This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer File: ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer (raw, json) Hash identifier: Ssxu5SK0lo6hBDg2k66U6ILlthK4Jy2mWu48u7DqABY= Subject key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DCB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 10:23:21 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 138.252.167.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28107 (0x6dcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 10 10:23:21 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:8b:08:3e:e7:f4:66:98:45:42:b5:ca:cc: 6a:95:5f:01:26:b6:a0:ae:3a:0b:02:7e:9a:b1:b3: 95:05:81:b2:6a:cd:65:3a:3a:6c:7a:bf:fb:e7:cc: 2d:96:da:54:33:b0:e2:6a:02:67:ac:d7:6b:41:8a: e5:5f:a3:d9:28:52:ee:4d:ff:4d:9f:39:0a:78:da: fb:8d:9a:a3:6e:d8:e0:c6:63:c5:1c:7f:53:32:af: 1d:4d:e8:b2:98:3f:1a:f4:d9:46:58:9d:f2:89:cb: d8:b6:12:79:30:3a:a0:12:21:fe:c4:12:10:e3:36: c6:81:ac:ce:72:d0:c5:09:29:35:7e:16:97:51:7c: 10:68:91:8b:a7:60:8f:de:a6:64:af:dd:35:80:e0: b8:73:92:8d:39:f9:6d:84:82:ba:d9:ba:d5:4d:24: 6c:9e:04:d9:b0:9f:b7:a2:c0:9c:94:ee:dc:f7:c4: 58:f2:9c:40:9c:56:0f:0d:02:23:41:f1:e5:28:b2: 30:4b:7a:90:70:63:83:c2:0c:5f:a3:14:34:c7:9f: 92:80:e3:1d:47:52:d0:e6:17:7f:c9:74:28:03:93: 33:e6:64:64:dc:f6:cc:c5:20:7f:60:99:38:d0:e2: ca:3d:9d:07:20:1f:28:8a:67:46:d2:87:98:72:a4: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.167.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:a2:ab:1e:e8:10:b5:75:62:4a:25:ea:64:4b:ac:14:e0:77: c6:b6:75:fe:0d:0a:50:6e:f8:2a:39:e5:fe:6c:3c:cb:2a:f9: a3:89:96:a2:2a:24:6a:4c:12:c6:31:10:ce:df:85:f7:80:13: b1:e7:c0:14:c3:05:25:24:dd:e1:d9:14:74:5d:8d:ef:cb:b8: 3f:db:15:9a:8a:53:73:da:fc:77:98:60:cd:c3:24:a4:11:e2: 29:39:27:7a:cf:9c:cb:8f:66:69:e4:67:1b:08:25:00:78:82: 59:13:b6:1a:2a:2d:70:c1:3a:63:4a:8d:88:ca:a2:9d:dd:e7: a3:14:24:1a:bd:31:0c:59:9a:13:c7:b2:b0:8a:61:19:a7:34: 5c:57:74:5d:4a:70:c7:93:3a:3d:38:86:c0:b9:20:11:e9:f9: cb:f7:34:52:24:50:c0:96:84:5a:83:17:f1:f4:7b:92:1d:4f: 88:13:d8:b3:44:c9:bd:fd:c7:06:df:99:4a:d2:58:19:b2:68: 83:1e:a8:9f:82:78:f8:b5:af:02:df:29:25:69:8e:48:35:74: ef:81:6f:ce:6c:3a:08:19:fa:66:f5:69:b6:5f:99:92:0d:f3: 57:73:44:36:94:04:f6:1f:8e:6a:45:82:58:17:8d:bf:3d:7e: 9c:d1:2c:ae -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTEwMTAyMzIxWhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2NzY3MTExMC8GA1UEBRMoOEE1NzcxN0U2MkUxMTVCQUQwQUYxNjc5 NDIyMzVCMDFCOUIxRjM1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMFbiwg+5/RmmEVCtcrMapVfASa2oK46CwJ+mrGzlQWBsmrNZTo6bHq/++fMLZba VDOw4moCZ6zXa0GK5V+j2ShS7k3/TZ85Cnja+42ao27Y4MZjxRx/UzKvHU3ospg/ GvTZRlid8onL2LYSeTA6oBIh/sQSEOM2xoGsznLQxQkpNX4Wl1F8EGiRi6dgj96m ZK/dNYDguHOSjTn5bYSCutm61U0kbJ4E2bCft6LAnJTu3PfEWPKcQJxWDw0CI0Hx 5SiyMEt6kHBjg8IMX6MUNMefkoDjHUdS0OYXf8l0KAOTM+ZkZNz2zMUgf2CZONDi yj2dByAfKIpnRtKHmHKk9wECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSKV3F+YuEV utCvFnlCI1sBubHzVDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njc2NzEvNDYwQjA4MDRCRTFGMTFGMDk1NDM1RDZFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY3NjcxLzQ2MEIwODA0QkUxRjExRjA5NTQzNUQ2RUM0RjlBRTAyL2lsZHhmbUxo RmJyUXJ4WjVRaU5iQWJteDgxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8pzANBgkqhkiG9w0BAQsFAAOCAQEAb6KrHugQtXViSiXqZEus FOB3xrZ1/g0KUG74Kjnl/mw8yyr5o4mWoiokakwSxjEQzt+F94ATsefAFMMFJSTd 4dkUdF2N78u4P9sVmopTc9r8d5hgzcMkpBHiKTknes+cy49maeRnGwglAHiCWRO2 GiotcME6Y0qNiMqind3noxQkGr0xDFmaE8eysIphGac0XFd0XUpwx5M6PTiGwLkg Een5y/c0UiRQwJaEWoMX8fR7kh1PiBPYs0TJvf3HBt+ZStJYGbJogx6on4J4+LWv At8pJWmOSDV074Fvzmw6CBn6ZvVptl+Zkg3zV3NENpQE9h+OakWCWBeNvz1+nNEs rg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:34 2025 by rpki-client