This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer File: E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer (raw, json) Hash identifier: ioYyOO3wf1lSO8BZYNWawFa2LarA88Tfk0tm0aMON7s= Subject key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 243EEF028919FE694CCC6C4F24245312255F2CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft caRepository: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Nov 2025 15:37:32 +0000 Certificate not after: Wed 04 Nov 2026 15:42:32 +0000 Subordinate resources: IP: 103.3.232.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3e:ef:02:89:19:fe:69:4c:cc:6c:4f:24:24:53:12:25:5f:2c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 5 15:37:32 2025 GMT Not After : Nov 4 15:42:32 2026 GMT Subject: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:08:0e:95:72:31:b0:26:88:32:cb:67:b5:06: 8e:40:74:58:2a:63:96:2d:49:67:ee:dc:77:e0:e2: 31:ef:35:41:44:e9:28:1d:3e:23:ff:50:4a:a3:27: cb:a7:4c:f9:49:9c:0f:55:8e:80:c3:0f:50:bc:a6: 35:38:13:f9:6c:d9:51:07:a9:b3:ff:37:e4:97:32: b0:0d:79:20:0f:1d:de:d2:90:72:3f:c4:20:32:f2: b0:79:be:c0:58:f7:59:1b:66:69:32:12:d5:41:30: 96:8a:7f:8d:2e:50:db:09:96:bf:5a:e6:f6:fc:ce: 54:3e:25:f7:f2:40:04:f0:36:cb:62:bd:c3:c3:4f: 1e:a2:71:c5:e0:f5:36:5f:13:0b:45:0f:43:65:b2: e0:ef:22:ac:5e:95:1e:13:12:58:25:ea:dd:16:a6: 98:87:a4:0a:30:03:48:58:17:f4:82:39:e0:10:90: d6:a8:92:de:4c:e0:45:17:45:84:e3:fc:5f:e3:6d: c1:70:1d:25:9f:3d:4e:3f:f2:fc:67:7c:41:6c:88: cc:06:d9:1d:b3:c3:14:9b:7b:56:77:d3:e3:b8:37: d0:f5:2b:2c:0a:f2:a8:f2:46:f4:b2:11:6f:b4:fb: 80:3b:03:33:a9:79:31:55:72:f9:55:55:56:eb:9d: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.232.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:64:d7:c2:db:6d:89:b1:0a:1d:e2:8b:90:82:fc:de:d2:c1: 3d:df:3e:00:3f:f3:9e:df:70:88:eb:95:32:d6:02:6a:7b:e7: a1:0c:4c:bf:68:d9:c8:3c:75:a7:b1:5d:59:3b:74:b5:33:0b: 71:58:94:e3:f3:ee:31:f9:ae:07:f5:80:78:9d:4f:dc:25:d2: 32:ec:7a:2e:41:85:58:73:87:11:4c:a1:0c:c5:d9:60:14:d6: ae:ee:00:da:a2:a2:30:27:8a:bf:b4:e0:9a:39:6f:27:28:66: 85:d5:38:27:e4:09:91:7c:7e:99:df:8a:36:eb:f5:dc:a2:76: 0f:52:1f:5f:18:5b:d2:ac:39:5a:e2:b2:68:0f:93:ff:3c:f3: 65:f6:45:18:24:31:8a:14:8c:f0:ab:c9:1c:04:4a:f7:fc:a0: 2e:ee:94:7c:fe:43:09:2d:d7:ae:28:51:ab:10:73:ef:f9:a4: 6b:0a:4c:cb:70:2f:9b:24:f1:56:cb:a0:36:bb:89:d7:73:10: c5:7b:c9:a8:00:8e:8d:a7:d7:67:fc:f5:f8:6a:ff:b9:af:17: 00:ba:81:2c:31:9d:95:26:b5:93:24:e2:1c:e7:a7:8d:44:c6: b9:24:0f:7d:bc:f2:00:f3:c3:4c:79:9b:60:87:8e:6c:f2:45: ae:43:55:8c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJD7vAokZ/mlMzGxPJCRTEiVfLKkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNTE1MzczMloX DTI2MTEwNDE1NDIzMlowMzExMC8GA1UEAxMoRTUzQ0REMjA0QTVENUJGNzg4M0Ew NDM4QkZDMjE3OTQ5NTk1M0ExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOkIDpVyMbAmiDLLZ7UGjkB0WCpjli1JZ+7cd+DiMe81QUTpKB0+I/9QSqMn y6dM+UmcD1WOgMMPULymNTgT+WzZUQeps/835JcysA15IA8d3tKQcj/EIDLysHm+ wFj3WRtmaTIS1UEwlop/jS5Q2wmWv1rm9vzOVD4l9/JABPA2y2K9w8NPHqJxxeD1 Nl8TC0UPQ2Wy4O8irF6VHhMSWCXq3RammIekCjADSFgX9II54BCQ1qiS3kzgRRdF hOP8X+NtwXAdJZ89Tj/y/Gd8QWyIzAbZHbPDFJt7VnfT47g30PUrLAryqPJG9LIR b7T7gDsDM6l5MVVy+VVVVuud+bkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOU83SBKXVv3iDoEOL/CF5SVlTofMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OWU3Y2EzOS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZTdjYTM5 LThkYmMtNDI4Mi1hMGQzLTg0ODAyMzcyNjg2Mi8wL0U1M0NERDIwNEE1RDVCRjc4 ODNBMDQzOEJGQzIxNzk0OTU5NTNBMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnA+gwDQYJKoZIhvcNAQELBQADggEBAI9k18LbbYmxCh3ii5CC/N7SwT3fPgA/ 857fcIjrlTLWAmp756EMTL9o2cg8daexXVk7dLUzC3FYlOPz7jH5rgf1gHidT9wl 0jLsei5BhVhzhxFMoQzF2WAU1q7uANqiojAnir+04Jo5bycoZoXVOCfkCZF8fpnf ijbr9dyidg9SH18YW9KsOVrismgPk/8882X2RRgkMYoUjPCryRwESvf8oC7ulHz+ Qwkt164oUasQc+/5pGsKTMtwL5sk8VbLoDa7iddzEMV7yagAjo2n12f89fhq/7mv FwC6gSwxnZUmtZMk4hznp41ExrkkD3288gDzw0x5m2CHjmzyRa5DVYw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:07 2025 by rpki-client