This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer (raw, json) Hash identifier: Mwua2eP4flR8cCo2NTH+bNlgLUbvNywc3VLqMQSzquk= Subject key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F2549F361A2487C72324E1D89FC92F97F2CD5A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Dec 2025 23:01:54 +0000 Certificate not after: Mon 30 Nov 2026 23:06:54 +0000 Subordinate resources: IP: 103.204.15.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:25:49:f3:61:a2:48:7c:72:32:4e:1d:89:fc:92:f9:7f:2c:d5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 1 23:01:54 2025 GMT Not After : Nov 30 23:06:54 2026 GMT Subject: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:36:1e:1e:50:46:5b:3d:a1:42:11:c6:9a: 18:45:1f:4a:99:f1:58:25:03:25:86:31:0e:35:1a: 95:65:63:9b:b1:7c:7e:b2:aa:9b:bb:30:e9:cf:e6: de:ae:58:ff:fb:53:4f:ac:3e:a3:45:99:e7:8b:52: 7d:88:05:13:38:b8:34:62:2c:55:9e:26:e6:46:dc: 35:b6:a5:6f:aa:03:e9:23:fb:3b:cc:3e:12:0d:9d: 44:19:88:50:79:73:81:2e:4a:4c:4a:c2:12:ca:30: 76:88:00:c4:95:7b:66:d4:74:ba:c3:b0:13:49:1e: 2c:65:4e:8d:7a:2e:0b:24:15:4d:4a:a9:e9:fb:fb: e4:af:df:33:ef:ce:2c:5f:60:0a:fa:8d:03:fb:e0: 1e:02:76:95:bb:8d:b4:2c:dd:08:66:18:ef:94:aa: 1a:22:1f:68:cf:b3:eb:a2:0b:45:fe:8a:3b:3b:80: c8:d4:2c:68:df:5d:a9:ac:5c:f2:3a:31:52:4f:78: f3:25:d7:38:d9:e3:0b:cc:ae:c3:fe:92:e7:fa:9b: d8:7f:f9:4f:4f:69:33:c0:f9:6b:32:b0:97:e3:e2: ae:cb:37:9d:de:4b:3a:51:17:bd:f8:98:17:c2:1c: 6b:06:55:9d:e9:4b:53:fc:bf:7b:ca:17:d2:b1:43: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.204.15.0/24 Signature Algorithm: sha256WithRSAEncryption 53:af:00:88:33:35:72:42:94:a7:45:3e:3d:ae:1f:43:03:82: 62:cd:f9:a1:b2:3e:61:ac:dc:89:c3:7a:37:53:6d:7a:7d:43: 7e:05:45:f8:6f:7d:2a:f8:0a:b2:71:59:74:89:38:6d:5e:e8: 69:55:82:43:7c:b1:18:dc:c5:dd:0b:26:57:a4:67:45:63:c9: a5:3b:af:37:62:ce:38:bd:b2:ca:c0:8d:4e:05:e0:28:a2:16: e0:92:e5:d4:a9:e3:94:d7:c0:49:5e:53:df:f3:d0:67:70:e5: 34:99:06:13:04:b0:d8:a2:ad:29:0a:94:64:d2:6c:69:b7:e1: d0:97:d7:48:85:2b:23:48:5f:d9:bf:79:4b:29:a9:dc:d7:2c: db:90:64:8c:d9:dd:2a:cb:d2:74:d3:ef:b0:90:7e:a2:35:9f: fe:15:3f:54:d0:5a:3d:cc:2a:17:e4:86:c4:b4:8d:b5:7e:81: e0:22:25:63:c8:ee:02:b6:d5:6a:b5:94:ec:ac:36:46:d8:c4: a2:63:01:69:df:ce:3a:6f:d1:30:2d:3f:72:76:90:e3:21:cf: 77:f3:9b:42:6b:6c:74:0a:c0:05:71:85:fc:5f:b7:c9:0d:68: 1c:17:3c:71:9c:5e:7e:aa:ef:41:ac:d3:e4:91:1f:8a:43:8b: 7f:ef:a7:d0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXyVJ82GiSHxyMk4difyS+X8s1acwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIwMTIzMDE1NFoX DTI2MTEzMDIzMDY1NFowMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVB MUY2RjM0Qjk1OEQxOUEzQjRGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKswNh4eUEZbPaFCEcaaGEUfSpnxWCUDJYYxDjUalWVjm7F8frKqm7sw6c/m 3q5Y//tTT6w+o0WZ54tSfYgFEzi4NGIsVZ4m5kbcNbalb6oD6SP7O8w+Eg2dRBmI UHlzgS5KTErCEsowdogAxJV7ZtR0usOwE0keLGVOjXouCyQVTUqp6fv75K/fM+/O LF9gCvqNA/vgHgJ2lbuNtCzdCGYY75SqGiIfaM+z66ILRf6KOzuAyNQsaN9dqaxc 8joxUk948yXXONnjC8yuw/6S5/qb2H/5T09pM8D5azKwl+Pirss3nd5LOlEXvfiY F8IcawZVnelLU/y/e8oX0rFD6E0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO7MSkTwlZTrcR6h9vNLlY0Zo7T9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yOWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5ZmM5OTZm LTcyY2EtNGQ2Yi1hMGU3LWZmNWJjNDJiMDU4OS8wL0VFQ0M0QTQ0RjA5NTk0RUI3 MTFFQTFGNkYzNEI5NThEMTlBM0I0RkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnzA8wDQYJKoZIhvcNAQELBQADggEBAFOvAIgzNXJClKdFPj2uH0MDgmLN+aGy PmGs3InDejdTbXp9Q34FRfhvfSr4CrJxWXSJOG1e6GlVgkN8sRjcxd0LJlekZ0Vj yaU7rzdizji9ssrAjU4F4CiiFuCS5dSp45TXwEleU9/z0Gdw5TSZBhMEsNiirSkK lGTSbGm34dCX10iFKyNIX9m/eUspqdzXLNuQZIzZ3SrL0nTT77CQfqI1n/4VP1TQ Wj3MKhfkhsS0jbV+geAiJWPI7gK21Wq1lOysNkbYxKJjAWnfzjpv0TAtP3J2kOMh z3fzm0JrbHQKwAVxhfxft8kNaBwXPHGcXn6q70Gs0+SRH4pDi3/vp9A= -----END CERTIFICATE-----Generated at Wed Dec 3 13:17:47 2025 by rpki-client