This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer (raw, json) Hash identifier: Y/XYphKqjmQXeqx/ew2T9XsmJY/N4PpVtLWUIiIb9sY= Subject key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 726477218BEBAEE5171573DC2050B826D318A67D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft caRepository: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 23 Apr 2025 17:06:04 +0000 Certificate not after: Wed 22 Apr 2026 17:11:04 +0000 Subordinate resources: IP: 103.144.146.0/23 IP: 2001:df1:c680::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:64:77:21:8b:eb:ae:e5:17:15:73:dc:20:50:b8:26:d3:18:a6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 23 17:06:04 2025 GMT Not After : Apr 22 17:11:04 2026 GMT Subject: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:95:bb:76:64:35:a3:4d:bc:10:ac:0c:ba:f0: da:15:dc:ce:7a:25:0f:28:a1:33:0a:66:10:44:e8: db:b1:59:c8:ad:95:41:09:49:b8:55:66:0e:8c:f1: 5b:11:b2:22:07:87:15:18:36:5e:77:1e:a6:98:b8: bc:9a:c6:24:51:2c:78:2a:b0:68:f6:c1:68:97:c5: e0:42:02:a6:92:a2:d2:dc:7b:f7:45:a8:8b:44:d3: 73:01:89:ef:59:e1:17:e6:27:15:57:bd:2b:b2:ad: e0:a1:17:70:8d:a6:10:f2:d9:28:ad:56:d4:56:bd: cd:dc:ee:bb:12:50:bc:c2:e0:76:93:96:48:33:ce: 07:ee:c7:06:f9:54:ab:41:9b:27:4c:43:40:d0:1c: 0c:20:8d:db:04:b9:5f:da:7f:7c:c5:0b:b9:96:c0: 88:1b:94:b4:fe:dc:d4:15:c1:e6:6f:78:5b:99:d6: 41:ec:96:90:1e:18:39:76:89:ca:fb:3f:cc:63:0a: a0:41:96:6e:56:1b:d4:b7:44:1c:2e:bc:f4:7c:92: 88:e2:20:07:cc:0f:94:0c:37:85:26:03:e0:52:34: 3d:7c:72:2b:d0:10:02:71:7d:de:56:84:07:a3:bc: 00:36:4f:30:07:7b:24:69:03:c6:37:16:6f:58:93: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.146.0/23 IPv6: 2001:df1:c680::/48 Signature Algorithm: sha256WithRSAEncryption 24:c8:51:23:fa:5b:12:65:eb:bc:50:a2:2d:0f:88:70:6a:61: 0a:84:d4:4b:4b:4c:98:6f:f1:cf:b0:f5:0b:73:b0:0c:9b:1a: 3d:df:f1:6e:95:1a:d4:94:f2:90:9a:87:c1:d2:0b:bb:a5:37: 14:55:cc:0d:58:85:65:9c:fb:fa:6d:46:2d:36:74:23:ca:56: fb:c9:5a:88:d2:c8:aa:89:aa:93:a8:ab:fb:78:af:c8:9a:13: 11:b3:cd:e6:47:4b:b1:c5:1e:f5:59:58:7d:dc:08:db:36:58: 0d:2f:98:cb:c2:dd:2e:03:10:89:1d:6a:f9:25:d9:62:7b:dc: 46:81:12:f5:68:32:82:7d:9b:24:cb:50:38:47:9d:21:32:3e: 52:f4:89:b5:92:ba:78:45:c3:da:bd:0b:8d:72:40:fa:76:c4: 00:a0:e9:06:96:2f:28:03:c1:53:6d:a5:97:2f:a3:31:25:ef: 9f:19:d8:dc:ef:44:37:8c:da:2c:a9:2b:84:42:43:07:ba:00: ec:8b:63:78:87:a3:48:e2:37:2f:07:c1:95:32:bb:52:04:4c: 86:b5:3d:c5:a2:00:f1:8c:88:0f:00:b9:ea:64:05:51:14:fb: d2:76:18:4f:76:98:93:24:3f:69:2c:cb:37:59:68:c0:ce:0f: 32:c2:d7:38 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUcmR3IYvrruUXFXPcIFC4JtMYpn0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyMzE3MDYwNFoX DTI2MDQyMjE3MTEwNFowMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5 QzRBQTJCQzZGNUUyNjg4OTQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqVu3ZkNaNNvBCsDLrw2hXcznolDyihMwpmEETo27FZyK2VQQlJuFVmDozx WxGyIgeHFRg2Xnceppi4vJrGJFEseCqwaPbBaJfF4EICppKi0tx790Woi0TTcwGJ 71nhF+YnFVe9K7Kt4KEXcI2mEPLZKK1W1Fa9zdzuuxJQvMLgdpOWSDPOB+7HBvlU q0GbJ0xDQNAcDCCN2wS5X9p/fMULuZbAiBuUtP7c1BXB5m94W5nWQeyWkB4YOXaJ yvs/zGMKoEGWblYb1LdEHC689HySiOIgB8wPlAw3hSYD4FI0PXxyK9AQAnF93laE B6O8ADZPMAd7JGkDxjcWb1iTz7cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM3+Ez933FYgE5GcSqK8b14miJRrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1YmY4OWM3 LTUwNzEtNGMxMi04YzNjLTkyYWViNmRjM2JiYy8wL0NERkUxMzNGNzdEQzU2MjAx MzkxOUM0QUEyQkM2RjVFMjY4ODk0NkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnkJIwDwQCAAIwCQMHACABDfHGgDANBgkqhkiG9w0BAQsFAAOCAQEAJMhRI/pb EmXrvFCiLQ+IcGphCoTUS0tMmG/xz7D1C3OwDJsaPd/xbpUa1JTykJqHwdILu6U3 FFXMDViFZZz7+m1GLTZ0I8pW+8laiNLIqomqk6ir+3ivyJoTEbPN5kdLscUe9VlY fdwI2zZYDS+Yy8LdLgMQiR1q+SXZYnvcRoES9Wgygn2bJMtQOEedITI+UvSJtZK6 eEXD2r0LjXJA+nbEAKDpBpYvKAPBU22lly+jMSXvnxnY3O9EN4zaLKkrhEJDB7oA 7ItjeIejSOI3LwfBlTK7UgRMhrU9xaIA8YyIDwC56mQFURT70nYYT3aYkyQ/aSzL N1lowM4PMsLXOA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:01 2025 by rpki-client