This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer (raw, json) Hash identifier: jloG412Tb6xHuz9F1zHDMRIAw7gzYaFFkgpAy9vx1WU= Subject key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2340AAEF1965A7FFBABDEA2CABA52CD615EF42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft caRepository: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Mar 2025 22:01:59 +0000 Certificate not after: Tue 17 Mar 2026 22:06:59 +0000 Subordinate resources: IP: 103.165.148.0/23 IP: 2001:df3:1940::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:40:aa:ef:19:65:a7:ff:ba:bd:ea:2c:ab:a5:2c:d6:15:ef:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 18 22:01:59 2025 GMT Not After : Mar 17 22:06:59 2026 GMT Subject: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:c8:36:e0:25:da:cb:cb:db:f3:88:ac:4d: d3:6a:f5:b7:2b:aa:98:61:98:24:81:15:a8:9f:34: 20:e3:4e:1d:aa:3c:a9:3f:bb:e3:f2:e7:47:f7:65: 34:b8:4f:b4:8e:e3:95:7f:d8:a5:81:32:ca:40:78: 40:e4:26:15:ef:4d:26:50:8e:38:c7:55:a1:6b:63: 04:4a:f3:3f:25:5a:71:bf:da:2f:3d:c8:7e:aa:0a: e3:31:d5:50:d3:00:fb:9f:14:b8:94:b3:5e:d7:4b: 84:6c:e5:97:d2:ad:22:2c:e7:54:d4:14:e2:a7:27: cd:22:74:79:b9:e5:57:14:a1:e2:fe:77:e1:f0:21: 19:20:d6:28:52:65:c0:99:ac:1e:c1:c7:ae:24:79: 34:91:e1:85:3d:55:44:d4:aa:ff:54:24:c0:e2:e2: 6d:73:8b:a2:51:36:25:2b:a8:fe:89:9b:3d:76:32: 87:b3:1b:a8:af:ee:3c:43:a2:ee:9b:a1:be:03:c0: 44:4a:4e:82:c3:1a:cb:65:fa:fe:2b:c1:74:a4:1c: 60:e2:ac:ef:3f:db:cc:f6:90:a2:08:01:ad:42:6d: ea:3c:8f:7e:68:35:9d:d9:09:4a:d5:fa:f8:a2:5d: 34:f2:e4:cd:0d:9c:cc:db:fa:aa:b4:41:93:16:27: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.148.0/23 IPv6: 2001:df3:1940::/48 Signature Algorithm: sha256WithRSAEncryption 2f:a7:c9:9a:54:dd:be:f2:aa:e4:99:ac:ab:0e:22:e3:82:e8: 86:3e:05:a5:1a:e2:17:c4:98:d5:18:43:11:4f:b5:4a:42:7e: 4f:a5:29:06:4b:96:2b:78:19:13:82:73:88:54:55:eb:64:f4: 3a:36:90:a5:d0:7a:69:75:24:5f:44:7a:52:c4:6e:3e:b1:af: 05:51:4a:a2:7b:f6:4b:2d:ad:97:1f:fd:65:88:01:9b:93:ac: 93:88:85:a3:11:a9:9f:0b:76:51:d9:c6:24:bb:58:8d:16:24: 62:23:f3:8c:df:c5:95:f2:16:f5:24:e8:e5:61:a3:af:fd:d8: e5:e5:07:7e:0a:b9:61:c7:ae:b1:75:01:d7:25:13:a4:ce:13: f1:e4:2f:77:4f:41:77:de:06:d6:c1:22:d6:93:7c:f2:dc:0d: cf:03:7b:39:f7:ed:ed:57:cf:cf:5d:79:26:f1:df:8b:b2:15: 15:50:0d:de:da:b8:8b:74:c6:0a:c6:22:c4:ab:3e:75:76:6c: fd:69:6b:05:65:62:73:64:12:6c:de:8c:f0:05:37:f0:dc:54: 94:c2:ef:52:88:be:22:f7:e2:c8:e4:d2:2b:eb:29:dd:cf:23: d8:2b:1a:cc:9c:4c:7f:ec:30:3e:f8:1d:a0:2c:da:76:29:ae: e7:c0:e9:1d -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgITI0Cq7xllp/+6veosq6Us1hXvQjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwMzE4MjIwMTU5WhcN MjYwMzE3MjIwNjU5WjAzMTEwLwYDVQQDEyhFNENFQzExRjI0NEJGMERBQkVDMTM2 RjgzOUZENTM3QjJEQkJFRDBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPnINuAl2svL2/OIrE3TavW3K6qYYZgkgRWonzQg404dqjypP7vj8udH92U0 uE+0juOVf9ilgTLKQHhA5CYV700mUI44x1Wha2MESvM/JVpxv9ovPch+qgrjMdVQ 0wD7nxS4lLNe10uEbOWX0q0iLOdU1BTipyfNInR5ueVXFKHi/nfh8CEZINYoUmXA mawewceuJHk0keGFPVVE1Kr/VCTA4uJtc4uiUTYlK6j+iZs9djKHsxuor+48Q6Lu m6G+A8BESk6CwxrLZfr+K8F0pBxg4qzvP9vM9pCiCAGtQm3qPI9+aDWd2QlK1fr4 ol008uTNDZzM2/qqtEGTFieLWQIDAQABo4ICyTCCAsUwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQU5M7BHyRL8Nq+wTb4Of1Tey277Q8wHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzMyZjNmNWQ5LWNmYjgtNDEyMy1hMmIxLWIwYjUyOTlmOWM2ZS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDkt Y2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJF QzEzNkY4MzlGRDUzN0IyREJCRUQwRi5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgME AWellDAPBAIAAjAJAwcAIAEN8xlAMA0GCSqGSIb3DQEBCwUAA4IBAQAvp8maVN2+ 8qrkmayrDiLjguiGPgWlGuIXxJjVGEMRT7VKQn5PpSkGS5YreBkTgnOIVFXrZPQ6 NpCl0HppdSRfRHpSxG4+sa8FUUqie/ZLLa2XH/1liAGbk6yTiIWjEamfC3ZR2cYk u1iNFiRiI/OM38WV8hb1JOjlYaOv/djl5Qd+Crlhx66xdQHXJROkzhPx5C93T0F3 3gbWwSLWk3zy3A3PA3s59+3tV8/PXXkm8d+LshUVUA3e2riLdMYKxiLEqz51dmz9 aWsFZWJzZBJs3ozwBTfw3FSUwu9SiL4i9+LI5NIr6yndzyPYKxrMnEx/7DA++B2g LNp2Ka7nwOkd -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:54 2025 by rpki-client