$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/5/A0E52AE2A6674D4C7481A57558337E89666096A5.cer File: A0E52AE2A6674D4C7481A57558337E89666096A5.cer (raw, json) Hash identifier: ck+kfPAcX1a5Af+7rHHzSgTyAgU40N5A6ByylViQcGU= Subject key identifier: A0:E5:2A:E2:A6:67:4D:4C:74:81:A5:75:58:33:7E:89:66:60:96:A5 Authority key identifier: 42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93 Certificate issuer: /CN=421B765C540F139258E8C8E64499AC6317AE6F93 Certificate serial: 40A27194676254F97687A5DC9E1E664FE513CA0D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer Manifest: rsync://krill.ipgua.com/repo/pongery/4/A0E52AE2A6674D4C7481A57558337E89666096A5.mft caRepository: rsync://krill.ipgua.com/repo/pongery/4/ Notify URL: https://krill.ipgua.com:3030/rrdp/notification.xml Certificate not before: Sat 07 Mar 2026 08:25:50 +0000 Certificate not after: Sat 06 Mar 2027 08:30:50 +0000 Subordinate resources: IP: 2a0a:6045:c000::/34 Validation: OK Signature path: rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a2:71:94:67:62:54:f9:76:87:a5:dc:9e:1e:66:4f:e5:13:ca:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421B765C540F139258E8C8E64499AC6317AE6F93 Validity Not Before: Mar 7 08:25:50 2026 GMT Not After : Mar 6 08:30:50 2027 GMT Subject: CN=A0E52AE2A6674D4C7481A57558337E89666096A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:c8:4a:e8:22:dc:33:78:e6:26:ec:07:ef: 62:68:83:72:9c:95:d3:37:f2:08:eb:64:90:a9:1f: dc:1e:c3:1d:6c:e7:1b:1a:87:fd:44:75:58:5e:1d: 8e:3d:7b:4e:d8:e6:66:19:ce:2e:f2:bd:c8:f1:90: c8:6b:d9:3c:d1:bb:e1:68:b0:d2:db:90:ef:2a:b5: fe:6b:ed:d5:78:ae:10:05:9a:94:4f:93:e4:6f:cd: 5c:a8:94:bd:56:e2:78:8c:9f:e2:49:2f:dd:1d:df: 43:ed:07:7e:5e:58:69:47:bc:79:4b:da:57:49:7f: da:be:50:d2:cc:72:0f:34:0b:7d:c3:19:4d:b1:ec: 36:bb:a1:9f:1a:dd:e0:a8:57:ff:d4:e5:3f:c0:47: ac:18:6e:43:44:49:90:3e:e8:4a:a7:7d:6b:4c:96: aa:1d:2e:68:c8:66:85:df:29:dd:c8:22:28:4d:c9: 52:8f:60:39:ee:05:14:08:7f:c8:ce:45:81:18:bf: 52:c5:bb:49:8b:c7:39:d1:5b:cc:06:7a:56:fc:64: 10:6a:68:9b:bd:77:3b:8e:70:88:67:fc:bd:0c:34: 0f:54:29:22:d1:ca:ef:0b:24:4e:0c:5c:79:58:8c: 89:d2:e2:44:ff:d4:2e:da:65:d8:90:c4:a7:11:db: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:E5:2A:E2:A6:67:4D:4C:74:81:A5:75:58:33:7E:89:66:60:96:A5 X509v3 Authority Key Identifier: keyid:42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer Subject Information Access: CA Repository - URI:rsync://krill.ipgua.com/repo/pongery/4/ RPKI Manifest - URI:rsync://krill.ipgua.com/repo/pongery/4/A0E52AE2A6674D4C7481A57558337E89666096A5.mft RPKI Notify - URI:https://krill.ipgua.com:3030/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6045:c000::/34 Signature Algorithm: sha256WithRSAEncryption 2c:b4:33:bd:4b:d7:73:45:8b:ed:f6:ad:b6:a4:f9:f3:c1:39: 