This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer (raw, json)
Hash identifier: N4NXEWslXJW+4bcuuglC59lwOlTTGrlgGVZ22NSlPxc=
Subject key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 276DD89AD5F5B35C19F2CFB21FC49DCBBBB6D9D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
caRepository: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Tue 03 Jun 2025 16:40:43 +0000
Certificate not after: Tue 02 Jun 2026 16:45:43 +0000
Subordinate resources: IP: 103.129.220.0/22
IP: 2001:df6:8900::/48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6d:d8:9a:d5:f5:b3:5c:19:f2:cf:b2:1f:c4:9d:cb:bb:b6:d9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jun 3 16:40:43 2025 GMT
Not After : Jun 2 16:45:43 2026 GMT
Subject: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:f1:ad:79:b6:b8:1e:ee:a3:35:1e:ed:59:
1c:0b:02:73:ca:41:34:49:ac:84:e2:0c:43:a4:e9:
92:bd:97:e4:23:a7:9a:25:ec:01:0b:0e:b3:2d:6c:
11:9d:0d:7c:9b:ba:87:99:73:a6:68:f0:8f:28:d5:
5e:a2:f1:6a:45:f7:07:84:39:9e:24:87:aa:77:f6:
dc:a9:b4:6f:25:05:b5:99:94:9e:9b:c1:3f:c8:d3:
0d:c2:4c:96:7b:6d:53:b4:9a:58:27:5f:31:66:24:
e1:f3:12:f9:75:df:8b:11:4c:06:9f:f6:21:ae:4f:
2c:ba:56:e3:80:56:f0:8e:c4:63:92:77:3e:38:5e:
e7:3e:1d:65:42:fd:17:2b:85:95:3c:62:0c:26:8b:
b5:b5:96:4a:a9:e6:c3:69:9a:6b:12:2c:07:e1:26:
e9:5c:d4:ea:18:c3:1b:62:8e:17:2d:e2:93:93:df:
14:4a:db:c5:b9:44:7f:18:0d:6d:79:ee:d7:a0:d6:
97:5f:02:22:78:c2:74:ad:db:e7:76:32:b7:29:4e:
50:49:eb:8c:3f:14:7a:42:3d:2c:af:f7:e3:c5:ff:
96:45:93:ff:8d:f6:60:21:5b:a1:4c:7b:f1:4f:70:
8b:b4:32:9d:b0:05:c1:48:d6:59:e1:34:5c:2a:92:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.129.220.0/22
IPv6:
2001:df6:8900::/48
Signature Algorithm: sha256WithRSAEncryption
7b:ff:d1:82:1f:83:29:20:cf:7c:b6:17:3d:3c:66:00:32:6d:
76:8b:33:bf:2c:39:a1:48:a0:c4:4e:ec:c8:07:bf:55:b3:85:
7e:6f:c5:f9:cb:7f:42:53:52:5e:0a:0c:a7:b3:9f:f9:ab:d7:
f0:a8:95:df:3b:36:f5:c3:e6:ed:3b:6f:3d:68:33:2d:b0:b7:
83:41:2c:da:a3:94:27:1e:2f:86:bb:0c:e1:d9:55:ba:94:b1:
54:03:c4:61:5e:da:a8:f4:23:06:b6:14:4a:14:5c:80:9f:0d:
26:8d:97:ae:33:26:0e:af:7b:1f:e0:0c:7e:66:3b:4e:0c:a0:
5c:10:75:4f:61:ea:9e:8f:71:76:5f:7d:de:59:d3:91:d4:a8:
6e:b0:52:b0:c2:39:65:5c:55:bf:43:90:33:6c:c3:70:10:d6:
70:1b:97:df:5d:9e:58:72:4e:3d:22:57:4a:4f:13:ea:68:88:
42:b4:73:6f:0b:e1:1b:6b:a9:7e:47:84:8b:60:8f:6d:19:11:
38:6c:bd:d9:3f:27:bc:f1:8e:4f:65:b4:63:91:23:1d:24:58:
83:f6:b8:d5:81:2d:a1:5d:3f:05:92:60:a6:68:75:bf:18:f8:
96:e1:f4:c7:47:90:d9:32:a9:d4:38:b0:6b:16:c5:cf:e4:51:
7c:0d:95:a7
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUJ23YmtX1s1wZ8s+yH8Sdy7u22dkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE2NDA0M1oX
DTI2MDYwMjE2NDU0M1owMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1
MjNGMUExQUNEN0QwMThEMEFERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALA/8a15trge7qM1Hu1ZHAsCc8pBNEmshOIMQ6Tpkr2X5COnmiXsAQsOsy1s
EZ0NfJu6h5lzpmjwjyjVXqLxakX3B4Q5niSHqnf23Km0byUFtZmUnpvBP8jTDcJM
lnttU7SaWCdfMWYk4fMS+XXfixFMBp/2Ia5PLLpW44BW8I7EY5J3Pjhe5z4dZUL9
FyuFlTxiDCaLtbWWSqnmw2maaxIsB+Em6VzU6hjDG2KOFy3ik5PfFErbxblEfxgN
bXnu16DWl18CInjCdK3b53YytylOUEnrjD8UekI9LK/348X/lkWT/432YCFboUx7
8U9wi7QynbAFwUjWWeE0XCqSVysCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOJ/Bwsn6rCW4rNSPxoazX0BjQrdMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by83NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2YTAwMmRl
LTBjZGUtNDYyZS05NDA0LTQ2YmM2MjcwZTA0Zi8wL0UyN0YwNzBCMjdFQUIwOTZF
MkIzNTIzRjFBMUFDRDdEMDE4RDBBREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD
BAJngdwwDwQCAAIwCQMHACABDfaJADANBgkqhkiG9w0BAQsFAAOCAQEAe//Rgh+D
KSDPfLYXPTxmADJtdoszvyw5oUigxE7syAe/VbOFfm/F+ct/QlNSXgoMp7Of+avX
8KiV3zs29cPm7TtvPWgzLbC3g0Es2qOUJx4vhrsM4dlVupSxVAPEYV7aqPQjBrYU
ShRcgJ8NJo2XrjMmDq97H+AMfmY7TgygXBB1T2Hqno9xdl993lnTkdSobrBSsMI5
ZVxVv0OQM2zDcBDWcBuX312eWHJOPSJXSk8T6miIQrRzbwvhG2upfkeEi2CPbRkR
OGy92T8nvPGOT2W0Y5EjHSRYg/a41YEtoV0/BZJgpmh1vxj4luH0x0eQ2TKp1Diw
axbFz+RRfA2Vpw==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:40 2025 by rpki-client