This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer File: EB6A398D686553919657E094022E843191F4573E.cer (raw, json) Hash identifier: INSrhZ2AozyW+MdWvmbSgpNZRhiZeH4ODBv3et5eV8A= Subject key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 466994E7F0DCDB40D40624187CC63F227ECB547D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft caRepository: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 14 Nov 2025 15:59:45 +0000 Certificate not after: Fri 13 Nov 2026 16:04:45 +0000 Subordinate resources: IP: 103.181.248.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:69:94:e7:f0:dc:db:40:d4:06:24:18:7c:c6:3f:22:7e:cb:54:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 14 15:59:45 2025 GMT Not After : Nov 13 16:04:45 2026 GMT Subject: CN=EB6A398D686553919657E094022E843191F4573E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:10:38:bf:48:c5:6b:5c:58:e2:53:5a:07: cf:88:54:b8:a2:a9:28:82:61:56:a4:2f:4e:50:50: 7c:9f:66:3b:af:21:c1:e1:56:43:68:ac:35:b3:ed: 0b:27:8a:15:46:24:51:39:e3:de:35:9b:54:57:09: bb:82:36:43:22:a3:ca:37:21:59:f4:d0:54:4a:f8: ad:0a:32:c7:37:6b:7e:e0:f9:34:61:fa:31:12:30: 2e:87:36:d9:18:5d:cd:6a:80:03:b7:6a:8e:ae:de: a7:67:86:16:01:e0:f8:76:1e:54:b9:e2:9e:05:84: 4b:66:3b:68:d2:48:d2:c5:c8:f6:28:57:60:bc:28: 95:8e:11:ae:e3:0c:ff:00:c7:67:b5:73:0f:72:5e: 61:34:15:92:60:2d:9a:27:09:90:5e:38:ce:e3:68: 14:a3:2c:4b:0a:81:8c:80:77:46:65:d1:c7:89:ac: 59:33:c2:5e:a6:3c:ce:d6:89:1d:cf:ea:11:69:21: f0:65:ae:92:09:8d:9a:6f:f3:1c:ea:e5:a6:12:d9: b9:a2:81:d3:ec:5d:a3:bd:e6:00:28:f0:97:99:4f: 63:ed:2d:08:94:2c:d1:e4:27:7d:98:ad:c1:8e:48: c9:66:9a:0e:5b:f5:95:4a:07:e5:60:a5:24:26:18: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.248.0/23 Signature Algorithm: sha256WithRSAEncryption 78:8d:ab:f4:85:46:72:80:ea:43:93:69:c9:fb:bb:b6:76:3a: 4d:2d:cb:27:c6:64:39:95:4e:ea:d9:1f:8b:79:29:da:f2:79: 7a:72:d5:d3:8e:f2:9d:b5:a1:1d:b9:e1:eb:b8:31:a5:c7:69: d4:61:06:d9:4f:c5:61:9a:fc:34:e1:30:ae:82:05:dd:27:63: a1:f7:90:9a:56:53:a5:c5:07:e2:fe:b8:27:37:03:ea:d1:f8: 46:4a:9f:2a:08:6d:03:0e:3f:41:59:c7:c4:0e:b4:2e:eb:c7: 12:ff:a2:26:a3:e1:89:39:25:09:e8:ca:c5:11:c7:c0:a2:df: 14:86:8c:9d:ee:03:96:63:d9:5a:22:45:3a:38:95:40:2b:0e: 60:33:87:e4:cf:2c:a7:4b:8c:1c:e8:f1:1a:ef:57:75:d8:55: 66:87:d0:39:89:c4:55:2d:c3:2d:11:6d:f9:94:28:57:33:8d: 99:9e:e4:05:40:84:f0:dd:02:58:51:bb:23:e0:5e:3b:57:cf: 3d:f5:d9:a7:17:ea:d3:62:42:22:2a:af:15:92:c2:49:92:f0: 87:ee:67:bb:cb:c3:d7:fc:5c:2a:55:e9:f4:1e:dd:27:53:ee: 9e:40:a5:c8:32:7c:a2:12:a5:5f:01:86:6c:d1:96:1e:47:37: 48:5c:29:36 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURmmU5/Dc20DUBiQYfMY/In7LVH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExNDE1NTk0NVoX DTI2MTExMzE2MDQ0NVowMzExMC8GA1UEAxMoRUI2QTM5OEQ2ODY1NTM5MTk2NTdF MDk0MDIyRTg0MzE5MUY0NTczRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjZEDi/SMVrXFjiU1oHz4hUuKKpKIJhVqQvTlBQfJ9mO68hweFWQ2isNbPt CyeKFUYkUTnj3jWbVFcJu4I2QyKjyjchWfTQVEr4rQoyxzdrfuD5NGH6MRIwLoc2 2RhdzWqAA7dqjq7ep2eGFgHg+HYeVLningWES2Y7aNJI0sXI9ihXYLwolY4RruMM /wDHZ7VzD3JeYTQVkmAtmicJkF44zuNoFKMsSwqBjIB3RmXRx4msWTPCXqY8ztaJ Hc/qEWkh8GWukgmNmm/zHOrlphLZuaKB0+xdo73mACjwl5lPY+0tCJQs0eQnfZit wY5IyWaaDlv1lUoH5WClJCYYbJUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOtqOY1oZVORllfglAIuhDGR9Fc+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZTRlMTAzZS0zZDc4LTRhZTAtOWJhNC1kMTc5MmZmYTA0YWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlNGUxMDNl LTNkNzgtNGFlMC05YmE0LWQxNzkyZmZhMDRhYy8wL0VCNkEzOThENjg2NTUzOTE5 NjU3RTA5NDAyMkU4NDMxOTFGNDU3M0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntfgwDQYJKoZIhvcNAQELBQADggEBAHiNq/SFRnKA6kOTacn7u7Z2Ok0tyyfG ZDmVTurZH4t5KdryeXpy1dOO8p21oR254eu4MaXHadRhBtlPxWGa/DThMK6CBd0n Y6H3kJpWU6XFB+L+uCc3A+rR+EZKnyoIbQMOP0FZx8QOtC7rxxL/oiaj4Yk5JQno ysURx8Ci3xSGjJ3uA5Zj2VoiRTo4lUArDmAzh+TPLKdLjBzo8RrvV3XYVWaH0DmJ xFUtwy0RbfmUKFczjZme5AVAhPDdAlhRuyPgXjtXzz312acX6tNiQiIqrxWSwkmS 8IfuZ7vLw9f8XCpV6fQe3SdT7p5ApcgyfKISpV8BhmzRlh5HN0hcKTY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:49 2025 by rpki-client