$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer File: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer (raw, json) Hash identifier: V5L69h1cgKs7YjXi9S1WVpVOuptFH3OrxXjcY7MyCIc= Subject key identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1E542A13C3535F2361D4BD886726BF2F888B0E99 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 25 Mar 2026 19:09:25 +0000 Certificate not after: Wed 24 Mar 2027 19:14:25 +0000 Subordinate resources: IP: 2a05:dfc3:fa00::/40 IP: 2a0a:6044:6400::/40 IP: 2a0a:6044:aa10::/48 IP: 2a0f:6283:1000::/40 IP: 2a0f:6283:1300::/40 IP: 2a0f:6284:5000::/36 IP: 2a0f:6286::/32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:54:2a:13:c3:53:5f:23:61:d4:bd:88:67:26:bf:2f:88:8b:0e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 25 19:09:25 2026 GMT Not After : Mar 24 19:14:25 2027 GMT Subject: CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:05:f1:7a:28:5d:a0:ba:64:fe:ab:92:00: fe:d6:f9:be:b9:4d:85:f4:7b:5b:b2:7e:1f:5e:d3: 4d:62:a3:9d:5c:a1:56:96:0a:b1:bd:53:7f:f5:a1: 5b:e1:25:70:35:cb:3b:d3:1b:e3:0a:d6:f1:5f:56: e3:6f:70:fb:f8:4f:1f:4c:7a:c3:01:da:f0:de:e0: 90:06:c5:ff:f0:dd:e6:f7:0a:45:61:40:4e:44:4e: 0c:be:78:78:4f:b2:ec:39:d7:df:34:59:6f:04:bb: 4f:0d:d0:43:66:e7:67:15:b1:60:bc:f0:ab:3f:c2: ac:7f:9e:4f:29:10:33:1a:f6:9b:e9:e6:2f:42:3c: 73:34:bd:69:2e:18:87:f2:41:b1:99:63:b6:92:d3: 30:96:f7:bb:30:69:4c:6c:6a:d0:e3:a5:45:9c:cf: 71:3b:9b:d5:6b:cf:0c:46:46:83:44:90:66:33:b5: 27:8f:91:c9:63:fe:31:dd:47:10:08:7b:75:eb:99: c0:01:b2:94:75:f2:90:08:aa:6e:f6:f1:56:61:3f: 65:e6:29:66:3a:fa:38:1f:15:d5:7d:f0:0d:e3:71: 97:43:82:60:b5:ed:07:00:5d:b3:2d:50:2f:45:fd: f3:f7:14:c8:58:57:23:75:66:be:cb:cd:85:46:ac: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 2a0a:6044:6400::/40 2a0a:6044:aa10::/48 2a0f:6283:1000::/40 2a0f:6283:1300::/40 2a0f:6284:5000::/36 2a0f:6286::/32 Signature Algorithm: sha256WithRSAEncryption 45:c9:41:e2:26:7e:55:0f:83:69:db:de:a8:8d:25:f1:d3:1c: c1:e4:7e:ac:bb:3f:2f:7d:e0:a8:d9:aa:1a:72:50:dc:69:74: c3:a2:d2:67:ba:55:2f:ec:9b:f5:5e:b2:f0:22:f4:ae:7c:3e: 8a:3f:ce:e4:42:26:c7:8a:11:da:a3:1c:e7:6b:1c:d0:8b:f2: a6:b4:0e:40:da:04:9a:1b:78:55:a9:26:a0:59:06:7f:62:e2: bf:d9:b9:69:1a:9c:d1:2a:0b:c3:fa:fa:fa:b7:b9:50:71:a6: 4a:3e:79:5e:d3:21:82:fa:e9:1f:aa:bf:de:58:df:9f:23:d5: ee:0a:68:69:85:d4:01:d6:f0:ae:7f:04:95:b1:4f:5d:8a:0c: 2f:53:cd:ad:1a:cb:af:36:ba:5b:94:40:2a:a3:dd:20:b5:4e: 4f:29:f8:b8:83:eb:e9:98:a8:42:a6:ca:56:c4:18:6e:95:b6: b5:fd:bd:b7:aa:47:26:79:13:ee:0e:53:20:5e:25:bc:1e:78: 9d:7d:f9:a5:b6:2d:87:c9:b4:4f:76:04:48:7f:ba:b8:fd:17: cf:75:32:dc:ef:f8:16:89:c3:9c:c8:53:24:c8:3c:f3:43:fa: ec:fc:38:92:c2:ae:28:9e:93:9a:4e:23:2d:85:c7:4c:42:eb: 1b:b8:f6:56 -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgIUHlQqE8NTXyNh1L2IZya/L4iLDpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMjUxOTA5MjVaFw0yNzAzMjQxOTE0MjVaMDMxMTAvBgNV BAMTKDBENkI1MzgzNDlCNDM2QURFOEQxQ0FGQzczRTUzNDFCQkM4OEFENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHQXxeihdoLpk/quSAP7W+b65 TYX0e1uyfh9e001io51coVaWCrG9U3/1oVvhJXA1yzvTG+MK1vFfVuNvcPv4Tx9M esMB2vDe4JAGxf/w3eb3CkVhQE5ETgy+eHhPsuw51980WW8Eu08N0ENm52cVsWC8 8Ks/wqx/nk8pEDMa9pvp5i9CPHM0vWkuGIfyQbGZY7aS0zCW97swaUxsatDjpUWc z3E7m9VrzwxGRoNEkGYztSePkclj/jHdRxAIe3XrmcABspR18pAIqm728VZhP2Xm KWY6+jgfFdV98A3jcZdDgmC17QcAXbMtUC9F/fP3FMhYVyN1Zr7LzYVGrEV1AgMB AAGjggMRMIIDDTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNa1ODSbQ2rejR yvxz5TQbvIitVzAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgzYzkwLzIv MEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJCQzg4QUQ1Ny5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEH AQH/BEIwQDA+BAIAAjA4AwYAKgXfw/oDBgAqCmBEZAMHACoKYESqEAMGACoPYoMQ AwYAKg9igxMDBgQqD2KEUAMFACoPYoYwDQYJKoZIhvcNAQELBQADggEBAEXJQeIm flUPg2nb3qiNJfHTHMHkfqy7Py994KjZqhpyUNxpdMOi0me6VS/sm/VesvAi9K58 Poo/zuRCJseKEdqjHOdrHNCL8qa0DkDaBJobeFWpJqBZBn9i4r/ZuWkanNEqC8P6 +vq3uVBxpko+eV7TIYL66R+qv95Y358j1e4KaGmF1AHW8K5/BJWxT12KDC9Tza0a y682uluUQCqj3SC1Tk8p+LiD6+mYqEKmylbEGG6VtrX9vbeqRyZ5E+4OUyBeJbwe eJ19+aW2LYfJtE92BEh/urj9F891Mtzv+BaJw5zIUyTIPPND+uz8OJLCriiek5pO Iy2Fx0xC6xu49lY= -----END CERTIFICATE-----Generated at Thu Mar 26 05:33:36 2026 by rpki-client