This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
File: EA364B048B6B5A81F887F07FDB60499024CE8C94.cer (raw, json)
Hash identifier: pKcQvV0CbS/dQHSeUvRm889CDeMjXkUeYLHtW029Xbs=
Subject key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4665A4FEF9327A49B27E072F923887227A9C2D7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
caRepository: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 06 Nov 2025 08:13:54 +0000
Certificate not after: Thu 05 Nov 2026 08:18:54 +0000
Subordinate resources: IP: 103.121.100.0/22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:65:a4:fe:f9:32:7a:49:b2:7e:07:2f:92:38:87:22:7a:9c:2d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 6 08:13:54 2025 GMT
Not After : Nov 5 08:18:54 2026 GMT
Subject: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:ae:7f:d6:a8:41:ff:73:c3:26:77:58:30:
df:b9:5e:2c:b4:67:6f:a6:de:90:1e:f4:61:85:99:
d7:f3:6f:22:2e:04:f5:89:af:f6:a8:7b:ff:7b:7e:
0a:e6:0e:c9:2c:fc:9e:c9:2d:01:3d:cb:ad:85:c0:
1e:e2:0b:15:24:d8:38:0f:3a:5e:66:4e:af:c3:b9:
bb:42:b4:e3:8b:98:5e:77:14:03:11:a2:a7:df:6f:
d2:1d:cc:ec:ce:96:33:26:16:3e:10:24:80:2c:be:
98:43:56:52:fa:e8:82:5e:fc:70:8a:eb:5b:45:f0:
4b:cc:cb:5c:a1:23:3e:81:1f:7c:64:f8:1c:84:dc:
aa:48:bb:3b:20:14:b7:90:4b:85:13:75:08:ce:f3:
66:41:e9:89:00:c7:67:be:60:26:7a:dd:0b:99:86:
14:8b:47:b6:34:09:e4:3c:18:ee:04:85:c4:62:44:
b4:e0:39:76:2b:e5:82:b0:8c:cc:5f:be:ea:92:bc:
4e:05:5c:89:75:28:e8:3c:e9:3d:a0:86:81:c6:ba:
e8:49:53:09:c1:c1:e4:c5:dc:14:e9:ae:1b:d3:53:
d2:d3:01:8e:cd:26:1c:83:1f:9f:9a:ae:f3:23:3b:
9f:6e:b9:36:6e:d8:b0:c1:c6:46:95:e1:72:98:45:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.100.0/22
Signature Algorithm: sha256WithRSAEncryption
98:de:bd:f7:7c:57:87:95:05:f6:3d:29:34:dc:ea:82:4e:a5:
a6:80:c6:4a:f9:65:e5:86:82:d2:63:43:db:da:cb:e3:1e:0d:
e9:2c:17:f1:79:72:c1:de:7e:e7:2d:37:ea:95:70:a8:d0:db:
d5:60:9c:ee:2d:97:c6:a2:c4:f5:be:2e:6e:9f:22:74:91:c4:
e0:b3:3f:c0:7d:01:9c:3c:cd:11:2c:cc:b5:73:29:96:66:40:
d2:7e:44:e4:db:84:9e:06:51:2e:71:44:13:6e:90:73:31:05:
f9:27:22:63:b9:74:17:a9:e7:80:5a:92:06:65:15:88:4f:bf:
15:4e:5a:9e:90:5e:f0:d7:d2:b2:db:36:bb:bd:d3:01:0b:b5:
da:f2:45:fe:55:2b:de:75:c2:d6:1b:16:ed:ac:23:6b:dd:7f:
d8:5d:89:28:38:78:dd:9d:f8:13:41:92:d0:6a:b9:bb:73:08:
d2:87:a5:a6:3f:9e:48:fd:85:57:19:0f:cd:be:ec:39:20:2d:
0c:a7:70:87:23:4b:16:b7:ad:d0:24:f1:c5:5e:59:6d:12:50:
b3:0e:9a:e7:fe:9c:39:a1:71:80:c5:a0:75:d7:fe:d1:5c:c1:
af:a7:75:8e:24:f5:ff:b8:66:ec:4d:b8:80:df:c0:a3:b8:89:
aa:b4:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 12:41:38 2025 by rpki-client