This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer File: FFD09495181408CBE83FD333EACEF29FBCDAD633.cer (raw, json) Hash identifier: j3RNrerXQNstReC0FNUwxmqUNndlCQgyJ0i5kc5vtOE= Subject key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6C6C40F6EA27D290A6DD20008309D7F6E9918B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft caRepository: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 28 Nov 2025 07:38:29 +0000 Certificate not after: Fri 27 Nov 2026 07:43:29 +0000 Subordinate resources: IP: 45.126.132.0/22 IP: 103.24.12.0/23 IP: 103.253.68.0/23 IP: 116.204.128.0/22 IP: 116.204.248.0/22 IP: 2001:df2:c000::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6c:40:f6:ea:27:d2:90:a6:dd:20:00:83:09:d7:f6:e9:91:8b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 28 07:38:29 2025 GMT Not After : Nov 27 07:43:29 2026 GMT Subject: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:31:06:1e:03:53:37:24:c4:be:d9:6a:19: 1b:66:45:85:24:bc:db:f0:d6:91:7c:5b:2b:e9:8d: e1:25:26:47:8f:e6:2e:2e:07:91:8f:c1:c5:1f:ee: 1c:01:5d:06:94:b9:8b:c9:05:8c:d4:be:fb:e6:41: 72:c5:93:fa:33:b9:38:05:64:0a:ee:0f:cb:f5:b5: 92:2b:58:fd:94:2d:80:e8:00:d3:ac:88:07:bc:c2: 98:81:4e:d4:90:4b:fa:c9:f4:5b:07:41:5c:53:c9: 91:8d:ba:41:e3:bf:1c:fa:b0:d8:27:37:8e:ed:7f: 57:f0:27:c3:48:48:7e:a6:10:eb:a2:1c:e6:1c:ea: ba:5c:18:01:c9:05:cb:23:1a:4a:13:81:c4:64:bd: e6:16:5e:a0:44:fb:30:a2:40:79:71:c7:50:71:9e: 38:d7:29:28:6d:57:b6:a7:de:53:d5:4f:dc:f4:8d: a3:d1:44:24:00:c9:55:53:c4:e9:c7:49:72:9c:7e: 95:6f:67:2f:6b:c0:9e:cd:97:bd:53:ed:b6:29:20: c6:c2:e5:5e:5b:28:b8:ca:01:99:3a:09:8a:8b:97: e5:df:fc:d5:3d:ed:50:a1:dc:c3:da:54:e4:8b:d7: b0:55:b3:d8:6b:8d:45:28:4d:03:c0:96:f4:fa:2a: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.132.0/22 103.24.12.0/23 103.253.68.0/23 116.204.128.0/22 116.204.248.0/22 IPv6: 2001:df2:c000::/48 Signature Algorithm: sha256WithRSAEncryption 73:b6:60:b2:ce:03:92:1b:17:90:3c:b1:9f:51:ef:8d:f9:a6: 8a:77:0b:3a:82:9b:5f:59:02:cf:22:85:b0:6d:f8:b0:ea:1c: f4:e6:ee:6b:47:6f:26:28:34:38:9c:aa:2f:3c:88:a7:7a:7a: 0d:82:47:08:cc:9e:a7:1e:fa:f9:91:b4:f0:49:49:66:3c:96: 23:90:01:a0:34:34:7c:a2:a8:23:ca:77:ef:1b:55:c5:df:25: 4d:78:17:23:c8:f1:48:38:a6:86:2e:37:51:05:d3:af:8e:5b: 89:4e:ec:f1:6d:ba:db:e0:b8:26:6e:c1:f4:3b:88:65:a6:2c: 78:3f:62:6d:0f:6d:3d:71:d8:be:74:14:88:ab:fd:3e:b4:76: f1:89:ab:12:02:fc:bb:86:4f:c7:15:f9:79:92:e4:c1:16:11: ac:37:63:54:65:6a:10:d4:73:99:3f:9a:19:66:ab:ab:05:4d: 8f:d2:81:41:80:51:e1:b0:ea:22:ad:f3:8c:6a:70:07:2b:8d: 16:95:06:a7:1c:d0:11:e8:8d:bf:b2:57:64:f6:70:69:0a:de: c5:1b:bb:00:65:d8:60:38:2b:e9:ff:cd:ff:a1:74:29:0d:c1: 79:e1:5e:1e:90:60:59:fd:0d:79:ef:32:5e:34:37:b1:88:a5: 1b:4f:51:5b -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUbGxA9uon0pCm3SAAgwnX9umRiz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEyODA3MzgyOVoX DTI2MTEyNzA3NDMyOVowMzExMC8GA1UEAxMoRkZEMDk0OTUxODE0MDhDQkU4M0ZE MzMzRUFDRUYyOUZCQ0RBRDYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6TMQYeA1M3JMS+2WoZG2ZFhSS82/DWkXxbK+mN4SUmR4/mLi4HkY/BxR/u HAFdBpS5i8kFjNS+++ZBcsWT+jO5OAVkCu4Py/W1kitY/ZQtgOgA06yIB7zCmIFO 1JBL+sn0WwdBXFPJkY26QeO/HPqw2Cc3ju1/V/Anw0hIfqYQ66Ic5hzqulwYAckF yyMaShOBxGS95hZeoET7MKJAeXHHUHGeONcpKG1XtqfeU9VP3PSNo9FEJADJVVPE 6cdJcpx+lW9nL2vAns2XvVPttikgxsLlXlsouMoBmToJiouX5d/81T3tUKHcw9pU 5IvXsFWz2GuNRShNA8CW9PoqCeMCAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP/QlJUYFAjL6D/TM+rO8p+82tYzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMTM5YWMxZi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMzlhYzFm LTM4ZTItNDVhYS05N2RjLTk5Mjc5NjQxMWNjMS8wL0ZGRDA5NDk1MTgxNDA4Q0JF ODNGRDMzM0VBQ0VGMjlGQkNEQUQ2MzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUHAQcBAf8EOTA3MCQEAgABMB4D BAItfoQDBAFnGAwDBAFn/UQDBAJ0zIADBAJ0zPgwDwQCAAIwCQMHACABDfLAADAN BgkqhkiG9w0BAQsFAAOCAQEAc7Zgss4DkhsXkDyxn1HvjfmmincLOoKbX1kCzyKF sG34sOoc9Obua0dvJig0OJyqLzyIp3p6DYJHCMyepx76+ZG08ElJZjyWI5ABoDQ0 fKKoI8p37xtVxd8lTXgXI8jxSDimhi43UQXTr45biU7s8W262+C4Jm7B9DuIZaYs eD9ibQ9tPXHYvnQUiKv9PrR28YmrEgL8u4ZPxxX5eZLkwRYRrDdjVGVqENRzmT+a GWarqwVNj9KBQYBR4bDqIq3zjGpwByuNFpUGpxzQEeiNv7JXZPZwaQrexRu7AGXY YDgr6f/N/6F0KQ3BeeFeHpBgWf0Nee8yXjQ3sYilG09RWw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:36 2025 by rpki-client