This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
File:                     E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer (raw, json)
Hash identifier:          epu0ZRTXyTImMXgxrvavwHuVarq0z6Mvz/tutt+U9Ho=
Subject key identifier:   E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0BC494E52713B5A951C8D79EFF13AB0D2CECD5E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Jan 2026 16:38:13 +0000
Certificate not after:    Thu 14 Jan 2027 16:43:13 +0000
Subordinate resources:    IP: 103.110.34.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c4:94:e5:27:13:b5:a9:51:c8:d7:9e:ff:13:ab:0d:2c:ec:d5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 15 16:38:13 2026 GMT
            Not After : Jan 14 16:43:13 2027 GMT
        Subject: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:5c:68:58:8f:1a:3d:4c:84:6d:e3:c9:50:
                    8a:fa:99:33:d0:3c:f9:79:48:b5:20:be:dc:2d:e6:
                    c8:b6:3e:0f:03:db:49:56:8b:5f:e4:80:dc:6f:76:
                    d5:0c:af:ca:c6:1c:9f:42:27:fc:db:73:8b:5f:9c:
                    2b:53:56:4c:b6:dc:04:cd:77:17:0d:74:06:73:46:
                    75:36:37:c0:c6:f9:20:d1:c4:ef:2c:47:a1:b4:49:
                    ea:db:db:e9:19:3b:51:10:d1:f6:af:9f:e9:53:75:
                    36:0d:38:62:ca:8a:8a:54:ad:3a:ec:09:24:5b:fc:
                    78:fa:21:3d:60:9c:d0:88:ee:89:f9:b3:70:dc:64:
                    97:ad:6e:b5:ca:1b:13:48:b5:fb:d4:39:b6:58:5c:
                    7d:8d:65:dc:48:b8:cc:36:fa:45:68:f7:7d:f4:58:
                    81:4c:4a:82:9d:f7:f6:b6:e3:44:cc:94:69:93:5d:
                    a0:91:32:9f:fa:ae:e7:4c:8d:35:e9:b3:fe:9d:4a:
                    ba:d2:03:a2:f4:14:e7:9a:d3:72:5b:11:f2:53:10:
                    cd:11:8f:90:75:14:b1:03:20:9e:4a:0b:43:c0:69:
                    19:38:cb:f3:51:95:65:ec:2f:7f:a8:34:f1:2d:33:
                    b6:66:33:24:0b:07:45:66:8c:d0:de:62:68:c9:f5:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:21:66:d6:d3:d8:bf:fe:58:d6:1f:d4:99:30:a7:00:e2:20:
         ec:87:bd:1d:c2:46:f1:ec:7b:ba:15:5b:19:ae:2c:e3:23:70:
         a2:bc:94:ef:cc:84:c5:92:c2:e3:f3:87:51:84:88:e0:ce:cd:
         c2:95:09:c1:ab:84:91:57:48:a6:1e:75:de:3c:93:d4:75:63:
         df:ef:dd:30:ba:58:b0:bd:ae:2d:c3:b1:f5:49:36:17:aa:2d:
         96:41:e8:0a:e3:c3:c9:7d:b8:b3:51:c1:1a:cf:fb:78:1a:7c:
         7c:cc:73:c3:9b:04:6d:2a:98:21:9a:2f:ea:e5:bd:d1:59:ca:
         98:fb:f0:ed:5b:16:a1:df:8d:03:98:ba:5a:8c:b6:6e:23:d9:
         bb:cf:15:cb:06:42:ae:c2:38:cd:cd:d1:08:71:6e:83:c0:f4:
         91:bb:f8:26:f3:14:d8:3a:88:b9:46:45:27:70:e2:63:73:4b:
         fe:ec:86:bf:ec:9f:a9:68:8a:41:b1:d7:25:d4:8f:c5:4e:f2:
         bc:e5:d2:cb:df:c2:88:69:49:8a:20:f7:3a:0e:cc:b1:f2:18:
         6f:c0:b5:0b:c0:69:e2:c1:00:fb:b3:15:2b:22:6a:5c:d7:89:
         b3:82:27:44:5a:0b:67:21:44:63:ce:d8:62:52:ee:64:06:47:
         80:53:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:25:59 2026 by rpki-client