This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer File: C85C49978E8023F2D58521524D4EC616244CDC14.cer (raw, json) Hash identifier: 4mNzq6EoiJ2V4uZzZegTlj1Sy3A302XCetsZr6DHL/M= Subject key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B86F7C80B8E57DD2ECDEE2D5DB27EF3CB670E6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft caRepository: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 27 Jun 2025 10:07:02 +0000 Certificate not after: Fri 26 Jun 2026 10:12:02 +0000 Subordinate resources: IP: 103.239.214.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:86:f7:c8:0b:8e:57:dd:2e:cd:ee:2d:5d:b2:7e:f3:cb:67:0e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 27 10:07:02 2025 GMT Not After : Jun 26 10:12:02 2026 GMT Subject: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:06:fc:a1:8a:e6:c9:68:ad:0f:9f:fe:4f: 2b:87:c7:45:6b:ac:10:ac:85:fa:1c:f8:00:0c:13: 60:1b:1c:13:ac:c7:c8:97:88:fb:37:92:8b:4f:b7: fd:e1:86:0b:7b:5e:ed:72:1e:aa:6d:11:57:56:4e: a0:b9:1e:71:eb:ad:13:b8:0c:1d:c5:f4:98:7c:08: 16:30:fa:30:a4:99:ec:20:c1:52:96:93:95:ec:ff: 29:d7:ad:64:e8:12:9c:51:4a:6a:12:d6:b3:20:dd: 9a:f7:e6:73:46:af:d6:5b:6e:23:68:7c:f7:b2:d2: ea:06:75:5d:d4:ff:02:c5:39:4d:6c:b9:3b:37:58: 75:21:b9:d2:74:1d:5b:3c:4a:60:65:45:16:75:cd: 75:7d:4b:c1:35:7a:21:65:70:35:4c:d7:4a:34:35: 2e:fa:d8:2a:bb:4a:06:92:f1:ac:18:44:08:96:bb: ea:f0:3b:b1:28:eb:03:e9:18:83:70:fc:ef:2b:d2: a2:ce:53:cc:09:c7:02:5d:d9:3a:b3:da:ec:c2:4e: 9b:58:0b:a8:18:2a:ff:3c:ef:42:cb:77:d9:be:e9: c4:79:e8:d6:f8:b1:75:71:5d:a7:d7:30:22:7f:c2: 6a:94:93:25:14:73:25:d3:9b:83:82:9b:74:f1:fd: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.214.0/23 Signature Algorithm: sha256WithRSAEncryption 11:e9:56:1a:9e:58:25:9a:3a:bf:ac:28:09:18:67:e1:b9:cf: ce:5b:4c:e3:b3:e3:a1:3d:15:d0:77:66:11:7f:ab:52:5c:6a: 5f:9f:4e:8b:f2:52:dc:09:4d:18:ee:5c:c4:6a:17:47:be:d1: 12:6b:f7:7b:3c:b0:83:02:6a:d2:70:5c:8f:71:9d:62:de:16: 48:6c:93:68:f4:8c:62:f7:0d:8a:36:8b:72:85:8c:fd:30:6a: 4f:02:ba:b5:d7:97:80:e4:13:d4:b1:56:e0:59:a1:8a:73:8b: 0b:4a:61:17:62:a0:97:65:2a:b8:8e:53:a4:68:a6:4d:aa:28: 3b:36:bc:69:ad:29:0a:b1:3d:ea:ad:d4:77:d3:2b:6a:28:4e: 25:5e:b6:db:a1:6b:e5:21:22:8b:b0:d6:83:39:66:16:12:5d: 16:27:dd:c3:7a:85:d3:31:de:06:4f:69:14:bb:a7:0d:71:5b: 1d:08:2e:b5:0e:09:b8:15:31:9c:f8:a0:6d:f4:92:96:f8:10: ce:02:4b:cd:87:53:9c:97:fb:29:e8:9a:99:d3:3f:e9:32:bd: cd:af:3c:ea:18:40:25:63:b8:f3:f7:e7:f8:bb:46:7d:e4:8c: fa:0f:d6:de:9c:53:4d:3b:98:93:01:fb:c3:6b:3f:ef:ff:e7: 1a:a1:07:7a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUW4b3yAuOV90uze4tXbJ+88tnDmwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyNzEwMDcwMloX DTI2MDYyNjEwMTIwMlowMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUy MTUyNEQ0RUM2MTYyNDRDREMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPMBvyhiubJaK0Pn/5PK4fHRWusEKyF+hz4AAwTYBscE6zHyJeI+zeSi0+3 /eGGC3te7XIeqm0RV1ZOoLkeceutE7gMHcX0mHwIFjD6MKSZ7CDBUpaTlez/Kdet ZOgSnFFKahLWsyDdmvfmc0av1ltuI2h897LS6gZ1XdT/AsU5TWy5OzdYdSG50nQd WzxKYGVFFnXNdX1LwTV6IWVwNUzXSjQ1LvrYKrtKBpLxrBhECJa76vA7sSjrA+kY g3D87yvSos5TzAnHAl3ZOrPa7MJOm1gLqBgq/zzvQst32b7pxHno1vixdXFdp9cw In/CapSTJRRzJdObg4KbdPH9GskCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMhcSZeOgCPy1YUhUk1OxhYkTNwUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNTE2ZTZl LWM2NzktNGU1MC1iN2FiLTFlNDA2NzkxMjVjZC8wL0M4NUM0OTk3OEU4MDIzRjJE NTg1MjE1MjRENEVDNjE2MjQ0Q0RDMTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn79YwDQYJKoZIhvcNAQELBQADggEBABHpVhqeWCWaOr+sKAkYZ+G5z85bTOOz 46E9FdB3ZhF/q1Jcal+fTovyUtwJTRjuXMRqF0e+0RJr93s8sIMCatJwXI9xnWLe Fkhsk2j0jGL3DYo2i3KFjP0wak8CurXXl4DkE9SxVuBZoYpziwtKYRdioJdlKriO U6Ropk2qKDs2vGmtKQqxPeqt1HfTK2ooTiVettuha+UhIouw1oM5ZhYSXRYn3cN6 hdMx3gZPaRS7pw1xWx0ILrUOCbgVMZz4oG30kpb4EM4CS82HU5yX+ynompnTP+ky vc2vPOoYQCVjuPP35/i7Rn3kjPoP1t6cU007mJMB+8NrP+//5xqhB3o= -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:02 2025 by rpki-client