1c:bb:74:74:b7:34:02:10:8c:4c:f1: 4b:5d:4b:85:c5:15:af:21:fe:d6:21:66:89:f4:f1: 7b:3b:42:d7:a3:32:e8:d7:8c:7d:41:1c:f1:00:23: 7f:b7:c6:86:f1:86:a9:88:ba:d0:7d:f5:5b:b8:2e: 0f:e1:de:e4:66:28:4f:c0:e7:05:12:99:7e:63:a1: 0b:53:e0:1a:86:93:63:72:1f:26:1c:d5:0c:f3:01: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.50.218.0/24 103.144.22.0/24 IPv6: 2001:df0:3300::/48 Signature Algorithm: sha256WithRSAEncryption 19:88:97:a1:37:38:45:7b:de:6b:c1:11:eb:c4:3f:d8:5f:fd: c9:de:ac:5b:a4:70:39:f9:7b:3e:ed:26:ed:91:17:13:ac:a9: ff:17:fe:50:1b:7c:61:89:7f:2a:4c:37:9a:7e:4c:a4:17:47: 32:9e:e6:71:e3:5a:84:06:eb:f7:a3:d8:0f:66:bb:ff:8f:bb: aa:0a:ba:81:9e:c1:81:b6:3b:09:7e:90:fe:ee:a2:99:61:67: a7:c3:03:47:78:c0:1b:d9:9a:8e:2d:10:83:3c:c2:ce:f0:50: 0a:58:91:d0:79:e5:ca:ad:2f:27:c7:06:50:3d:41:9f:4f:bf: c9:3e:5d:e9:e5:fd:2c:7b:4f:36:4a:a6:ba:1b:f2:1c:12:59: c2:4f:4e:e8:af:ca:ef:a8:8e:f8:f9:5a:a3:44:38:8b:5d:e0: c5:fb:83:6b:11:6d:c1:08:5e:54:40:c2:6d:d4:38:bc:40:2e: fc:64:cb:c5:03:e0:4b:7a:93:6a:a6:f6:f5:b1:5a:56:fb:90: d5:41:57:2e:21:1b:b5:0b:28:1a:53:63:96:33:d0:4e:a2:a9: b9:bd:2a:29:60:20:3a:d6:93:55:4e:cc:04:64:c7:5d:98:62: f7:91:93:a8:72:9b:a6:92:20:93:22:74:ca:5a:c5:18:cb:5f: 4f:8b:07:fb -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUH6QYdSujo678s1GyLGJXPpWkGRkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAzMDE0N1oX DTI2MDYwMjAzMDY0N1owMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4 MkNGOTcyRTkwRUMxMEFFMjA2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI338xQQf1KpvPxkkFnYJeOwxnBrfzSpful2CAYoH/OLoIqCpcqbOq3J6Cn 1shCmTdGi+wZgkbXFgcitTStrWGenJm8h9jk/D88NBnEE5UtDnBcN2OB02v3BM9I 08wjOsNtTK+XKeD00wBMr0dD9MZCh/yLq7uRCIdlJqno+Xnl7hrAe1jrKEkW5yng I/t4HmPly9vimqUNI26d2TziieCHP1zbDccNvhy7dHS3NAIQjEzxS11LhcUVryH+ 1iFmifTxeztC16My6NeMfUEc8QAjf7fGhvGGqYi60H31W7guD+He5GYoT8DnBRKZ fmOhC1PgGoaTY3IfJhzVDPMBl7UCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMfU0wMUFg/ay5WCz5cukOwQriBvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxOGFkN2E2 LWM5MDctNDM1OS1hYmE1LWQ1NzQ4YmExNjE3Ni8wL0M3RDREMzAzMTQxNjBGREFD Qjk1ODJDRjk3MkU5MEVDMTBBRTIwNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnMtoDBABnkBYwDwQCAAIwCQMHACABDfAzADANBgkqhkiG9w0BAQsFAAOCAQEA GYiXoTc4RXvea8ER68Q/2F/9yd6sW6RwOfl7Pu0m7ZEXE6yp/xf+UBt8YYl/Kkw3 mn5MpBdHMp7mceNahAbr96PYD2a7/4+7qgq6gZ7BgbY7CX6Q/u6imWFnp8MDR3jA G9maji0QgzzCzvBQCliR0Hnlyq0vJ8cGUD1Bn0+/yT5d6eX9LHtPNkqmuhvyHBJZ wk9O6K/K76iO+Plao0Q4i13gxfuDaxFtwQheVEDCbdQ4vEAu/GTLxQPgS3qTaqb2 9bFaVvuQ1UFXLiEbtQsoGlNjljPQTqKpub0qKWAgOtaTVU7MBGTHXZhi95GTqHKb ppIgkyJ0ylrFGMtfT4sH+w== -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:49 2025 by rpki-client