This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer File: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer (raw, json) Hash identifier: aGgDcw3bUwP0sjw90AGgaM5e5YmfXRgffU76Y/KSySw= Subject key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F070D1894DC01128C61ADAAE49B39EBB88A00D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft caRepository: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 30 Aug 2025 22:18:55 +0000 Certificate not after: Sat 29 Aug 2026 22:23:55 +0000 Subordinate resources: IP: 103.247.20.0/22 IP: 2402:e100::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:07:0d:18:94:dc:01:12:8c:61:ad:aa:e4:9b:39:eb:b8:8a:00:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 30 22:18:55 2025 GMT Not After : Aug 29 22:23:55 2026 GMT Subject: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:b6:97:be:c7:31:d1:82:80:73:cc:75:bc: cb:c9:f4:98:19:f5:1c:d6:8e:8b:af:f0:e6:09:39: d8:9a:51:2d:ca:db:65:b6:2a:12:a9:77:9a:95:5a: 95:45:2e:14:62:65:7f:20:c1:f8:7d:4e:02:88:73: fa:b3:7b:91:81:10:47:be:cb:e2:b2:28:3c:b1:4f: 28:5d:bb:e1:0f:df:6e:7e:c8:a6:40:a3:21:58:46: b0:2c:4e:76:6d:94:3d:94:0d:8b:86:c6:9d:c4:f9: ed:9d:66:bf:d1:4d:8b:4d:2a:21:49:8c:f5:3a:5d: f9:a3:fa:0d:30:0b:c6:a3:66:0f:57:c5:b3:2f:e6: dd:69:75:c1:e6:4f:a3:2a:55:88:aa:86:57:e4:75: c7:18:b6:12:1a:a1:f3:a9:02:36:68:35:62:45:1f: 2f:d3:0a:ca:a0:e1:87:24:e3:6e:c9:c2:d6:4c:e6: 5e:40:96:b5:f6:1e:af:ee:76:f4:d0:8f:97:11:da: 20:dc:1e:d9:74:39:34:6a:61:be:19:f4:90:3f:c2: f3:98:43:08:67:87:47:b6:96:5f:c8:6d:ff:0d:e9: 89:01:f6:30:cb:78:34:cb:d3:47:53:c2:69:0f:de: 82:ac:0e:ed:cc:28:b1:d8:3e:86:b0:3b:25:52:5d: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.20.0/22 IPv6: 2402:e100::/32 Signature Algorithm: sha256WithRSAEncryption 0b:91:2e:93:b9:8c:88:86:7a:ae:30:07:ae:f6:de:76:7e:ab: c2:d9:11:7f:cc:3f:09:17:31:cd:0f:d9:4a:b0:e0:6d:48:70: c1:4a:4a:1a:88:37:58:79:23:39:45:41:3b:75:30:12:37:0a: 72:be:d3:be:39:7b:f9:bd:e3:8f:96:98:ec:4b:11:5f:e9:43: 4b:6b:1d:8e:85:be:7b:23:f4:db:81:17:0b:6f:53:fd:a5:df: 94:b4:da:c8:f9:f8:00:d1:cf:71:a6:53:e3:2b:28:8c:eb:d4: 67:4e:00:d9:c6:92:7e:0a:03:24:8a:e8:d4:72:a0:ce:36:9e: 16:32:f5:de:9f:25:8c:22:7d:78:43:a3:d3:5a:54:c4:29:a6: 41:fa:5e:59:fb:df:eb:74:9c:32:43:58:c1:49:3d:27:16:69: 96:da:43:84:df:b0:35:01:da:c8:2d:a3:be:08:2c:50:e8:c5: 6c:bb:40:c6:68:59:57:69:e3:7e:10:3f:78:b7:cf:08:dd:d6: 78:a3:79:9b:b5:eb:cf:b8:b7:6f:3f:c3:93:be:88:14:26:c5: 7a:97:bc:b9:85:87:7c:87:cb:66:60:89:2b:08:be:1d:1a:35: 5e:26:21:87:6d:78:57:ec:d0:82:f5:63:27:f3:4e:1f:eb:78: 6f:23:f6:18 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUfwcNGJTcARKMYa2q5Js567iKANgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgzMDIyMTg1NVoX DTI2MDgyOTIyMjM1NVowMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0 MTkwQzcwNzU2REJFQjNCRkYzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMb5tpe+xzHRgoBzzHW8y8n0mBn1HNaOi6/w5gk52JpRLcrbZbYqEql3mpVa lUUuFGJlfyDB+H1OAohz+rN7kYEQR77L4rIoPLFPKF274Q/fbn7IpkCjIVhGsCxO dm2UPZQNi4bGncT57Z1mv9FNi00qIUmM9Tpd+aP6DTALxqNmD1fFsy/m3Wl1weZP oypViKqGV+R1xxi2Ehqh86kCNmg1YkUfL9MKyqDhhyTjbsnC1kzmXkCWtfYer+52 9NCPlxHaINwe2XQ5NGphvhn0kD/C85hDCGeHR7aWX8ht/w3piQH2MMt4NMvTR1PC aQ/egqwO7cwosdg+hrA7JVJdIG0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPpbyphO66/9zthBkMcHVtvrO/85MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlZTQ3YmJm LWJhODQtNDQ4Zi05NjJiLTJhYWY1YzdkZDY4ZC8wL0ZBNUJDQTk4NEVFQkFGRkRD RUQ4NDE5MEM3MDc1NkRCRUIzQkZGMzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn9xQwDQQCAAIwBwMFACQC4QAwDQYJKoZIhvcNAQELBQADggEBAAuRLpO5jIiG eq4wB6723nZ+q8LZEX/MPwkXMc0P2Uqw4G1IcMFKShqIN1h5IzlFQTt1MBI3CnK+ 0745e/m944+WmOxLEV/pQ0trHY6Fvnsj9NuBFwtvU/2l35S02sj5+ADRz3GmU+Mr KIzr1GdOANnGkn4KAySK6NRyoM42nhYy9d6fJYwifXhDo9NaVMQppkH6Xln73+t0 nDJDWMFJPScWaZbaQ4TfsDUB2sgto74ILFDoxWy7QMZoWVdp434QP3i3zwjd1nij eZu168+4t28/w5O+iBQmxXqXvLmFh3yHy2ZgiSsIvh0aNV4mIYdteFfs0IL1Yyfz Th/reG8j9hg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:15:54 2025 by rpki-client