This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer File: iDcigo7Pno3d_SRvPGeOnwUV-dI.cer (raw, json) Hash identifier: 7S/eN39xVgV20ezAHUQgXu2Wd6+jS5i+VNB447FqL+s= Subject key identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E17 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 14 Nov 2025 04:32:43 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.208.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28183 (0x6e17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 14 04:32:43 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F4130, serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:b2:cf:f8:82:7b:13:51:f6:ed:72:b7:22: 58:28:58:07:fd:09:15:d9:89:51:3f:7a:f8:2e:31: 89:75:de:79:cb:82:df:31:f3:06:99:5f:62:4b:0a: da:29:3b:10:ff:95:04:e5:d5:81:be:35:a1:d8:f8: 7a:73:33:94:d6:9a:1f:5c:bb:fc:b9:85:80:65:52: bc:30:dd:64:45:9f:85:58:72:b0:b5:f5:66:ff:6e: f0:cd:1a:72:60:ee:cd:54:8e:b4:e3:5a:1c:e7:65: 63:3f:a8:c5:fd:b3:85:4c:47:eb:26:64:0a:0c:92: 52:45:bc:f0:d8:28:84:d7:dd:13:5e:3e:63:74:85: 33:ab:a7:21:be:e1:d9:4f:07:00:4c:3e:f0:e0:67: 31:38:96:a1:83:bd:3f:38:10:20:81:bc:d0:9e:45: 13:95:77:0c:a2:d0:c4:76:08:8b:86:6f:dc:63:65: 1f:f1:85:f5:29:6e:29:9a:74:30:02:20:94:10:da: 8a:fe:6c:f3:d9:46:56:bf:14:32:fc:44:6c:d4:1c: 3a:41:e3:44:0a:08:c0:6b:6c:90:58:37:2c:c7:ee: a8:7a:67:cf:9a:f5:da:30:8e:b2:9e:f4:cf:55:31: 03:fd:e8:a8:63:a0:be:83:5b:6a:17:7a:e3:48:4c: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.208.0/24 Signature Algorithm: sha256WithRSAEncryption 20:e0:05:c6:9a:1b:68:44:c3:b5:fa:71:14:70:21:8b:85:73: 2f:03:39:dc:fd:35:71:13:c1:b2:0b:a2:e2:df:70:57:0d:e8: a5:67:1e:9b:1c:d6:68:b5:fb:39:52:76:66:77:92:fb:94:1a: d9:25:45:89:2e:ce:c3:e0:0a:77:fa:71:df:1f:c7:2d:60:4d: f7:99:9a:67:9d:6e:7e:77:a9:f3:e4:67:af:0e:8e:de:6e:f1: 8f:ff:d5:65:8e:8e:8f:fa:a2:49:de:47:d0:bc:61:f8:ee:01: 3f:40:17:86:6f:1e:06:b0:5a:8d:8a:7b:bf:37:9d:52:87:36: c2:66:3a:06:3a:5a:a3:64:57:12:2c:be:36:26:23:97:2a:4e: 56:5b:3b:85:0d:eb:c2:56:bb:89:de:45:30:5a:bc:ff:7e:45: d6:cf:51:ba:83:7f:a7:f5:20:1e:9b:2a:32:30:94:ad:64:08: a9:3f:a3:a4:4a:a0:42:66:d2:99:a2:a9:64:11:ce:83:76:71: d6:90:14:66:89:e8:ac:bc:83:a6:08:7b:24:84:b6:67:7c:80: a5:69:29:ab:11:28:b2:4d:9c:82:6b:0f:04:d6:30:d4:5f:47: 90:9e:a7:42:cb:79:78:93:57:55:d3:8c:d0:c7:b9:4b:b9:e5: 28:e3:53:6f -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE0MDQzMjQzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGNDEzMDExMC8GA1UEBRMoODgzNzIyODI4RUNGOUU4RERERkQyNDZG M0M2NzhFOUYwNTE1RjlEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMBQss/4gnsTUfbtcrciWChYB/0JFdmJUT96+C4xiXXeecuC3zHzBplfYksK2ik7 EP+VBOXVgb41odj4enMzlNaaH1y7/LmFgGVSvDDdZEWfhVhysLX1Zv9u8M0acmDu zVSOtONaHOdlYz+oxf2zhUxH6yZkCgySUkW88NgohNfdE14+Y3SFM6unIb7h2U8H AEw+8OBnMTiWoYO9PzgQIIG80J5FE5V3DKLQxHYIi4Zv3GNlH/GF9SluKZp0MAIg lBDaiv5s89lGVr8UMvxEbNQcOkHjRAoIwGtskFg3LMfuqHpnz5r12jCOsp70z1Ux A/3oqGOgvoNbahd640hM8vECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSINyKCjs+e jd39JG88Z46fBRX50jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQxMzAvRjQwRUU4NEVDMTEyMTFGMEJCNUExNDIwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY0MTMwL0Y0MEVFODRFQzExMjExRjBCQjVBMTQyMEM0RjlBRTAyL2lEY2lnbzdQ bm8zZF9TUnZQR2VPbndVVi1kSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr80DANBgkqhkiG9w0BAQsFAAOCAQEAIOAFxpobaETDtfpxFHAh i4VzLwM53P01cRPBsgui4t9wVw3opWcemxzWaLX7OVJ2ZneS+5Qa2SVFiS7Ow+AK d/px3x/HLWBN95maZ51ufnep8+Rnrw6O3m7xj//VZY6Oj/qiSd5H0Lxh+O4BP0AX hm8eBrBajYp7vzedUoc2wmY6Bjpao2RXEiy+NiYjlypOVls7hQ3rwla7id5FMFq8 /35F1s9RuoN/p/UgHpsqMjCUrWQIqT+jpEqgQmbSmaKpZBHOg3Zx1pAUZonorLyD pgh7JIS2Z3yApWkpqxEosk2cgmsPBNYw1F9HkJ6nQst5eJNXVdOM0Me5S7nlKONT bw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:33 2025 by rpki-client