3f:03:6c:18:3b:d8:e9:21:a7:4d:83:84:8b:19:72:16:c2:b2: 71:d6:b0:b7:89:ff:5f:f7:95:96:7b:9c:8a:67:01:2f:27:7c: b0:be:bc:4e:43:fa:42:de:3d:b8:7e:2e:22:37:f4:0b:64:ad: 9c:5b:d7:6c:fe:27:02:e3:6f:c3:a6:10:e6:cf:7c:97:e5:38: 4f:7f:71:9c:ca:9a:11:f3:a0:2b:e8:a1:33:f7:d8:52:04:c6: 30:3a:74:af:ca:ba:aa:87:85:af:4b:e5:eb:9e:cd:97:f3:64: 79:56:3f:cf:3b:9c:7e:f8:2f:00:94:1d:e7:f0:62:72:73:a8: 4a:fb:f3:1e:2d:80:40:65:fd:fa:a8:7e:37:b1:2b:11:fa:c2: 04:06:49:01:d0:c7:23:4e:cc:19:00:0d:85:7f:f0:1a:76:fc: 60:b6:6f:a1:d4:6c:8f:bb:96:ac:60:d4:45:16:e6:a1:5d:d6: e3:24:c7:ed:ee:8d:94:b7:1b:a2:6f:19:fd:75:ea:e6:9f:12: e3:10:3a:59:82:56:f2:fe:d0:4b:be:f6:d8:36:ef:32:4c:0a: cb:48:27:33:93:7b:5f:b4:bd:ed:c9:1a:72:6f:f5:c5:72:61: 30:9c:15:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUQKJxlGdiVPl2h6Xcnh5mT+UTyg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxQjc2NUM1NDBGMTM5MjU4RThDOEU2NDQ5OUFDNjMx N0FFNkY5MzAeFw0yNjAzMDcwODI1NTBaFw0yNzAzMDYwODMwNTBaMDMxMTAvBgNV BAMTKEEwRTUyQUUyQTY2NzRENEM3NDgxQTU3NTU4MzM3RTg5NjY2MDk2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYMhK6CLcM3jmJuwH72Jog3Kc ldM38gjrZJCpH9wewx1s5xsah/1EdVheHY49e07Y5mYZzi7yvcjxkMhr2TzRu+Fo sNLbkO8qtf5r7dV4rhAFmpRPk+RvzVyolL1W4niMn+JJL90d30PtB35eWGlHvHlL 2ldJf9q+UNLMcg80C33DGU2x7Da7oZ8a3eCoV//U5T/AR6wYbkNESZA+6EqnfWtM lqodLmjIZoXfKd3IIihNyVKPYDnuBRQIf8jORYEYv1LFu0mLxznRW8wGelb8ZBBq aJu9dzuOcIhn/L0MNA9UKSLRyu8LJE4MXHlYjInS4kT/1C7aZdiQxKcR2+TbAgMB AAGjggKOMIICijAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSg5SripmdNTHSB pXVYM36JZmCWpTAfBgNVHSMEGDAWgBRCG3ZcVA8TkljoyOZEmaxjF65vkzAOBgNV HQ8BAf8EBAMCAQYwawYDVR0fBGQwYjBgoF6gXIZacnN5bmM6Ly9ycGtpLmtvbW9y ZWJpLm5ldHdvcmsvcmVwby9rb21vcmViaS81LzQyMUI3NjVDNTQwRjEzOTI1OEU4 QzhFNjQ0OTlBQzYzMTdBRTZGOTMuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYI KwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84 YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83LzQyMUI3NjVDNTQwRjEz OTI1OEU4QzhFNjQ0OTlBQzYzMTdBRTZGOTMuY2VyMIHmBggrBgEFBQcBCwSB2TCB 1jAzBggrBgEFBQcwBYYncnN5bmM6Ly9rcmlsbC5pcGd1YS5jb20vcmVwby9wb25n ZXJ5LzQvMF8GCCsGAQUFBzAKhlNyc3luYzovL2tyaWxsLmlwZ3VhLmNvbS9yZXBv L3BvbmdlcnkvNC9BMEU1MkFFMkE2Njc0RDRDNzQ4MUE1NzU1ODMzN0U4OTY2NjA5 NkE1Lm1mdDA+BggrBgEFBQcwDYYyaHR0cHM6Ly9rcmlsbC5pcGd1YS5jb206MzAz MC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBioKYEXAMA0GCSqGSIb3DQEB CwUAA4IBAQAstDO9S9dzRYvt9q22pPnzwTk/A2wYO9jpIadNg4SLGXIWwrJx1rC3 if9f95WWe5yKZwEvJ3ywvrxOQ/pC3j24fi4iN/QLZK2cW9ds/icC42/DphDmz3yX 5ThPf3GcypoR86Ar6KEz99hSBMYwOnSvyrqqh4WvS+Xrns2X82R5Vj/PO5x++C8A lB3n8GJyc6hK+/MeLYBAZf36qH43sSsR+sIEBkkB0McjTswZAA2Ff/Aadvxgtm+h 1GyPu5asYNRFFuahXdbjJMft7o2Utxuibxn9dermnxLjEDpZglby/tBLvvbYNu8y TArLSCczk3tftL3tyRpyb/XFcmEwnBUl -----END CERTIFICATE-----Generated at Sat Mar 28 11:59:18 2026 by rpki-client