$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer File: 69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer (raw, json) Hash identifier: xAYLg9xwMzhfn7yeX4sZhbINK9SiMXP3e/i/klKaS9Y= Subject key identifier: 69:72:7B:94:6D:87:9F:5A:52:FB:58:F2:4B:4D:4D:12:D5:9B:2C:C2 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 29B06A36CE94C096DF1CC1268AF2995B00BAB1FF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 19 Apr 2026 19:28:55 +0000 Certificate not after: Sun 18 Apr 2027 19:33:55 +0000 Subordinate resources: IP: 2a14:1ec0::/32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b0:6a:36:ce:94:c0:96:df:1c:c1:26:8a:f2:99:5b:00:ba:b1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Apr 19 19:28:55 2026 GMT Not After : Apr 18 19:33:55 2027 GMT Subject: CN=69727B946D879F5A52FB58F24B4D4D12D59B2CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:9e:7f:43:92:e8:aa:1d:54:67:47:78:1a: 60:c6:5b:85:9f:8a:bc:d1:85:d6:e0:10:a4:5e:ea: e4:dd:11:80:fb:c9:77:34:7e:bc:ca:0b:8e:d4:2f: 84:f5:6d:40:ad:aa:aa:53:f4:b3:e8:18:ce:6a:ef: 62:15:24:db:66:2c:d6:3a:62:9e:5f:be:be:84:8f: d5:49:25:2a:5e:41:0c:1c:11:f7:71:ba:68:85:79: b1:ce:62:0c:13:9d:57:eb:25:d1:fc:6b:cd:f3:bf: ca:72:98:87:86:af:e5:1e:ec:d1:e2:ca:65:e1:a3: 99:c7:78:d0:3c:4d:80:4b:bc:de:67:19:27:c1:49: 8d:1f:bc:8c:10:70:d3:06:5d:99:9a:0f:13:6d:88: 4b:c2:15:f2:d2:6d:d9:d8:84:92:c7:66:51:63:92: 86:00:ec:1c:65:00:62:f3:8d:e9:3d:de:5d:95:c1: bc:36:6a:25:d1:32:b0:d0:87:df:be:97:dc:44:57: e2:a4:eb:ec:f9:d1:ea:8d:be:7c:e5:4b:31:19:d0: 69:a6:ec:31:9f:53:17:a8:80:fe:f8:88:69:02:b0: aa:24:a5:4d:96:e1:12:f2:c1:1f:d7:2a:89:be:cf: c6:d4:34:c2:59:54:29:d8:51:df:9f:0b:68:1f:b7: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:72:7B:94:6D:87:9F:5A:52:FB:58:F2:4B:4D:4D:12:D5:9B:2C:C2 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/10/69727B946D879F5A52FB58F24B4D4D12D59B2CC2.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:0a:f0:b4:f9:d3:6b:c1:dc:47:12:55:65:29:23:ec:84:6a: 45:e3:25:89:cf:be:ae:57:24:7a:62:45:a1:8b:91:f8:00:c6: 2a:fa:d0:19:5a:f0:3b:52:e9:b3:21:83:cc:c3:a5:a6:bd:cd: fa:33:54:6b:c9:11:23:3b:43:16:c5:53:ee:5e:a7:38:76:37: e4:ec:da:cc:3c:13:29:98:e2:41:cb:8b:66:c9:53:bb:02:bf: 8c:21:14:95:66:16:50:00:bb:44:13:01:f0:ba:35:39:63:0a: a5:a6:01:ef:55:75:eb:59:44:7c:56:12:02:e9:c0:8a:46:d4: d6:59:bb:9c:61:2e:26:23:6e:31:2c:f1:9a:35:a4:7f:8f:20: 3a:2a:26:12:1a:24:8a:ce:be:16:30:b2:f6:dc:8a:58:53:95: 99:ea:9c:71:ab:45:da:b4:2f:b0:98:12:fe:bc:9c:65:95:f0: 85:e8:32:0e:2e:20:d7:16:bc:0e:64:11:af:93:52:ea:91:b5: 6b:6e:26:94:3d:5b:84:58:31:5f:85:5c:52:28:57:4a:16:c4: bc:84:9f:c0:e6:cf:55:3b:2c:d7:ef:84:f7:9f:29:40:05:4c: 46:fb:0f:d7:7d:ed:0e:6b:68:f6:4b:6e:76:8a:19:e6:04:ff: d4:96:7c:c0 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgIUKbBqNs6UwJbfHMEmivKZWwC6sf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA0MTkxOTI4NTVaFw0yNzA0MTgxOTMzNTVaMDMxMTAvBgNV BAMTKDY5NzI3Qjk0NkQ4NzlGNUE1MkZCNThGMjRCNEQ0RDEyRDU5QjJDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEJ5/Q5Loqh1UZ0d4GmDGW4Wf irzRhdbgEKRe6uTdEYD7yXc0frzKC47UL4T1bUCtqqpT9LPoGM5q72IVJNtmLNY6 Yp5fvr6Ej9VJJSpeQQwcEfdxumiFebHOYgwTnVfrJdH8a83zv8pymIeGr+Ue7NHi ymXho5nHeNA8TYBLvN5nGSfBSY0fvIwQcNMGXZmaDxNtiEvCFfLSbdnYhJLHZlFj koYA7BxlAGLzjek93l2Vwbw2aiXRMrDQh9++l9xEV+Kk6+z50eqNvnzlSzEZ0Gmm 7DGfUxeogP74iGkCsKokpU2W4RLywR/XKom+z8bUNMJZVCnYUd+fC2gft8OZAgMB AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpcnuUbYefWlL7 WPJLTU0S1ZsswjAfBgNVHSMEGDAWgBQg9pxMFGE4ywEhxMTLs5h29KvexjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFhM2JiOTNmLTk4YTQtNGM3ZS1hMGUxLTgwNTdhNGYwODZjOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYuY2VyMIIBQgYIKwYBBQUH AQsEggE0MIIBMDBgBggrBgEFBQcwBYZUcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQw ZjA3MTgwOGIvMTAvMIGNBggrBgEFBQcwCoaBgHJzeW5jOi8vcnN5bmMucGFhcy5y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYt OGQ0MGYwNzE4MDhiLzEwLzY5NzI3Qjk0NkQ4NzlGNUE1MkZCNThGMjRCNEQ0RDEy RDU5QjJDQzIubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtp LnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoUHsAwDQYJKoZIhvcN AQELBQADggEBAF0K8LT502vB3EcSVWUpI+yEakXjJYnPvq5XJHpiRaGLkfgAxir6 0Bla8DtS6bMhg8zDpaa9zfozVGvJESM7QxbFU+5epzh2N+Ts2sw8EymY4kHLi2bJ U7sCv4whFJVmFlAAu0QTAfC6NTljCqWmAe9VdetZRHxWEgLpwIpG1NZZu5xhLiYj bjEs8Zo1pH+PIDoqJhIaJIrOvhYwsvbcilhTlZnqnHGrRdq0L7CYEv68nGWV8IXo Mg4uINcWvA5kEa+TUuqRtWtuJpQ9W4RYMV+FXFIoV0oWxLyEn8Dmz1U7LNfvhPef KUAFTEb7D9d97Q5raPZLbnaKGeYE/9SWfMA= -----END CERTIFICATE-----Generated at Wed May 13 04:17:20 2026 by rpki-client