This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer (raw, json) Hash identifier: aFJ5BnhyFo29ECVFuoYBuzGfBlAxF4hHCT+xdACgez8= Subject key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B4591035A035B6BE03051EC2098A7FC4C9673CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft caRepository: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 06 Nov 2025 13:30:33 +0000 Certificate not after: Thu 05 Nov 2026 13:35:33 +0000 Subordinate resources: IP: 103.121.244.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:45:91:03:5a:03:5b:6b:e0:30:51:ec:20:98:a7:fc:4c:96:73:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 6 13:30:33 2025 GMT Not After : Nov 5 13:35:33 2026 GMT Subject: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:d0:24:3d:f1:e5:e7:69:5e:50:cc:81:c8: 34:87:79:4f:00:7a:b2:52:4f:78:c1:fd:84:8e:09: 65:d6:5e:a6:a6:f3:e1:cf:c5:e6:4f:b1:b8:c4:1e: f2:29:e6:30:3a:5d:a6:7b:e8:59:15:1b:0e:9c:a8: 6b:73:4d:f9:68:07:7d:75:5b:6c:d2:85:fa:16:19: e5:9b:4a:af:db:e0:ac:96:1d:28:d2:c0:c1:6d:bc: 5b:f9:3b:b8:9b:ed:8b:50:89:05:a0:0d:88:8e:c5: 6a:ec:62:cb:c1:69:4f:37:24:39:54:78:62:22:44: 8e:9a:7c:3c:12:41:6c:cb:25:12:b1:d8:c5:4b:11: 69:9f:7b:2f:8b:6a:ff:af:74:05:86:a4:6c:ac:ea: e9:3a:c6:48:2e:66:22:d0:3f:03:c9:9f:ff:6a:69: 61:8c:d5:81:83:f1:40:1b:56:c5:dd:dd:4d:5d:55: 55:54:cd:ef:0d:c7:8b:c7:ee:f7:a1:f8:b2:39:c9: aa:74:6b:21:67:11:aa:f0:42:ce:ed:af:13:b3:ab: 68:3f:f5:ab:5e:e8:ec:91:42:27:7e:8e:75:91:16: 30:f8:47:45:c5:bf:c4:9a:6a:ad:1f:f3:84:4f:c8: cb:35:09:da:bc:46:2e:ca:e1:f3:ef:40:cf:fc:78: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.244.0/22 Signature Algorithm: sha256WithRSAEncryption 94:e4:fa:e8:67:8a:9f:89:1a:b7:60:e6:25:fc:ff:af:cc:da: 9a:50:93:28:e2:03:d2:53:44:dc:8b:a4:5e:d2:7e:16:13:9b: c4:0a:4b:fc:c5:d9:36:45:c8:bd:be:6b:39:c9:f9:eb:e5:14: cb:73:ca:39:9a:4c:62:69:c8:6c:75:c3:be:f7:a6:73:72:10: 15:4d:74:e8:29:b2:ce:84:ac:1f:21:ac:26:8e:9e:ef:d2:00: 6f:cb:fd:16:8a:08:d9:1e:50:e2:e6:b7:cc:99:92:58:63:fc: ee:c7:54:4d:b1:a4:20:ef:45:86:51:d8:dd:10:db:45:77:59: 1c:07:a6:96:44:ae:f7:65:f2:bc:ed:da:1d:2d:07:c6:b4:42: 2c:2b:d6:f2:8a:9c:de:f1:78:0a:a9:ba:13:83:be:2d:e0:a9: 6e:b9:a8:e4:6b:aa:3b:e6:80:49:05:15:e0:fc:1d:7a:88:dc: 03:9d:1d:8a:d2:75:0e:5c:e9:e5:69:01:24:f5:42:46:e4:ae: 17:e0:3f:1a:e2:8c:a8:ad:0f:15:eb:da:ae:0c:c9:59:16:41: a8:be:7b:5f:9a:10:b3:1e:35:57:68:3d:1f:f7:9c:ac:e7:79: d0:01:ff:5b:26:0c:ef:d6:f4:6f:5b:cb:c0:48:26:8f:4c:58: 44:8f:d3:ec -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUO0WRA1oDW2vgMFHsIJin/EyWc80wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwNjEzMzAzM1oX DTI2MTEwNTEzMzUzM1owMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAw QzQ1REFEQ0RGOTYwQzEyMENGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdn0CQ98eXnaV5QzIHINId5TwB6slJPeMH9hI4JZdZepqbz4c/F5k+xuMQe 8inmMDpdpnvoWRUbDpyoa3NN+WgHfXVbbNKF+hYZ5ZtKr9vgrJYdKNLAwW28W/k7 uJvti1CJBaANiI7Fauxiy8FpTzckOVR4YiJEjpp8PBJBbMslErHYxUsRaZ97L4tq /690BYakbKzq6TrGSC5mItA/A8mf/2ppYYzVgYPxQBtWxd3dTV1VVVTN7w3Hi8fu 96H4sjnJqnRrIWcRqvBCzu2vE7OraD/1q17o7JFCJ36OdZEWMPhHRcW/xJpqrR/z hE/IyzUJ2rxGLsrh8+9Az/x4OlsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPylX+aL8UeuIPAMRdrc35YMEgz4MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5NWVlOGZj LTZlZmUtNDE1ZC1iNmMxLTBmMGNjY2YyNjE0NC8wL0ZDQTU1RkU2OEJGMTQ3QUUy MEYwMEM0NURBRENERjk2MEMxMjBDRjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnefQwDQYJKoZIhvcNAQELBQADggEBAJTk+uhnip+JGrdg5iX8/6/M2ppQkyji A9JTRNyLpF7SfhYTm8QKS/zF2TZFyL2+aznJ+evlFMtzyjmaTGJpyGx1w773pnNy EBVNdOgpss6ErB8hrCaOnu/SAG/L/RaKCNkeUOLmt8yZklhj/O7HVE2xpCDvRYZR 2N0Q20V3WRwHppZErvdl8rzt2h0tB8a0Qiwr1vKKnN7xeAqpuhODvi3gqW65qORr qjvmgEkFFeD8HXqI3AOdHYrSdQ5c6eVpAST1QkbkrhfgPxrijKitDxXr2q4MyVkW Qai+e1+aELMeNVdoPR/3nKznedAB/1smDO/W9G9by8BIJo9MWESP0+w= -----END CERTIFICATE-----Generated at Wed Dec 3 12:41:39 2025 by rpki-client