This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer (raw, json) Hash identifier: VZ/+yFXuI5XVs47pfsoT2EsHa5hLDbR+fSod3Aq1eBU= Subject key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0823715B6EB8D938172DCA342D783F2ED9F75702 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft caRepository: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 25 Nov 2025 04:00:56 +0000 Certificate not after: Tue 24 Nov 2026 04:05:56 +0000 Subordinate resources: IP: 103.118.121.0/24 IP: 2001:df5:cd00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:23:71:5b:6e:b8:d9:38:17:2d:ca:34:2d:78:3f:2e:d9:f7:57:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 25 04:00:56 2025 GMT Not After : Nov 24 04:05:56 2026 GMT Subject: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:13:5a:2c:20:7f:7c:4a:e9:95:4e:fe:f8: a4:56:25:a7:9d:6e:66:57:be:5a:d2:98:d0:6f:07: 97:c4:16:a4:76:7e:b6:3c:33:2f:79:71:41:97:df: cc:11:79:4b:50:98:7c:bc:fb:d0:c4:0a:e6:ff:48: 80:f2:ab:f0:fb:4b:94:a0:b7:cd:dd:1d:7e:50:bf: 7d:0b:cc:57:28:08:7a:05:1c:5b:65:12:3d:81:ff: f6:da:e1:f9:da:b3:23:d2:b7:cb:cc:d6:9b:3e:76: d2:73:53:dc:58:0b:75:6b:36:a0:af:b5:2f:ae:7c: 52:dc:bf:a9:38:47:a7:db:ba:7f:54:7f:b0:f1:00: fc:fc:b6:a7:78:71:b5:b0:10:71:17:bb:97:6f:2e: 8f:48:5f:57:7c:eb:ba:83:ca:77:90:78:ab:7e:ba: c5:6e:5c:eb:f1:5c:32:b7:a9:fa:4e:6e:06:83:7a: 0b:48:37:aa:0e:15:c1:9e:2d:cc:79:e3:92:f1:30: 76:cc:04:ab:1b:ef:9a:14:6e:63:f2:dd:4c:d3:09: 9c:a6:d5:c2:ac:bc:5b:0b:86:c6:a2:d8:86:28:35: a3:b9:33:b2:3f:b4:18:29:0b:73:8a:e4:26:be:15: 59:c3:90:e7:c2:b9:d1:59:8d:38:8d:aa:84:76:86: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.121.0/24 IPv6: 2001:df5:cd00::/48 Signature Algorithm: sha256WithRSAEncryption 0a:77:c6:6b:3a:06:37:31:31:50:b1:18:df:81:b1:17:5c:9e: 06:71:e6:8a:61:ee:88:d4:55:f8:ff:91:68:5e:9a:e0:00:94: ab:fc:78:31:94:05:c4:fc:e0:11:3d:86:1e:49:c0:7e:5c:0e: e8:33:e0:54:a9:89:e0:36:0b:c7:28:5d:70:ad:7a:04:eb:73: eb:91:2f:a7:dd:c1:5a:db:57:78:a6:e9:d0:4b:2a:3d:a4:82: 19:d0:51:7c:46:34:57:69:c7:b0:80:1b:78:9c:37:91:79:8d: a5:6c:ec:5f:31:f4:8b:fc:5f:fa:ee:20:48:87:45:9b:02:c4: f9:0c:bd:05:ad:b7:fd:73:4b:fb:85:68:6a:ca:84:48:79:f8: b5:9d:50:94:8d:8b:aa:16:4c:df:62:f6:a7:c0:00:fb:11:13: 3a:49:9d:e2:75:88:5b:86:4a:99:92:6b:3a:bc:ac:b5:90:af: 1f:ab:d6:96:ee:31:ca:ff:13:00:cd:89:21:38:30:a1:2e:d3: 05:ce:cc:93:38:54:cf:2e:66:29:54:f0:56:a5:57:bd:2d:93: 10:ea:3f:9c:86:d8:30:16:e1:c4:63:28:dd:db:54:45:6a:68: f8:e8:88:8b:e6:56:7b:6c:be:e7:6b:4f:d4:15:6e:aa:e3:e5: 9b:96:f5:34 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUCCNxW2642TgXLco0LXg/Ltn3VwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyNTA0MDA1NloX DTI2MTEyNDA0MDU1NlowMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1 RkI4Qzk2OTA1REYwM0M4RDZFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzfE1osIH98SumVTv74pFYlp51uZle+WtKY0G8Hl8QWpHZ+tjwzL3lxQZff zBF5S1CYfLz70MQK5v9IgPKr8PtLlKC3zd0dflC/fQvMVygIegUcW2USPYH/9trh +dqzI9K3y8zWmz520nNT3FgLdWs2oK+1L658Uty/qThHp9u6f1R/sPEA/Py2p3hx tbAQcRe7l28uj0hfV3zruoPKd5B4q366xW5c6/FcMrep+k5uBoN6C0g3qg4VwZ4t zHnjkvEwdswEqxvvmhRuY/LdTNMJnKbVwqy8WwuGxqLYhig1o7kzsj+0GCkLc4rk Jr4VWcOQ58K50VmNOI2qhHaGtEkCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNhbJOgYpNrDiEFfuMlpBd8DyNbqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyZjZhMzlm LTI5NDAtNGNjYy04YzFmLTlkNTU5YzQ3YTc5Yi8wL0Q4NUIyNEU4MThBNERBQzM4 ODQxNUZCOEM5NjkwNURGMDNDOEQ2RUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABndnkwDwQCAAIwCQMHACABDfXNADANBgkqhkiG9w0BAQsFAAOCAQEACnfGazoG NzExULEY34GxF1yeBnHmimHuiNRV+P+RaF6a4ACUq/x4MZQFxPzgET2GHknAflwO 6DPgVKmJ4DYLxyhdcK16BOtz65Evp93BWttXeKbp0EsqPaSCGdBRfEY0V2nHsIAb eJw3kXmNpWzsXzH0i/xf+u4gSIdFmwLE+Qy9Ba23/XNL+4VoasqESHn4tZ1QlI2L qhZM32L2p8AA+xETOkmd4nWIW4ZKmZJrOrystZCvH6vWlu4xyv8TAM2JITgwoS7T Bc7MkzhUzy5mKVTwVqVXvS2TEOo/nIbYMBbhxGMo3dtURWpo+OiIi+ZWe2y+52tP 1BVuquPlm5b1NA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:38 2025 by rpki-client