This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer
File:                     F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer (raw, json)
Hash identifier:          sGnEk2rwvZq25zxuQS5xrJuAA2ouvxm6nS/Cob9Vkc0=
Subject key identifier:   F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       62A1443E64074A35D7E158E48383ED9BCE568DE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Nov 2025 09:38:33 +0000
Certificate not after:    Fri 06 Nov 2026 09:43:33 +0000
Subordinate resources:    IP: 103.75.66.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a1:44:3e:64:07:4a:35:d7:e1:58:e4:83:83:ed:9b:ce:56:8d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  7 09:38:33 2025 GMT
            Not After : Nov  6 09:43:33 2026 GMT
        Subject: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:e5:9b:bd:dd:40:b9:c9:05:b4:f1:d3:de:
                    c0:80:00:ac:c2:17:cb:bb:c9:b4:cc:e6:c7:a1:bc:
                    b4:4b:d2:e1:a2:9e:b6:dd:53:de:8a:37:a3:c0:47:
                    56:b0:05:e7:23:e5:98:d4:e6:e0:aa:c2:57:88:ae:
                    89:6d:4d:b9:2d:db:15:39:34:9c:c6:d7:0a:bb:e6:
                    e7:3d:4e:bd:f4:40:b8:e8:d4:1e:1d:df:f3:6d:e8:
                    10:2f:21:a0:eb:37:c3:6b:c5:79:0a:1a:8d:29:f8:
                    e1:57:ef:f2:3e:d5:fb:e2:37:b5:62:11:05:7f:d9:
                    10:18:f5:17:31:4e:ba:63:e0:01:9c:81:3c:2e:f9:
                    48:3a:47:40:dc:73:43:78:be:a4:ce:da:69:5a:3c:
                    a5:2b:9c:24:bf:ae:a4:41:48:b2:d7:9e:77:94:26:
                    7e:f9:1e:19:5b:d6:60:23:55:1a:69:cc:21:3e:93:
                    83:3c:da:92:36:57:cf:36:e5:21:2b:de:ad:15:2a:
                    57:8f:9c:43:d8:f6:f6:53:62:f6:b3:c2:ea:91:91:
                    6b:a7:58:9d:94:7d:6a:20:12:e9:d4:57:8f:f3:cf:
                    70:05:f3:36:5a:54:06:5f:18:2c:e9:b1:1f:b7:27:
                    b4:a9:f4:a8:cf:c9:7c:f4:5f:24:97:08:14:da:6c:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:a1:ca:c0:43:8a:25:69:bb:c1:0b:16:9b:3c:ef:cb:d6:8f:
         0a:62:94:f9:29:e1:a0:b7:76:99:d3:e5:bf:a1:c5:bc:54:e3:
         c3:7c:ea:d1:60:97:5d:ac:3d:a8:84:59:59:03:9d:00:05:8d:
         dc:5e:d6:1e:81:5c:f9:4c:70:b9:97:4a:f4:cd:aa:5e:27:71:
         f7:18:87:f7:aa:8b:4d:e5:c4:8e:db:ab:70:e7:40:74:cb:96:
         5d:37:49:57:86:4d:c3:cc:5c:af:c9:17:86:50:cf:f9:1b:af:
         a4:23:56:ee:97:55:5e:c0:25:59:a2:42:68:a4:13:53:5a:cd:
         9d:7e:85:fd:ea:5f:e2:6b:bc:7b:00:66:40:a2:b0:78:5c:bc:
         a7:4f:46:e5:fb:e4:29:59:02:69:d8:9e:ac:a9:f1:21:66:4b:
         68:bc:58:8f:ea:eb:25:fc:21:ec:f6:3e:26:e4:cc:81:6f:e7:
         d9:37:26:a8:b1:71:af:12:9d:04:b1:5a:d8:fb:45:c3:c0:7c:
         6e:cd:39:31:e6:13:d5:9a:c0:77:4c:00:1e:49:a2:d6:50:cf:
         9f:2c:4b:01:91:c2:dd:db:28:07:1d:96:9a:8e:4d:53:08:6f:
         28:45:f4:40:64:dc:17:6c:0d:90:e0:3f:91:b2:32:41:57:52:
         ad:70:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:18:36 2025 by rpki-client