This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
File: ED4F41D4EBE684D523406475FAB471CE1B24E360.cer (raw, json)
Hash identifier: ZMfzdQF8JbKfAdF9Htnsm+l6r1r+5YRkmAkNWtzIQc0=
Subject key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7AF4FB1FFD8DCF26224AA919187C38FFF1F1D946
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
caRepository: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 03 Nov 2025 22:23:57 +0000
Certificate not after: Mon 02 Nov 2026 22:28:57 +0000
Subordinate resources: IP: 103.175.156.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f4:fb:1f:fd:8d:cf:26:22:4a:a9:19:18:7c:38:ff:f1:f1:d9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 3 22:23:57 2025 GMT
Not After : Nov 2 22:28:57 2026 GMT
Subject: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:5d:8e:23:b1:66:27:93:0e:2d:36:c5:3b:
08:ca:68:5f:cd:64:a1:9b:fc:72:28:f5:82:62:56:
70:ef:fd:f7:41:ad:ad:31:2f:db:d7:d6:73:fe:95:
7e:6c:1a:02:9e:17:d1:b3:dd:19:be:1e:91:64:a4:
9e:5b:51:20:d3:5b:87:13:5e:fc:d1:31:16:2d:5f:
a9:45:37:33:5f:c4:9b:7d:94:35:4a:82:21:3f:aa:
9e:0b:fa:56:3e:88:fc:ae:a1:21:28:bf:80:2d:49:
26:5f:db:44:b4:09:94:f8:dc:e2:b9:d7:15:9b:6a:
12:63:a7:13:02:f7:35:ca:c7:a8:7c:dd:44:47:d8:
84:77:78:fe:44:60:02:8d:da:d5:3d:54:b5:8c:69:
a8:64:37:65:b9:54:31:94:a7:70:91:06:ac:2a:3d:
09:12:5f:8a:b2:f5:20:cc:23:38:36:92:d6:e2:bd:
3c:25:aa:92:a2:b1:4b:60:3d:f6:9a:ad:76:1e:c0:
d6:8c:b1:2e:dd:66:f7:c7:5a:0e:d7:3e:6c:58:6f:
ac:1e:d0:c1:e1:67:db:19:73:9f:ed:f5:ae:8e:d7:
f4:ab:fd:dc:20:ce:c4:3d:f7:70:2b:fb:bf:34:54:
53:8c:a0:4d:09:6e:d3:f7:35:81:b9:c1:1a:df:f4:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.156.0/23
Signature Algorithm: sha256WithRSAEncryption
12:0a:b2:2b:fd:b3:ba:59:7f:e0:5a:aa:90:a8:38:50:31:cd:
a3:7f:90:a2:02:a2:f5:86:8b:4e:2e:dc:2f:d9:77:00:3f:47:
68:2a:d7:fb:30:4a:e1:eb:4e:f1:a0:c9:72:1c:74:3c:da:35:
4e:c7:b1:1b:72:6c:a3:cc:aa:93:13:5a:7d:47:5a:2a:fe:0c:
19:ad:a5:71:52:45:31:35:ae:7c:b4:5c:4d:23:f1:fa:02:9e:
dc:91:b6:b1:6b:8d:12:0c:37:c5:b0:e6:55:44:6b:ed:30:38:
14:30:6e:1a:99:9f:88:92:bb:d0:f5:90:b0:11:4d:78:90:99:
4d:bb:d2:2c:f0:d0:d5:f5:34:85:20:5b:f0:c7:5f:79:3f:ae:
60:57:43:43:a2:f2:41:d6:f8:cc:85:6d:c0:94:a7:dc:d4:95:
3d:5b:33:e5:31:e8:bb:42:07:06:b8:27:68:b5:2b:8b:45:95:
60:4f:3b:97:dd:64:ed:07:e8:6c:bc:fa:a2:da:90:67:29:cf:
a0:13:6e:53:57:3e:d1:b1:41:89:59:95:71:a9:4b:9a:d3:ab:
c0:21:b9:bb:07:e5:9a:01:03:6e:f4:8f:03:65:2a:1e:19:e3:
ec:7c:3a:c9:62:9f:57:9b:20:19:ba:87:0b:77:fa:4b:fb:2a:
99:a6:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:00 2025 by rpki-client