$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer File: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer (raw, json) Hash identifier: zWi5rFdGQYwJBXDhW9PKUkb3++OgSqlJ6YAaEWudTiw= Subject key identifier: 09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 51179BD9A8E8429E085E78313A7C9847D0D75A38 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 07 Jul 2026 11:00:50 +0000 Certificate not after: Tue 06 Jul 2027 11:05:50 +0000 Subordinate resources: IP: 2a13:c8c4:a000::/35 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:17:9b:d9:a8:e8:42:9e:08:5e:78:31:3a:7c:98:47:d0:d7:5a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Jul 7 11:00:50 2026 GMT Not After : Jul 6 11:05:50 2027 GMT Subject: CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:0b:11:b1:d6:d5:25:5e:69:12:0c:33:3e: cd:dd:7a:ee:aa:3e:0b:13:40:b6:ab:4c:53:94:60: b3:a9:4e:e4:4f:19:4c:a6:d4:47:81:ac:1c:db:da: b4:cd:67:9f:54:dc:40:dc:e1:88:7c:26:52:6c:94: 89:da:8e:c8:b2:5e:26:be:93:5b:69:e5:bf:ca:3c: 56:6e:94:73:80:2b:ea:4d:64:c2:bb:0d:ea:5a:d9: bb:75:5d:8f:b9:25:24:2a:f7:22:55:71:a6:0d:eb: 7d:4b:84:2a:79:da:42:19:de:1a:79:cd:af:ef:a3: cc:f8:92:c0:2b:02:9e:24:ec:81:f9:ee:b7:bf:52: 56:46:2e:1b:b3:1f:3f:1b:ca:35:7e:e8:76:dd:19: 23:d5:de:f1:32:b6:eb:98:67:6f:84:9e:b2:3f:d0: 1d:f9:64:02:b7:1d:00:d7:8f:25:82:2d:bc:66:be: 34:e7:bc:05:ef:53:be:51:7b:fe:21:c8:bf:fe:e5: a3:81:5f:d2:b4:1e:3e:b4:d7:3b:c4:5b:a5:37:2e: e0:4a:e1:f3:40:fb:d4:56:81:28:28:46:2b:b6:e0: a1:f0:b2:d6:32:8e:26:82:99:a1:c5:a1:78:de:ac: 6b:11:7d:63:59:1e:d1:9b:5e:dc:bb:63:12:e7:fd: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:a000::/35 Signature Algorithm: sha256WithRSAEncryption ad:ea:c4:64:10:ff:83:07:e6:b1:d9:3f:eb:80:3f:6d:f4:dd: 31:a3:98:75:d2:44:1f:6e:e3:d1:82:f5:cf:02:ed:c1:94:2b: 58:32:4b:96:49:5e:46:9b:36:ab:84:41:e2:3a:03:ef:89:2e: fb:44:d0:f6:73:00:cd:4d:8a:3e:79:22:87:02:dc:c2:34:15: 82:40:74:e2:1e:aa:aa:5e:fc:d4:af:cb:33:e1:12:97:6d:e3: 7e:5d:ff:76:15:72:06:0a:31:70:5c:68:25:3f:29:7b:0c:e4: e1:83:74:c1:8c:d4:36:3b:ea:09:b6:72:0a:dd:fd:c1:bc:44: 41:67:96:1f:c8:36:d4:6e:9d:94:ca:a0:1e:9f:96:3b:6e:79: 73:b4:2b:e6:4d:bd:3d:eb:cf:0f:41:61:c1:0b:89:f3:d5:fb: 88:5e:75:b7:40:f8:c7:0f:ba:d8:e1:ab:52:1f:98:e6:72:d8: df:8f:97:0f:19:1c:2d:7f:58:c1:4e:99:f4:79:9b:8d:40:6d: c5:37:4d:21:91:1b:f8:da:16:2f:8e:82:1a:6a:e7:17:07:3b: 4c:01:88:1c:25:50:9e:dc:f3:48:bb:32:a9:40:04:bc:af:43: 54:c3:4d:48:fb:0f:36:71:ef:e9:5e:f8:b0:3a:9a:88:ac:00: dd:33:2b:8a -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUUReb2ajoQp4IXngxOnyYR9DXWjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA3MDcxMTAwNTBaFw0yNzA3MDYxMTA1NTBaMDMxMTAvBgNV BAMTKDA5RkQzNEZGNjgzNkY5REQwMUFDN0ZERjM1Nzg0MEM3NTJCQjkxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQAsRsdbVJV5pEgwzPs3deu6q PgsTQLarTFOUYLOpTuRPGUym1EeBrBzb2rTNZ59U3EDc4Yh8JlJslInajsiyXia+ k1tp5b/KPFZulHOAK+pNZMK7Depa2bt1XY+5JSQq9yJVcaYN631LhCp52kIZ3hp5 za/vo8z4ksArAp4k7IH57re/UlZGLhuzHz8byjV+6HbdGSPV3vEytuuYZ2+EnrI/ 0B35ZAK3HQDXjyWCLbxmvjTnvAXvU75Re/4hyL/+5aOBX9K0Hj601zvEW6U3LuBK 4fNA+9RWgSgoRiu24KHwstYyjiaCmaHFoXjerGsRfWNZHtGbXty7YxLn/Rs1AgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ/TT/aDb53QGs f981eEDHUruRpTAfBgNVHSMEGDAWgBQedElGg9jSpOApqtRXOSjSpV+kETAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi80LzFFNzQ0OTQ2 ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9jYmE1MDFmYS01OWYwLTQwMjctYWU0MC1mZDUy NTYzODljMjgvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NiYTUwMWZhLTU5ZjAtNDAyNy1hZTQwLWZk NTI1NjM4OWMyOC8yLzA5RkQzNEZGNjgzNkY5REQwMUFDN0ZERjM1Nzg0MEM3NTJC QjkxQTUubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSoTyMSgMA0GCSqGSIb3DQEB CwUAA4IBAQCt6sRkEP+DB+ax2T/rgD9t9N0xo5h10kQfbuPRgvXPAu3BlCtYMkuW SV5GmzarhEHiOgPviS77RND2cwDNTYo+eSKHAtzCNBWCQHTiHqqqXvzUr8sz4RKX beN+Xf92FXIGCjFwXGglPyl7DOThg3TBjNQ2O+oJtnIK3f3BvERBZ5YfyDbUbp2U yqAen5Y7bnlztCvmTb09688PQWHBC4nz1fuIXnW3QPjHD7rY4atSH5jmctjfj5cP GRwtf1jBTpn0eZuNQG3FN00hkRv42hYvjoIaaucXBztMAYgcJVCe3PNIuzKpQAS8 r0NUw01I+w82ce/pXviwOpqIrADdMyuK -----END CERTIFICATE-----Generated at Thu Jul 23 22:14:34 2026 by rpki-client