This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer File: FB3AAFE074610C85854BE75082EC16E60A126879.cer (raw, json) Hash identifier: tS5dIYBEEirpOskv6M+slE0R0J47RGS7c7BY8TKhuA4= Subject key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E99C8E02589DC681B5AEF4FC551E0B13BA9EF5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft caRepository: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 09:40:26 +0000 Certificate not after: Thu 05 Mar 2026 09:45:26 +0000 Subordinate resources: IP: 103.150.159.0/24 IP: 2001:df3:7e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:99:c8:e0:25:89:dc:68:1b:5a:ef:4f:c5:51:e0:b1:3b:a9:ef:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 6 09:40:26 2025 GMT Not After : Mar 5 09:45:26 2026 GMT Subject: CN=FB3AAFE074610C85854BE75082EC16E60A126879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:7a:09:48:c0:21:1d:c7:30:86:b6:2b:ae: a8:17:48:22:9c:86:80:05:17:0c:55:2c:8b:fc:dc: 54:c9:dd:cf:90:44:a6:36:1a:9d:7a:d2:fe:b8:62: 43:75:d3:af:44:5d:77:e4:79:b9:6b:ee:bd:c1:96: 2e:18:65:13:6c:b4:1a:1b:83:66:29:f6:5f:40:85: 0e:4e:9b:86:be:d2:fe:7c:09:b9:a9:44:db:f1:da: b8:00:fb:4f:68:5e:d8:ad:97:da:7c:cd:af:ff:1e: bb:f9:a9:77:eb:1a:f5:4d:b0:8c:29:3c:ce:7f:61: 5a:c6:a9:a0:9d:94:55:80:f8:f7:27:e6:55:3c:f2: 4d:0e:47:45:90:ea:38:fc:f8:0f:61:0a:ae:2b:d4: fe:21:fa:d4:f5:9d:72:fe:85:e6:67:a0:9f:2d:08: 5d:2e:3e:fc:25:4c:7d:14:76:29:0e:ba:14:8f:57: 60:de:87:a0:ca:88:58:a4:46:34:d9:fa:6c:69:21: 99:41:28:e9:4a:7f:0c:df:81:ab:21:ac:93:b2:65: 31:1e:d0:f9:95:43:e8:a6:01:ce:b1:5e:ff:8e:35: 2d:18:e7:9a:52:00:47:96:ff:4e:e4:a4:8d:a7:29: 62:57:37:98:27:16:46:b0:e4:8c:f2:c0:85:c4:a6: e2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.159.0/24 IPv6: 2001:df3:7e80::/48 Signature Algorithm: sha256WithRSAEncryption 6a:1f:f5:88:cc:88:ea:07:ed:f6:d6:da:7e:ab:86:07:78:99: 23:4d:ab:f7:51:ed:4e:16:e2:09:b3:80:19:1d:33:c6:ac:12: dd:12:1c:e7:ae:bf:2f:33:d1:56:bb:54:2e:98:bb:4d:95:f1: 48:78:9c:00:41:31:67:44:61:e2:32:5a:e6:52:1e:29:0c:f6: 25:b1:3a:41:69:eb:65:2a:a7:0f:a0:ba:29:f8:c8:d8:c3:c9: c5:bf:54:b2:34:39:03:e1:63:00:12:ba:de:a9:b6:d4:84:d9: 84:9d:07:ad:42:0a:f2:55:72:40:0b:a2:90:db:f8:8b:58:02: dc:77:6a:74:85:a4:c9:fa:71:ea:88:e0:48:d0:90:08:99:bc: d1:69:37:56:4d:b1:1a:86:53:7b:ee:7f:e0:03:12:96:ea:bf: 0a:aa:41:a5:36:eb:e5:b6:4d:59:89:c6:0a:32:f6:3b:c0:15: 87:e3:f0:65:df:18:77:09:c0:c4:5a:35:fe:a7:31:db:94:8b: a0:ed:39:73:58:d4:41:e2:7f:63:52:f7:f2:2b:98:0e:b6:e8: 1d:c3:1d:1a:0f:e1:bd:0f:e3:c8:04:6c:ec:99:32:f4:bd:f3: df:52:7d:96:95:de:6e:25:c4:b9:8d:30:74:92:c4:dc:70:88: 74:cd:da:86 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUDpnI4CWJ3GgbWu9PxVHgsTup714wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNjA5NDAyNloX DTI2MDMwNTA5NDUyNlowMzExMC8GA1UEAxMoRkIzQUFGRTA3NDYxMEM4NTg1NEJF NzUwODJFQzE2RTYwQTEyNjg3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTpeglIwCEdxzCGtiuuqBdIIpyGgAUXDFUsi/zcVMndz5BEpjYanXrS/rhi Q3XTr0Rdd+R5uWvuvcGWLhhlE2y0GhuDZin2X0CFDk6bhr7S/nwJualE2/HauAD7 T2he2K2X2nzNr/8eu/mpd+sa9U2wjCk8zn9hWsapoJ2UVYD49yfmVTzyTQ5HRZDq OPz4D2EKrivU/iH61PWdcv6F5megny0IXS4+/CVMfRR2KQ66FI9XYN6HoMqIWKRG NNn6bGkhmUEo6Up/DN+BqyGsk7JlMR7Q+ZVD6KYBzrFe/441LRjnmlIAR5b/TuSk jacpYlc3mCcWRrDkjPLAhcSm4oUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPs6r+B0YQyFhUvnUILsFuYKEmh5MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MTY1ZTQ4MS01YTc5LTQ4NjgtYTRlNC1mYWNmZDkyMmQ4MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNjVlNDgx LTVhNzktNDg2OC1hNGU0LWZhY2ZkOTIyZDgxMy8wL0ZCM0FBRkUwNzQ2MTBDODU4 NTRCRTc1MDgyRUMxNkU2MEExMjY4NzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnlp8wDwQCAAIwCQMHACABDfN+gDANBgkqhkiG9w0BAQsFAAOCAQEAah/1iMyI 6gft9tbafquGB3iZI02r91HtThbiCbOAGR0zxqwS3RIc566/LzPRVrtULpi7TZXx SHicAEExZ0Rh4jJa5lIeKQz2JbE6QWnrZSqnD6C6KfjI2MPJxb9UsjQ5A+FjABK6 3qm21ITZhJ0HrUIK8lVyQAuikNv4i1gC3HdqdIWkyfpx6ojgSNCQCJm80Wk3Vk2x GoZTe+5/4AMSluq/CqpBpTbr5bZNWYnGCjL2O8AVh+PwZd8YdwnAxFo1/qcx25SL oO05c1jUQeJ/Y1L38iuYDrboHcMdGg/hvQ/jyARs7Jky9L3z31J9lpXebiXEuY0w dJLE3HCIdM3ahg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:03 2025 by rpki-client