$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer File: 01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer (raw, json) Hash identifier: nPYRaU/GtvNI/hWURPvaKLM4N+n8yeFUPAV4BAUytqE= Subject key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88 Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0 Certificate issuer: /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9 Certificate serial: 12FB39D44F6B7E61D1D1C127DDF4B1B4B6D81BA8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 18 Mar 2025 16:38:39 +0000 Certificate not after: Tue 17 Mar 2026 16:43:39 +0000 Subordinate resources: IP: 192.67.35.0/24 Validation: OK Signature path: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 20:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fb:39:d4:4f:6b:7e:61:d1:d1:c1:27:dd:f4:b1:b4:b6:d8:1b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9 Validity Not Before: Mar 18 16:38:39 2025 GMT Not After : Mar 17 16:43:39 2026 GMT Subject: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:77:d7:b3:65:c3:6e:90:05:61:1d:1f:3f: 57:bd:2c:71:fa:3d:ed:c6:19:90:af:01:c3:9c:85: 8b:79:16:7a:6b:32:38:a8:38:04:4c:0d:df:8b:7c: 56:0d:b8:d2:b7:6d:f8:03:78:32:0d:21:cf:8a:49: 2a:6a:e6:a5:46:7e:90:6d:58:38:d0:c3:35:11:51: 52:83:e2:3a:6f:5f:c1:4d:d4:40:15:86:6d:25:ca: f5:08:68:13:06:5d:38:3e:c4:d8:c2:c3:43:fa:42: 0b:1b:a1:21:85:56:5a:2e:8a:6e:c9:92:de:75:2a: ee:5e:15:5b:c9:3e:70:c1:f3:c5:db:db:0f:04:f1: 2f:a8:8f:18:3b:bd:ef:47:67:30:f7:dc:df:d5:50: bb:3a:5b:96:52:71:63:71:e2:33:06:de:18:89:ea: a0:4a:98:94:49:22:62:00:fb:26:43:6a:a5:57:03: 84:2d:8f:02:5a:31:ff:a6:f8:92:93:c1:ba:77:50: 46:87:ee:74:a7:23:c7:7f:6a:54:ea:ba:8b:ed:9d: 3b:5f:fb:68:bf:7c:5c:bf:c2:c3:a9:47:4c:c0:75: 13:53:50:f9:5d:18:c7:a0:52:c4:c2:59:6b:dd:50: 77:c0:23:63:91:64:e8:d6:0f:08:7d:28:3f:d2:a6: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88 X509v3 Authority Key Identifier: keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.67.35.0/24 Signature Algorithm: sha256WithRSAEncryption 80:58:8d:e9:5e:10:75:f2:bc:a6:bb:60:f3:d4:db:e5:ff:d4: d4:09:a9:98:89:bc:b8:b5:15:5e:6e:81:df:60:99:7d:7f:f5: 50:80:8f:ac:3e:32:01:65:43:9c:70:46:ca:16:16:e5:2d:44: 8d:c7:81:3f:da:90:a4:d0:be:1f:49:01:31:d1:2a:96:63:25: 86:73:e3:44:80:a8:69:db:8d:cd:df:a0:e1:c7:47:ff:57:d9: ff:c7:81:c4:e3:db:75:4a:10:e9:8c:fe:d7:ea:ee:95:3a:c5: 18:d9:6f:df:04:36:c7:9c:f7:11:ae:35:a6:15:7e:84:8b:dc: 47:f7:74:58:ad:98:85:e4:d2:4f:53:9e:e3:84:2c:05:b4:e0: 7d:32:be:fb:16:71:64:cb:b4:29:7d:66:da:e5:27:10:43:99: 5c:8c:8b:2c:35:d5:5c:58:9d:02:61:63:67:20:b2:58:d5:9b: 66:80:e8:e8:41:90:63:47:c8:e9:f1:75:41:68:8b:ed:80:53: 12:e7:f6:fa:16:64:c9:5c:68:74:35:10:63:70:7b:72:e2:4c: 63:5e:e8:7a:bf:25:ff:cc:bd:5a:f8:a2:22:11:e6:07:90:a7: 24:fa:6c:c0:9a:af:6e:e6:0e:39:0c:ae:50:9d:b8:c6:25:2a: 15:b4:e8:d9 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUEvs51E9rfmHR0cEn3fSxtLbYG6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5 YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjUwMzE4MTYzODM5WhcNMjYwMzE3MTY0MzM5 WjAzMTEwLwYDVQQDEygwMUNGRjdFNzQxODk1NjNCMEVDNDVEMEU5QkI3QzU2MjhC MkU0Mzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGp317Nlw26Q BWEdHz9XvSxx+j3txhmQrwHDnIWLeRZ6azI4qDgETA3fi3xWDbjSt234A3gyDSHP ikkqaualRn6QbVg40MM1EVFSg+I6b1/BTdRAFYZtJcr1CGgTBl04PsTYwsND+kIL G6EhhVZaLopuyZLedSruXhVbyT5wwfPF29sPBPEvqI8YO73vR2cw99zf1VC7OluW UnFjceIzBt4YieqgSpiUSSJiAPsmQ2qlVwOELY8CWjH/pviSk8G6d1BGh+50pyPH f2pU6rqL7Z07X/tov3xcv8LDqUdMwHUTU1D5XRjHoFLEwllr3VB3wCNjkWTo1g8I fSg/0qb+FwIDAQABo4IDWTCCA1UwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU Ac/350GJVjsOxF0Om7fFYosuQ4gwHwYDVR0jBBgwFoAUi4PF2gOzzAKdlSFaATIF l4FLOPAwDgYDVR0PAQH/BAQDAgEGMH4GA1UdHwR3MHUwc6BxoG+GbXJzeW5jOi8v a3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5v bG9naWVzLzAvOEI4M0M1REEwM0IzQ0MwMjlEOTUyMTVBMDEzMjA1OTc4MTRCMzhG MC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNj NDc5Ny83YWZhZjFjMWI3N2VlZGExYTNhMmViYWRhNGI0ZGFjODlhY2JmMzhiM2Rm NzVkM2NlOS5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4 NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4OTk1ZC80LzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5 NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzQvMDFDRkY3RTc0MTg5 NTYzQjBFQzQ1RDBFOUJCN0M1NjI4QjJFNDM4OC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwEMjMA0GCSqGSIb3DQEBCwUAA4IBAQCAWI3pXhB18rymu2Dz1Nvl/9TU CamYiby4tRVeboHfYJl9f/VQgI+sPjIBZUOccEbKFhblLUSNx4E/2pCk0L4fSQEx 0SqWYyWGc+NEgKhp243N36Dhx0f/V9n/x4HE49t1ShDpjP7X6u6VOsUY2W/fBDbH nPcRrjWmFX6Ei9xH93RYrZiF5NJPU57jhCwFtOB9Mr77FnFky7QpfWba5ScQQ5lc jIssNdVcWJ0CYWNnILJY1ZtmgOjoQZBjR8jp8XVBaIvtgFMS5/b6FmTJXGh0NRBj cHty4kxjXuh6vyX/zL1a+KIiEeYHkKck+mzAmq9u5g45DK5QnbjGJSoVtOjZ -----END CERTIFICATE-----Generated at Mon May 12 11:01:17 2025 by rpki-client