This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer File: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer (raw, json) Hash identifier: VQLBKKjX1q2jUEejqFwsdcNq6Nm+jmUldVg/PXLPfBs= Subject key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2150B6B5979E9D8A07DC9C3A28FC8A5D82DDE810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft caRepository: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 13 Feb 2025 21:09:50 +0000 Certificate not after: Thu 12 Feb 2026 21:14:50 +0000 Subordinate resources: IP: 103.213.116.0/22 IP: 202.179.184.0/21 IP: 2404:880::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:50:b6:b5:97:9e:9d:8a:07:dc:9c:3a:28:fc:8a:5d:82:dd:e8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 13 21:09:50 2025 GMT Not After : Feb 12 21:14:50 2026 GMT Subject: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:b3:59:6a:f5:f7:81:a8:b3:9b:d1:da:05: c2:19:fd:c4:34:f5:b2:03:24:b1:af:3e:7a:db:7b: e0:25:2b:2e:75:31:d1:b7:ed:42:c3:ed:a9:b7:12: f0:bf:e5:13:00:75:d0:be:d9:5a:cd:fc:0a:97:2c: 29:cc:61:11:64:f0:b7:bc:3a:59:bf:99:5d:81:bf: c0:74:52:a5:6a:81:49:2a:5c:e7:6a:c4:5d:6f:bc: 18:86:7e:9d:c0:5d:12:1a:dc:76:48:83:b2:7e:a3: 8c:8d:d6:6c:d1:15:22:a4:c2:13:ee:1a:7d:15:9c: 90:9d:0b:1f:b0:26:e1:86:5f:82:f3:d4:ff:d4:d8: e0:8f:b4:9a:3e:4a:f8:e9:28:b8:12:fd:59:a6:c5: 6c:2e:28:af:71:d6:a3:3a:ed:04:3a:d9:9c:f0:f5: 47:1c:8e:17:79:46:c1:0f:70:e7:be:9a:d3:1c:2d: 7b:74:9c:66:a5:a3:87:7b:91:4e:ef:3b:f9:ba:3c: 07:05:bb:53:3e:28:65:71:fa:88:c9:c5:cd:0d:3d: 97:a6:93:d0:ca:d5:73:e7:47:fa:b8:18:21:18:0f: 64:5e:74:a7:1f:52:c2:9f:2b:7b:86:2a:11:41:32: f8:46:4b:f1:51:f0:05:dd:1e:85:38:d7:93:f3:d4: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.116.0/22 202.179.184.0/21 IPv6: 2404:880::/32 Signature Algorithm: sha256WithRSAEncryption 4c:20:f3:f2:38:3c:d6:56:f6:56:6d:d7:d0:b9:53:92:ec:0e: 72:2c:89:bc:fd:3d:cf:88:1f:09:57:49:e4:2e:56:fc:4a:77: ea:eb:9d:ee:02:6a:f3:88:a3:45:3e:7c:53:14:e8:23:6e:1b: 3f:da:41:d1:20:bd:65:e5:9b:d9:2a:d5:f4:cf:37:5d:28:67: 64:b0:9d:cd:7a:bf:94:71:1d:31:4b:96:c4:42:c6:70:90:24: 4c:8e:f1:e7:32:10:98:ff:7a:7e:fa:c7:ee:dc:ef:31:15:f3: ca:df:1e:70:72:cf:0e:f2:07:d7:60:f5:2e:5e:c5:58:4c:4d: 46:59:3f:c3:1e:13:3b:31:c6:88:9e:2b:2d:f8:5f:8d:bf:60: 8c:25:b9:4d:cf:3e:f4:0b:ca:7e:ec:97:91:4d:b6:80:0f:7e: 55:5e:26:39:9c:5b:2c:e0:4a:50:eb:89:d6:08:67:c3:3d:c7: 98:2e:d1:e5:7b:90:1a:cd:a7:e1:05:29:a9:3d:62:e4:31:63: 90:6d:ca:2b:64:66:b6:ed:4f:df:44:1b:ca:8c:02:2b:ac:ea: 63:09:5d:86:74:0d:ce:72:d3:b5:a9:32:ae:da:b9:4d:f6:18: 64:65:c4:e2:99:00:a9:64:b0:59:cb:57:08:bc:fa:56:91:41: 3b:50:b3:c5 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUIVC2tZeenYoH3Jw6KPyKXYLd6BAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMzIxMDk1MFoX DTI2MDIxMjIxMTQ1MFowMzExMC8GA1UEAxMoRDU1QkU4MjE3QTIyMjEyRjk3N0JE OTVCNDFGN0M5RUU5REUzMjAxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJECs1lq9feBqLOb0doFwhn9xDT1sgMksa8+ett74CUrLnUx0bftQsPtqbcS 8L/lEwB10L7ZWs38CpcsKcxhEWTwt7w6Wb+ZXYG/wHRSpWqBSSpc52rEXW+8GIZ+ ncBdEhrcdkiDsn6jjI3WbNEVIqTCE+4afRWckJ0LH7Am4YZfgvPU/9TY4I+0mj5K +OkouBL9WabFbC4or3HWozrtBDrZnPD1RxyOF3lGwQ9w576a0xwte3ScZqWjh3uR Tu87+bo8BwW7Uz4oZXH6iMnFzQ09l6aT0MrVc+dH+rgYIRgPZF50px9Swp8re4Yq EUEy+EZL8VHwBd0ehTjXk/PUPy8CAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNVb6CF6IiEvl3vZW0H3ye6d4yAbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MGY1Y2ZkYi03OTg3LTQzNTEtYmMyZS02NmMyNGY0OWY0NDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZjVjZmRi LTc5ODctNDM1MS1iYzJlLTY2YzI0ZjQ5ZjQ0MC8wL0Q1NUJFODIxN0EyMjIxMkY5 NzdCRDk1QjQxRjdDOUVFOURFMzIwMUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJn1XQDBAPKs7gwDQQCAAIwBwMFACQECIAwDQYJKoZIhvcNAQELBQADggEBAEwg 8/I4PNZW9lZt19C5U5LsDnIsibz9Pc+IHwlXSeQuVvxKd+rrne4CavOIo0U+fFMU 6CNuGz/aQdEgvWXlm9kq1fTPN10oZ2Swnc16v5RxHTFLlsRCxnCQJEyO8ecyEJj/ en76x+7c7zEV88rfHnByzw7yB9dg9S5exVhMTUZZP8MeEzsxxoieKy34X42/YIwl uU3PPvQLyn7sl5FNtoAPflVeJjmcWyzgSlDridYIZ8M9x5gu0eV7kBrNp+EFKak9 YuQxY5BtyitkZrbtT99EG8qMAius6mMJXYZ0Dc5y07WpMq7auU32GGRlxOKZAKlk sFnLVwi8+laRQTtQs8U= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:03 2025 by rpki-client