This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer File: D681DB990E904642A480AE9546646329FF5D0162.cer (raw, json) Hash identifier: CkXtGbUyRTdZvhwXEqiXxnHS2lP//+EkFAnVLkwB7Bs= Subject key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3D68ED4016787B946BC6DC1BEFA946E04F3054CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft caRepository: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 14 Nov 2025 17:40:24 +0000 Certificate not after: Fri 13 Nov 2026 17:45:24 +0000 Subordinate resources: IP: 103.145.34.0/23 IP: 2405:77c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:68:ed:40:16:78:7b:94:6b:c6:dc:1b:ef:a9:46:e0:4f:30:54:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 14 17:40:24 2025 GMT Not After : Nov 13 17:45:24 2026 GMT Subject: CN=D681DB990E904642A480AE9546646329FF5D0162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:80:14:b5:c7:ec:85:02:5d:86:4c:24:c6: d4:16:de:a1:5b:5c:28:22:f8:71:84:8e:87:2e:4c: d4:20:bc:a5:85:5f:9b:59:45:27:e2:b0:60:01:a1: 28:eb:d4:ba:c3:a0:35:0d:12:ef:f2:2e:92:44:a2: 7a:38:15:7e:ee:fb:bf:0a:58:a2:90:b8:19:38:c2: 4c:a3:8a:c5:e4:9b:dc:e1:7f:ed:9d:35:02:23:b5: 0d:ac:90:31:80:e4:72:4f:f4:30:5f:8d:f4:20:f8: db:7f:b6:15:4b:a1:05:1b:a5:ca:db:38:26:88:9d: a9:50:ae:e7:2f:35:58:c8:af:61:b1:04:91:8c:b5: 4a:63:e9:f2:80:c0:6b:80:9c:66:0b:a2:3c:d3:c4: 60:8b:dd:84:ab:fe:f2:27:ae:10:50:48:1a:ad:14: 0e:67:af:66:6f:43:23:da:d0:38:f5:ef:8f:b6:8c: d5:bd:c0:47:c7:97:e5:15:c7:18:2e:a9:82:38:ee: 03:b6:2b:13:92:15:f5:e9:f2:f7:5c:27:69:fb:95: 02:b5:fb:36:16:df:64:83:3a:68:46:6d:c5:2f:4e: 41:49:bf:b7:1d:75:3f:be:73:23:69:84:bd:dd:cd: 26:d8:51:5d:26:fc:a5:be:c5:b9:a5:6e:59:ef:2e: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.34.0/23 IPv6: 2405:77c0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:01:c5:9f:49:db:f2:2e:aa:78:db:62:9c:e8:0c:d4:9e:a0: 73:88:80:53:29:27:94:63:6f:34:17:82:d3:96:bf:ea:48:49: ab:eb:7a:5e:f8:74:c1:15:f1:c2:78:67:14:04:16:a1:bd:76: f3:cb:a4:67:9f:2a:68:1a:b0:78:f5:08:0d:bf:27:6a:a3:6a: 34:37:5a:2e:86:dc:7c:8e:bd:82:ce:4f:13:a2:86:31:f4:a4: 7d:e7:53:1b:ae:00:3c:83:6b:13:25:cd:86:39:45:63:4e:74: ac:0c:36:62:5f:d3:e4:fe:12:0d:44:88:7e:93:5e:34:04:17: a3:12:2c:31:79:5d:8b:5d:25:6f:4a:1f:06:fb:ad:9c:12:7e: d2:c4:8b:dd:83:5a:56:b8:d0:98:5c:12:35:ff:5f:c7:2a:40: cd:50:90:ab:2c:61:8b:7a:65:4e:90:64:8d:4d:96:55:59:25: a2:6d:96:27:cb:17:89:14:fd:4c:ff:d1:08:02:5e:c2:a4:91: 79:7e:d8:e1:cf:b4:d6:fa:aa:71:0b:1c:c6:58:d1:87:de:40: dc:4b:5a:eb:50:52:04:0e:46:5e:45:d6:f9:f3:cf:5b:1e:63: f5:2e:73:fb:ad:85:df:fd:84:34:d5:31:35:87:92:23:04:5b: db:d0:51:fc -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUPWjtQBZ4e5Rrxtwb76lG4E8wVM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExNDE3NDAyNFoX DTI2MTExMzE3NDUyNFowMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBB RTk1NDY2NDYzMjlGRjVEMDE2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3CgBS1x+yFAl2GTCTG1BbeoVtcKCL4cYSOhy5M1CC8pYVfm1lFJ+KwYAGh KOvUusOgNQ0S7/IukkSiejgVfu77vwpYopC4GTjCTKOKxeSb3OF/7Z01AiO1DayQ MYDkck/0MF+N9CD423+2FUuhBRulyts4JoidqVCu5y81WMivYbEEkYy1SmPp8oDA a4CcZguiPNPEYIvdhKv+8ieuEFBIGq0UDmevZm9DI9rQOPXvj7aM1b3AR8eX5RXH GC6pgjjuA7YrE5IV9eny91wnafuVArX7NhbfZIM6aEZtxS9OQUm/tx11P75zI2mE vd3NJthRXSb8pb7FuaVuWe8u2iMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNaB25kOkEZCpICulUZkYyn/XQFiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5ZmJlMDg4 LTBkODQtNDc4OS1iNDA1LTI1YzJlNzY5MzdmNi8wL0Q2ODFEQjk5MEU5MDQ2NDJB NDgwQUU5NTQ2NjQ2MzI5RkY1RDAxNjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkSIwDQQCAAIwBwMFACQFd8AwDQYJKoZIhvcNAQELBQADggEBAE8BxZ9J2/Iu qnjbYpzoDNSeoHOIgFMpJ5RjbzQXgtOWv+pISavrel74dMEV8cJ4ZxQEFqG9dvPL pGefKmgasHj1CA2/J2qjajQ3Wi6G3HyOvYLOTxOihjH0pH3nUxuuADyDaxMlzYY5 RWNOdKwMNmJf0+T+Eg1EiH6TXjQEF6MSLDF5XYtdJW9KHwb7rZwSftLEi92DWla4 0JhcEjX/X8cqQM1QkKssYYt6ZU6QZI1NllVZJaJtlifLF4kU/Uz/0QgCXsKkkXl+ 2OHPtNb6qnELHMZY0YfeQNxLWutQUgQORl5F1vnzz1seY/Uuc/uthd/9hDTVMTWH kiMEW9vQUfw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:42 2025 by rpki-client