This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer
File:                     E0D54A271CD04583E0304613C7075C15FA03E497.cer (raw, json)
Hash identifier:          ZT8ts0LkTaVrAGZsD468BVAb62evwjk3cvhInuC1dpI=
Subject key identifier:   E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2F8315B88E6BA81F077B328665AAB97D51AF963A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:09:17 +0000
Certificate not after:    Thu 31 Dec 2026 08:14:17 +0000
Subordinate resources:    IP: 103.138.62.0/23
                          IP: 2404:cbc0::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 13:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:15:b8:8e:6b:a8:1f:07:7b:32:86:65:aa:b9:7d:51:af:96:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  1 08:09:17 2026 GMT
            Not After : Dec 31 08:14:17 2026 GMT
        Subject: CN=E0D54A271CD04583E0304613C7075C15FA03E497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:40:73:ec:79:9a:c7:45:46:19:d9:ad:9f:
                    e2:27:d5:c5:76:98:4e:06:d0:d1:ed:28:d7:f1:39:
                    c9:67:5d:72:36:b0:3b:d3:cb:b7:a1:9f:bf:10:2a:
                    59:97:7a:70:26:a0:60:b0:9c:45:98:03:92:6a:ae:
                    37:67:a6:32:c0:8a:dd:7c:8b:0d:80:16:d2:42:b5:
                    3d:e2:75:2f:cf:60:ed:f7:bc:70:07:cb:80:bd:0e:
                    aa:e0:b6:77:7d:10:80:5f:d0:f0:94:4a:4a:9f:05:
                    f3:95:42:16:e7:93:4e:a4:89:9c:71:41:4e:73:b4:
                    a2:3e:98:5f:d6:bb:1c:1a:af:0d:c4:0f:48:dd:8a:
                    92:86:4f:9b:8a:7c:b7:a9:70:8e:3f:3f:09:37:6a:
                    60:25:00:6a:2f:e0:4b:9f:e5:b0:48:53:08:ee:87:
                    96:c6:57:f4:eb:51:15:bd:83:a8:e9:ca:0b:1e:c2:
                    88:4d:c2:e2:5b:70:17:00:53:aa:5e:a1:41:93:b3:
                    5b:4e:e8:a3:00:40:c8:fb:97:e7:6b:fc:0d:54:b7:
                    4d:70:73:27:42:b0:d4:fe:bc:ba:5f:82:f7:46:9f:
                    e5:92:81:2d:96:d3:55:42:db:af:bf:89:fe:05:a2:
                    e0:cf:9b:33:76:e3:50:c1:4e:29:4c:93:44:24:26:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.62.0/23
                IPv6:
                  2404:cbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:bf:68:d2:4c:37:42:75:90:19:d8:ba:33:ee:9b:87:dc:
         8c:9e:66:59:48:ee:61:66:25:01:cd:50:d9:0d:5c:53:d7:32:
         0f:1e:d1:29:75:18:81:0a:d5:8c:02:58:5f:86:12:e4:f5:76:
         72:bf:d9:5b:7b:0f:53:0e:4d:77:aa:89:28:15:c0:de:2f:4e:
         19:62:e1:36:3d:85:a1:c6:fe:7b:bd:96:0c:ac:6d:b8:3d:18:
         64:dd:0a:d2:4c:2d:e7:f3:22:cf:d6:e6:4d:5f:74:8b:27:60:
         ac:79:f6:cb:8b:4b:8a:8c:3d:d4:64:4c:ef:da:c8:53:f8:1e:
         d5:3b:76:01:f9:eb:74:0c:8b:2f:75:74:2e:52:67:ed:14:3a:
         b0:3b:c5:9e:da:02:07:ee:46:60:7d:26:00:16:eb:ac:28:99:
         4c:a5:b6:55:70:26:1e:79:fe:06:c1:a0:2c:06:b4:78:46:c4:
         d1:3e:9e:2d:e9:ce:8b:ed:4d:86:44:d0:23:51:ce:b2:0a:b7:
         d3:80:96:de:d8:c4:f9:b5:c9:b8:03:33:63:1f:d9:93:0b:f9:
         7c:8a:54:88:d4:87:dd:b0:bf:37:e6:f5:6f:9c:98:b1:d6:10:
         b6:7e:04:f5:3e:3c:66:f1:b3:59:a7:36:77:c5:74:ce:eb:b1:
         f6:63:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:39:03 2026 by rpki-client