This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer (raw, json) Hash identifier: +RsC5hT+7MN19ImvXkiRKDDTU79QBlh7dFtkU9xLkVg= Subject key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 06AC92A56101165C25DA8349EE3091B772E40EE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft caRepository: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 28 Aug 2025 21:38:56 +0000 Certificate not after: Thu 27 Aug 2026 21:43:56 +0000 Subordinate resources: IP: 43.245.184.0/22 IP: 103.31.224.0/22 IP: 2001:df6:1800::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ac:92:a5:61:01:16:5c:25:da:83:49:ee:30:91:b7:72:e4:0e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 28 21:38:56 2025 GMT Not After : Aug 27 21:43:56 2026 GMT Subject: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:85:cd:9c:61:ea:fd:91:0f:69:a7:2e:95: a4:b8:d4:b9:e5:87:c8:25:57:37:41:af:4e:e4:a1: fb:d4:7b:31:86:18:db:9b:4b:9f:34:2b:ab:13:c9: d1:a8:59:c5:a1:31:10:d4:3b:9c:c6:ec:43:07:7c: 4b:fa:2f:75:5e:7e:48:77:32:2f:4a:dc:a0:63:4d: 26:6f:06:03:3b:a5:bf:ae:f3:30:11:8c:e0:de:d6: 38:b2:44:c4:9f:7a:5d:3c:bc:64:0c:ed:7e:a6:58: 75:07:63:ee:1d:9a:d4:d1:35:21:70:f1:39:da:1c: c1:64:ce:58:09:c2:3a:1c:c0:79:b1:2b:25:a2:d6: 5f:6e:85:5a:da:e0:2d:3d:fc:74:42:3b:83:5e:02: c3:4c:ea:ea:cc:56:5c:d1:96:dd:f8:75:f6:2d:f3: b7:2d:e7:c2:c5:20:ca:bf:e3:40:a1:cb:76:7e:a2: 15:da:9f:e4:5b:1e:78:20:14:e0:bc:ec:c1:d2:a2: 52:9c:79:47:85:d6:59:b2:33:73:2b:d3:54:bc:8a: b4:ef:22:75:63:bf:cc:c9:7f:c6:12:78:6e:df:f8: f9:59:c3:d4:bb:63:4f:f4:29:af:a2:27:16:36:f3: d7:19:f2:d9:64:99:63:97:c8:06:29:09:81:e0:68: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.184.0/22 103.31.224.0/22 IPv6: 2001:df6:1800::/48 Signature Algorithm: sha256WithRSAEncryption 8b:5b:1c:6f:37:7f:17:71:94:86:de:ba:c2:a1:42:44:e7:55: 9a:c8:d1:27:05:02:98:57:96:fd:a7:70:85:45:69:3b:95:24: 6c:2b:c3:6d:47:51:f4:75:c7:8f:20:2b:38:f0:1e:b5:f2:5f: 18:19:6d:a1:25:62:4b:16:63:b4:02:59:ef:70:d5:d9:11:81: 97:b9:9e:be:5b:56:71:1e:31:f3:99:9c:26:08:5c:55:65:8c: be:ec:a5:ce:d0:c3:99:f4:1a:ec:99:7f:95:2c:17:e6:18:97: 1a:f2:6c:96:c9:50:ee:e6:ff:11:73:70:5b:90:33:80:64:92: c4:ee:78:ab:8a:d3:0d:17:36:cd:65:33:b1:36:de:ae:41:55: 50:af:b6:b0:fe:12:d9:71:bc:54:aa:ab:8e:a4:b6:e5:f8:f7: 9f:f4:fd:72:8e:af:94:8e:55:a6:7e:40:73:51:5d:16:a0:2c: 07:89:9b:21:1e:e4:6c:a0:39:1a:0e:62:3f:7c:e6:bc:56:25: fd:be:93:18:35:ac:20:b6:a6:20:97:b1:a7:5d:81:1c:9f:6c: 3f:7a:6e:ae:02:01:3b:7b:b1:39:b1:30:b6:57:f0:6c:04:09: 18:9e:94:f6:4b:54:4f:69:90:43:53:3b:4f:c0:a4:2b:5a:70: 46:aa:bb:c1 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUBqySpWEBFlwl2oNJ7jCRt3LkDuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyODIxMzg1NloX DTI2MDgyNzIxNDM1NlowMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNG MjQ1MUFEMUYwOTU1RTVGN0ZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/Whc2cYer9kQ9ppy6VpLjUueWHyCVXN0GvTuSh+9R7MYYY25tLnzQrqxPJ 0ahZxaExENQ7nMbsQwd8S/ovdV5+SHcyL0rcoGNNJm8GAzulv67zMBGM4N7WOLJE xJ96XTy8ZAztfqZYdQdj7h2a1NE1IXDxOdocwWTOWAnCOhzAebErJaLWX26FWtrg LT38dEI7g14Cw0zq6sxWXNGW3fh19i3zty3nwsUgyr/jQKHLdn6iFdqf5FseeCAU 4LzswdKiUpx5R4XWWbIzcyvTVLyKtO8idWO/zMl/xhJ4bt/4+VnD1LtjT/Qpr6In Fjbz1xny2WSZY5fIBikJgeBo9TMCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNw0yLX0OLjUyxPyRRrR8JVeX3+7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhOGYwNDM1 LTRkMzgtNDdlZi04NTBmLTUxYmE0NjE3ZmIzZC8wL0RDMzRDOEI1RjQzOEI4RDRD QjEzRjI0NTFBRDFGMDk1NUU1RjdGQkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAIr9bgDBAJnH+AwDwQCAAIwCQMHACABDfYYADANBgkqhkiG9w0BAQsFAAOCAQEA i1scbzd/F3GUht66wqFCROdVmsjRJwUCmFeW/adwhUVpO5UkbCvDbUdR9HXHjyAr OPAetfJfGBltoSViSxZjtAJZ73DV2RGBl7mevltWcR4x85mcJghcVWWMvuylztDD mfQa7Jl/lSwX5hiXGvJslslQ7ub/EXNwW5AzgGSSxO54q4rTDRc2zWUzsTberkFV UK+2sP4S2XG8VKqrjqS25fj3n/T9co6vlI5Vpn5Ac1FdFqAsB4mbIR7kbKA5Gg5i P3zmvFYl/b6TGDWsILamIJexp12BHJ9sP3purgIBO3uxObEwtlfwbAQJGJ6U9ktU T2mQQ1M7T8CkK1pwRqq7wQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:00 2025 by rpki-client