This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer File: E7D91E7B841DB274E77E823084312F8B78A5C951.cer (raw, json) Hash identifier: G0MhNqvRd2VZoE57rh3QF8q41wGkrGdiwBHMG2SQSwI= Subject key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: C17CB322EAF4DF8C1532820B464E1EE45674E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft caRepository: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 16 Jul 2025 17:52:04 +0000 Certificate not after: Wed 15 Jul 2026 17:57:04 +0000 Subordinate resources: IP: 103.141.238.0/23 IP: 2001:df1:1c80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c1:7c:b3:22:ea:f4:df:8c:15:32:82:0b:46:4e:1e:e4:56:74:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 16 17:52:04 2025 GMT Not After : Jul 15 17:57:04 2026 GMT Subject: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:db:8c:c5:e5:6f:9a:6a:c2:4f:2d:8e:92: 87:7e:87:37:50:84:ef:28:f4:8b:c9:f3:97:f6:13: 42:5b:ec:20:85:95:9e:8e:7c:a0:fd:4d:4b:fa:dc: 74:c1:4e:84:aa:cf:b0:2f:57:7c:d9:98:7e:6b:e2: 14:22:09:11:bc:2a:84:24:ee:b4:f9:1e:33:90:1b: 04:0b:69:cb:34:55:ec:02:20:b8:fd:87:9b:fb:12: 79:07:88:76:10:a2:ee:23:1f:25:5a:27:e9:e9:07: 5e:8b:52:5e:83:58:fe:df:f6:bb:fb:35:a8:dc:32: 4d:01:df:94:c4:16:ac:92:04:5c:25:52:d0:0e:95: af:6a:52:8a:f6:73:a4:d8:09:ac:70:2d:e2:66:ef: ae:9f:8a:60:79:40:f6:a7:2c:a5:df:a8:b0:4a:a3: af:8a:37:aa:f7:a6:1e:4a:4b:8b:ab:e7:38:64:97: 08:c3:d2:83:e3:46:44:4a:db:c7:4e:1d:db:ba:c9: 04:a8:e6:fd:09:23:79:15:8b:f4:44:6e:c6:74:86: 41:69:2d:66:47:c2:d7:d6:e7:a0:8d:a9:a5:34:40: 18:7d:42:30:9e:8d:e1:0c:7c:8c:3d:c9:b2:10:c7: 36:af:47:23:c0:a0:d7:8f:27:ac:f1:65:91:5d:85: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.238.0/23 IPv6: 2001:df1:1c80::/48 Signature Algorithm: sha256WithRSAEncryption 97:56:92:28:45:1b:e6:46:e3:bc:f8:52:65:03:03:2d:cf:32: 58:15:dc:9c:68:05:67:ba:6a:30:11:9b:27:be:00:39:d1:d9: 40:1e:54:3a:09:64:fe:bf:61:37:fb:b9:77:20:7a:b2:c4:1f: bf:9a:8a:7d:e6:4b:fd:0f:92:24:81:9b:f4:50:4a:5f:7f:20: 12:26:15:32:fa:0c:dc:5d:e0:04:5d:49:73:0e:c8:2f:8c:72: e6:47:33:1c:f9:ec:cb:cd:24:a3:72:fb:dc:aa:bc:83:ee:c7: 56:28:e0:e0:4a:cc:5e:b2:bd:a8:ba:b4:27:ea:60:bf:ab:9b: 8f:42:8c:37:14:86:94:3c:c3:22:fb:27:6e:f3:9d:47:23:c2: 46:e3:31:1a:3e:09:91:fa:10:87:76:70:01:fb:3d:1f:07:43: aa:13:2e:5b:91:32:7b:83:41:19:e3:54:de:67:7f:5c:84:71: 1f:80:78:d5:d6:1c:52:c6:c0:87:be:2f:93:66:fe:3a:1f:bf: a0:42:b2:8a:c5:2e:3f:ca:44:2c:6c:1f:eb:fb:9d:a8:54:1d: a4:f0:00:ec:8b:ac:6b:bb:3a:a3:3a:22:c9:4e:77:3c:08:0b: 33:9d:51:35:95:8f:4d:69:fe:ff:9f:39:86:5e:fd:bb:42:24: a7:2e:4f:33 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUAMF8syLq9N+MFTKCC0ZOHuRWdOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxNjE3NTIwNFoX DTI2MDcxNTE3NTcwNFowMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4 MjMwODQzMTJGOEI3OEE1Qzk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIW24zF5W+aasJPLY6Sh36HN1CE7yj0i8nzl/YTQlvsIIWVno58oP1NS/rc dMFOhKrPsC9XfNmYfmviFCIJEbwqhCTutPkeM5AbBAtpyzRV7AIguP2Hm/sSeQeI dhCi7iMfJVon6ekHXotSXoNY/t/2u/s1qNwyTQHflMQWrJIEXCVS0A6Vr2pSivZz pNgJrHAt4mbvrp+KYHlA9qcspd+osEqjr4o3qvemHkpLi6vnOGSXCMPSg+NGRErb x04d27rJBKjm/QkjeRWL9ERuxnSGQWktZkfC19bnoI2ppTRAGH1CMJ6N4Qx8jD3J shDHNq9HI8Cg148nrPFlkV2F/OcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOfZHnuEHbJ0536CMIQxL4t4pclRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wYTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNzA4M2Fi LTI3MGEtNGIwYS04ZTU1LWE0NWUxY2YxYWZkNS8wL0U3RDkxRTdCODQxREIyNzRF NzdFODIzMDg0MzEyRjhCNzhBNUM5NTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnje4wDwQCAAIwCQMHACABDfEcgDANBgkqhkiG9w0BAQsFAAOCAQEAl1aSKEUb 5kbjvPhSZQMDLc8yWBXcnGgFZ7pqMBGbJ74AOdHZQB5UOglk/r9hN/u5dyB6ssQf v5qKfeZL/Q+SJIGb9FBKX38gEiYVMvoM3F3gBF1Jcw7IL4xy5kczHPnsy80ko3L7 3Kq8g+7HVijg4ErMXrK9qLq0J+pgv6ubj0KMNxSGlDzDIvsnbvOdRyPCRuMxGj4J kfoQh3ZwAfs9HwdDqhMuW5Eye4NBGeNU3md/XIRxH4B41dYcUsbAh74vk2b+Oh+/ oEKyisUuP8pELGwf6/udqFQdpPAA7Iusa7s6ozoiyU53PAgLM51RNZWPTWn+/585 hl79u0Ikpy5PMw== -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:19 2025 by rpki-client