This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
File:                     EFCC7BEA840185763FF7624CF3DDE00563137A27.cer (raw, json)
Hash identifier:          jEY/6A7t5vDT5skBxaNgYC5ulShw+NuA27i+x09P31c=
Subject key identifier:   EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0E5117A0F5873522CAE84FF4F62941B99EDFEAE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Sat 15 Mar 2025 11:21:33 +0000
Certificate not after:    Sat 14 Mar 2026 11:26:33 +0000
Subordinate resources:    IP: 103.168.149.0/24
                          IP: 2407:a1c0::/32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:51:17:a0:f5:87:35:22:ca:e8:4f:f4:f6:29:41:b9:9e:df:ea:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar 15 11:21:33 2025 GMT
            Not After : Mar 14 11:26:33 2026 GMT
        Subject: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:e7:45:90:2e:f4:de:25:da:a8:99:c2:77:
                    12:59:dd:a8:5c:e3:89:ad:16:41:8f:10:ef:95:10:
                    e9:43:9b:18:5d:f1:ed:b7:12:cf:14:bf:01:f4:01:
                    82:62:3e:a8:0f:98:d5:5c:2c:8a:a5:41:fc:ff:bc:
                    2a:97:de:bc:6f:23:72:56:1f:db:a2:0c:57:8c:b4:
                    82:3a:7c:dd:ba:e5:de:a3:30:e2:22:ad:c2:8c:bd:
                    44:f4:e9:e1:5d:05:1e:f5:e4:9b:9a:17:40:20:22:
                    33:45:eb:25:49:82:70:b5:c5:3c:8c:f8:00:28:4b:
                    64:06:eb:29:0b:6c:ad:62:fd:e1:f4:a5:11:4a:2d:
                    39:c5:f0:af:d1:05:18:25:ae:9d:b4:cc:b1:ee:65:
                    c5:f1:74:8d:27:fb:20:ad:56:b3:97:48:b7:a3:0d:
                    4a:8a:9e:35:74:17:9e:31:de:01:56:cc:f1:25:6b:
                    82:d5:a5:48:02:94:4d:bd:e8:de:d0:72:df:00:52:
                    6e:dd:26:f5:67:84:17:91:f5:62:6a:01:c7:51:32:
                    12:10:d5:57:7b:64:bf:c7:6f:38:cc:b7:f4:c4:40:
                    d8:07:38:8a:b4:80:2d:19:fc:b8:bd:ec:cd:5c:9e:
                    b7:b0:8b:8e:19:fe:84:ac:89:c7:21:52:60:a6:8d:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.149.0/24
                IPv6:
                  2407:a1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:6e:c0:8c:cf:5e:52:e4:26:b1:cd:8c:94:93:da:57:52:4b:
         b7:52:d9:8c:00:47:29:f3:e5:b1:80:f0:b0:2d:0b:74:bb:18:
         5e:79:eb:f4:ba:c0:71:3e:1d:23:81:7b:e2:a7:3e:9e:2f:77:
         c8:fb:b2:30:86:8b:61:b4:4e:86:25:a9:a0:64:f8:ff:32:0a:
         ad:59:01:a5:ea:d2:5d:11:28:bb:e1:09:91:a3:b1:b8:39:e5:
         69:53:95:98:81:2c:c1:d4:46:0c:a7:86:c4:1c:52:b9:43:da:
         75:d6:6f:3d:70:ee:34:3b:7a:a7:dd:68:76:9e:d3:49:94:31:
         44:fc:da:59:02:b0:98:3d:33:16:4f:76:67:10:1c:b1:86:23:
         19:65:ab:4a:31:a7:72:e0:25:1d:15:30:8c:27:89:8c:ed:4b:
         9a:ff:a9:1e:8d:35:7f:86:13:78:e3:fe:0a:6f:a2:7c:89:12:
         19:d9:81:19:50:aa:2b:7a:49:07:00:c3:5d:81:2f:c1:5f:8b:
         43:d3:16:e1:83:03:c8:0e:4e:11:1d:c1:78:8a:73:39:62:93:
         62:4f:db:f5:8e:de:b2:49:e3:54:a1:df:46:25:88:94:0f:75:
         60:5a:ab:9b:1d:e6:c7:32:a5:d9:8e:b4:0e:69:83:ef:82:f2:
         3d:29:18:ea
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUDlEXoPWHNSLK6E/09ilBuZ7f6ukwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMxNTExMjEzM1oX
DTI2MDMxNDExMjYzM1owMzExMC8GA1UEAxMoRUZDQzdCRUE4NDAxODU3NjNGRjc2
MjRDRjNEREUwMDU2MzEzN0EyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKv950WQLvTeJdqomcJ3ElndqFzjia0WQY8Q75UQ6UObGF3x7bcSzxS/AfQB
gmI+qA+Y1VwsiqVB/P+8KpfevG8jclYf26IMV4y0gjp83brl3qMw4iKtwoy9RPTp
4V0FHvXkm5oXQCAiM0XrJUmCcLXFPIz4AChLZAbrKQtsrWL94fSlEUotOcXwr9EF
GCWunbTMse5lxfF0jSf7IK1Ws5dIt6MNSoqeNXQXnjHeAVbM8SVrgtWlSAKUTb3o
3tBy3wBSbt0m9WeEF5H1YmoBx1EyEhDVV3tkv8dvOMy39MRA2Ac4irSALRn8uL3s
zVyet7CLjhn+hKyJxyFSYKaNnakCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFO/Me+qEAYV2P/diTPPd4AVjE3onMB8GA1UdIwQYMBaAFLqP
d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g
XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y
L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G
CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv
OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw
ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw
by8wZGQwNzhmZS0wOTMwLTQ1ZGMtYjQwMy0zY2U0ZTg2M2Y4YjUvMDCBgAYIKwYB
BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkZDA3OGZl
LTA5MzAtNDVkYy1iNDAzLTNjZTRlODYzZjhiNS8wL0VGQ0M3QkVBODQwMTg1NzYz
RkY3NjI0Q0YzRERFMDA1NjMxMzdBMjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BABnqJUwDQQCAAIwBwMFACQHocAwDQYJKoZIhvcNAQELBQADggEBAFNuwIzPXlLk
JrHNjJST2ldSS7dS2YwARynz5bGA8LAtC3S7GF556/S6wHE+HSOBe+KnPp4vd8j7
sjCGi2G0ToYlqaBk+P8yCq1ZAaXq0l0RKLvhCZGjsbg55WlTlZiBLMHURgynhsQc
UrlD2nXWbz1w7jQ7eqfdaHae00mUMUT82lkCsJg9MxZPdmcQHLGGIxllq0oxp3Lg
JR0VMIwniYztS5r/qR6NNX+GE3jj/gpvonyJEhnZgRlQqit6SQcAw12BL8Ffi0PT
FuGDA8gOThEdwXiKczlik2JP2/WO3rJJ41Sh30YliJQPdWBaq5sd5scypdmOtA5p
g++C8j0pGOo=
-----END CERTIFICATE-----