This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer
File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer (raw, json)
Hash identifier: 1FLiItYBCiybcUhRJ8FlQRR7POovje9EJH3GBbW49Xg=
Subject key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2DA5DC8BA790119ACE64C25FD770A1BD1212AE61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 23 Jan 2026 23:27:57 +0000
Certificate not after: Fri 22 Jan 2027 23:32:57 +0000
Subordinate resources: IP: 103.185.42.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a5:dc:8b:a7:90:11:9a:ce:64:c2:5f:d7:70:a1:bd:12:12:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 23 23:27:57 2026 GMT
Not After : Jan 22 23:32:57 2027 GMT
Subject: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:3c:79:ed:71:ae:9c:28:60:e2:5b:c4:ac:
07:7e:a0:90:29:35:d1:03:77:82:94:9b:8a:8f:92:
ff:d4:e6:0d:e1:76:5a:9b:6a:d1:91:b0:a5:3c:79:
03:c5:9b:11:be:58:71:29:1f:cb:a7:c5:e6:58:05:
b2:38:d4:a3:55:ac:f3:df:16:f9:fe:0f:09:ee:15:
55:c8:26:08:75:08:ec:6a:89:83:85:1b:f1:df:d8:
f1:06:7b:77:7f:12:d2:f3:0c:1e:6a:d9:7e:06:7e:
95:81:4f:02:44:49:15:ce:92:25:17:17:eb:d0:a7:
df:a1:e4:3d:03:0f:77:3f:62:42:c5:e6:2e:b7:ac:
65:af:22:29:0e:07:f4:3e:d0:af:d5:97:ac:1a:6e:
2f:dc:92:fe:57:28:f9:11:2e:ea:4e:14:ae:ac:28:
b8:68:b4:d8:53:38:a9:21:ec:05:ef:5a:1a:fd:5f:
a0:15:7e:85:de:ce:8e:0c:e3:d6:79:04:a6:e4:a3:
1b:9b:fd:af:d3:94:03:e0:b4:1a:dd:26:10:31:57:
2e:72:5e:24:3d:95:f9:0d:02:e1:e5:82:39:9d:04:
a8:ae:8a:b9:7c:70:6d:a4:2a:0a:6b:b6:15:b5:e9:
8e:7e:93:55:b0:a8:9d:6f:73:a9:37:44:88:5c:a6:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.42.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:e6:a9:8b:34:e5:4f:c0:83:ee:19:5b:bb:69:76:6a:a9:bf:
6b:02:03:b8:c7:3c:34:54:b9:34:74:72:3a:e4:33:d9:d8:1c:
1b:d1:33:f5:02:bc:5a:22:d2:c0:1a:89:91:3a:e7:92:76:de:
5a:11:35:05:91:5a:55:65:ff:da:ce:aa:c1:a6:63:35:6e:1c:
00:26:6c:33:47:fb:5a:ff:38:64:0a:d1:51:f5:76:28:79:5d:
ca:f0:e2:43:aa:81:a9:d1:13:36:43:10:94:36:1d:1f:d0:3c:
9d:24:fb:31:ac:ff:5e:3c:35:85:dd:07:0f:be:bb:98:42:ca:
cc:fa:da:ba:9d:9a:ff:5f:33:b9:69:98:2d:f9:9a:e9:c4:c8:
0d:19:96:b5:c5:31:29:a9:6a:5e:e5:2e:bc:57:67:b8:e3:09:
c1:21:06:85:c3:29:e1:63:8d:ce:9e:72:18:c8:21:28:f3:87:
af:0a:0c:fc:63:ea:a9:f7:bb:36:84:e2:5a:99:98:6e:e3:95:
f9:3e:05:b0:dc:df:3f:9d:d8:e0:d7:52:7a:72:a0:77:2f:b1:
cd:ac:37:d9:d2:10:f0:f1:62:57:ab:f7:99:db:d3:9b:1b:2d:
1b:86:ee:d9:07:6f:d1:7e:f1:10:93:f1:64:ff:d9:7c:d2:dd:
ec:3f:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:40 2026 by rpki-client