This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer File: DBF597EA29EF8A70656446AF75CF33F0618E8282.cer (raw, json) Hash identifier: zA0+7hcggGpQaeA0G0Qr6DhvTluE8DCoHa1NZSueCcY= Subject key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 58036F4E32F4C4225725709AA60B24866F22E28C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft caRepository: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 18:20:32 +0000 Certificate not after: Tue 02 Jun 2026 18:25:32 +0000 Subordinate resources: IP: 103.242.204.0/22 IP: 117.102.224.0/19 IP: 150.107.132.0/22 IP: 202.6.224.0/20 IP: 2406:6200::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:03:6f:4e:32:f4:c4:22:57:25:70:9a:a6:0b:24:86:6f:22:e2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 18:20:32 2025 GMT Not After : Jun 2 18:25:32 2026 GMT Subject: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:35:f0:3b:46:56:d1:8f:0d:f2:9a:47:29: 63:6c:19:92:64:cf:45:12:91:ce:2f:f3:67:40:27: 56:56:f3:a3:74:1a:ec:da:d0:da:6a:8f:a0:f6:3e: e9:47:99:9b:fb:ae:f1:36:4b:cd:e5:b2:fd:c5:ef: 61:d8:ac:77:21:6f:ac:7f:4c:31:99:43:2e:49:f2: 71:69:8b:9d:98:5d:24:86:3d:01:f5:a7:13:44:79: 1d:12:d2:8b:10:c9:ad:1d:f0:4b:b6:ea:f6:3c:61: b5:4c:94:88:a2:b8:c9:7f:6b:37:53:f5:57:60:0e: 66:2a:41:f4:76:31:b7:b3:e9:95:47:01:5c:8f:7c: 03:9a:2d:d4:e3:82:75:b9:2b:d4:f2:c5:84:80:ef: 95:38:cb:67:ba:84:99:36:58:94:f9:70:54:3b:c5: 72:c8:61:aa:a8:42:22:ef:c1:25:71:4b:01:5d:4d: c8:0f:36:a1:6c:43:38:01:7d:21:36:c5:c2:b4:94: 76:e2:d9:3c:81:f3:94:31:ae:11:7b:ca:51:6f:8b: 75:c5:f3:10:41:d3:66:6d:77:0a:40:6c:52:12:4c: ea:56:78:89:aa:34:20:a5:9d:15:17:0e:48:93:c6: a2:69:03:86:fa:6a:28:eb:5a:e9:3a:97:7c:d6:cd: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.204.0/22 117.102.224.0/19 150.107.132.0/22 202.6.224.0/20 IPv6: 2406:6200::/32 Signature Algorithm: sha256WithRSAEncryption 8b:97:ed:5f:c5:15:69:d0:f2:1a:9e:c8:04:7a:ab:24:a6:4b: 30:13:63:c9:e6:f0:45:0a:16:fd:67:73:7c:10:65:c8:cb:71: fc:0c:50:ba:0c:5e:29:71:1b:ec:9c:ea:e4:c7:7b:51:bd:99: a1:54:64:41:35:e0:eb:8c:2e:d4:68:76:1e:37:6c:d0:c8:63: c2:19:b1:b6:73:b6:19:09:16:c5:40:e6:3a:e4:8f:d1:e0:00: 0d:d5:99:dc:12:cc:17:c4:a5:58:87:ad:c7:ef:fa:e1:59:56: 0f:26:74:5e:a4:30:af:c4:7c:3e:bd:36:ef:2d:fd:35:b4:c9: f3:e7:2d:d7:18:b2:c6:40:60:d8:ca:9b:57:b8:20:c2:86:a2: 27:96:26:35:ce:c5:e5:ba:c8:56:27:d8:a0:32:8c:e8:30:f5: df:c9:dc:8b:05:84:5a:03:37:c3:c7:b6:27:2b:5b:3e:e1:d2: 11:36:93:c1:0b:53:af:8d:9e:39:ab:7f:21:69:25:ff:77:8b: 52:c7:62:7e:79:81:a1:b0:b1:b2:43:3c:68:10:d9:97:b0:53: 84:d3:36:14:38:ee:68:a0:61:9e:9a:32:c9:9f:fe:6e:cd:e8: 4e:f1:21:59:be:0e:25:31:20:35:94:33:81:ac:08:8c:08:fd: 03:9e:9d:ce -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUWANvTjL0xCJXJXCapgskhm8i4owwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE4MjAzMloX DTI2MDYwMjE4MjUzMlowMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0 NkFGNzVDRjMzRjA2MThFODI4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALISNfA7RlbRjw3ymkcpY2wZkmTPRRKRzi/zZ0AnVlbzo3Qa7NrQ2mqPoPY+ 6UeZm/uu8TZLzeWy/cXvYdisdyFvrH9MMZlDLknycWmLnZhdJIY9AfWnE0R5HRLS ixDJrR3wS7bq9jxhtUyUiKK4yX9rN1P1V2AOZipB9HYxt7PplUcBXI98A5ot1OOC dbkr1PLFhIDvlTjLZ7qEmTZYlPlwVDvFcshhqqhCIu/BJXFLAV1NyA82oWxDOAF9 ITbFwrSUduLZPIHzlDGuEXvKUW+LdcXzEEHTZm13CkBsUhJM6lZ4iao0IKWdFRcO SJPGomkDhvpqKOta6TqXfNbNxosCAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNv1l+op74pwZWRGr3XPM/BhjoKCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkMGYxYTZl LTgzYjYtNDUzNC05NjdkLWY4ZGIzYzM3MTFmNC8wL0RCRjU5N0VBMjlFRjhBNzA2 NTY0NDZBRjc1Q0YzM0YwNjE4RTgyODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAJn8swDBAV1ZuADBAKWa4QDBATKBuAwDQQCAAIwBwMFACQGYgAwDQYJKoZIhvcN AQELBQADggEBAIuX7V/FFWnQ8hqeyAR6qySmSzATY8nm8EUKFv1nc3wQZcjLcfwM ULoMXilxG+yc6uTHe1G9maFUZEE14OuMLtRodh43bNDIY8IZsbZzthkJFsVA5jrk j9HgAA3VmdwSzBfEpViHrcfv+uFZVg8mdF6kMK/EfD69Nu8t/TW0yfPnLdcYssZA YNjKm1e4IMKGoieWJjXOxeW6yFYn2KAyjOgw9d/J3IsFhFoDN8PHticrWz7h0hE2 k8ELU6+NnjmrfyFpJf93i1LHYn55gaGwsbJDPGgQ2ZewU4TTNhQ47migYZ6aMsmf /m7N6E7xIVm+DiUxIDWUM4GsCIwI/QOenc4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:29 2025 by rpki-client