This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
File: F503463BC571123F80B94A358280E0D0F9750C09.cer (raw, json)
Hash identifier: MB9MMPpPHBZfRkW60EE8n3dsBopfwNU9TqVhVxin2Rs=
Subject key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 77331FE7E22584CF1239B366DB6BEAE857069BFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
caRepository: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Sun 30 Mar 2025 01:48:04 +0000
Certificate not after: Sun 29 Mar 2026 01:53:04 +0000
Subordinate resources: IP: 103.169.186.0/23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:33:1f:e7:e2:25:84:cf:12:39:b3:66:db:6b:ea:e8:57:06:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 30 01:48:04 2025 GMT
Not After : Mar 29 01:53:04 2026 GMT
Subject: CN=F503463BC571123F80B94A358280E0D0F9750C09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:57:ef:f8:21:0b:92:2e:f8:40:c6:e4:28:
8e:37:87:71:e1:85:b7:e2:80:cc:05:96:e3:fc:51:
bc:e5:43:84:9c:fc:0a:12:ae:2f:fa:0f:05:bc:c8:
81:77:5e:44:47:a5:ca:4a:9b:ed:3a:8d:e7:e7:34:
55:d5:cf:b4:55:ed:1d:4d:49:bd:a1:46:c1:97:0a:
e3:14:15:a6:6c:ce:72:ca:49:b6:61:49:49:68:f5:
3c:a3:7a:3e:6e:63:3d:69:27:6d:d2:72:2c:ac:1f:
44:57:f1:23:af:e2:13:55:43:6f:13:88:78:85:8c:
01:d3:bb:83:e6:65:c9:ef:5d:23:31:b0:09:66:08:
1c:6f:f3:d0:0d:1d:e3:08:f8:fc:1f:64:d7:86:9e:
b0:b9:0f:8d:62:5f:67:7d:e8:9c:80:c4:6d:d2:3a:
8f:cc:15:81:9e:19:1e:46:48:5a:2e:93:ef:f0:90:
64:a5:5b:bc:49:7f:68:c7:8f:19:55:ec:13:3e:43:
ee:60:ae:59:ef:9c:34:47:9d:fc:53:d0:04:27:59:
1c:61:76:ce:e8:d4:03:ea:b5:5e:f0:7e:94:63:76:
3d:c7:a8:35:6c:84:bd:dc:f3:8e:2a:3d:e2:64:92:
04:05:1c:7e:40:94:1a:dc:4e:d9:fe:4b:85:64:9e:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.186.0/23
Signature Algorithm: sha256WithRSAEncryption
79:1f:2b:a6:44:2f:c3:af:3f:6f:31:b6:fb:01:ca:08:55:0a:
cb:af:37:c4:1e:55:5d:f8:8a:66:73:f5:6a:fc:b2:75:25:26:
dc:fc:37:56:9f:69:22:ac:7b:97:2c:22:b0:82:3c:77:f9:6a:
bd:97:d5:73:30:cb:7a:ad:6a:13:ac:9d:24:3e:7b:d4:c5:27:
20:b5:bc:e4:1d:ce:db:3b:b5:21:68:35:0a:8d:ab:2e:64:d6:
f5:a5:64:3c:50:8d:21:f8:4e:bd:1f:6c:de:11:24:9e:9c:93:
6b:3b:7d:c4:a9:50:47:7e:02:54:b9:d7:ad:1c:45:f0:2d:7e:
20:9d:e0:b1:10:81:5f:f0:94:e0:a4:e6:88:36:cc:ae:5f:a7:
22:a3:40:49:5e:2f:65:fd:46:54:af:4a:fe:23:69:7c:a3:09:
af:0d:12:b3:4b:ee:e5:a5:3a:ee:d8:74:58:6d:d8:2e:be:9d:
b1:d1:30:e5:0a:b5:6c:0a:2d:ee:04:3e:f7:21:11:ea:27:db:
26:1b:5c:f2:bf:23:95:33:47:21:11:63:1a:07:b4:1e:d6:51:
f7:e5:de:21:00:b1:df:40:d0:c5:4d:d1:44:6b:9f:b7:ec:a9:
e4:a6:ef:40:b8:67:91:76:6e:03:5b:bb:c2:c7:f0:85:bc:04:
7e:6f:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:17:16 2025 by rpki-client