$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer File: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer (raw, json) Hash identifier: fOEqRqKlaLKUtKYMsGd37ZJXvbw9QPqtaVQY5rFpBpQ= Subject key identifier: B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 4F58A1B23B14F67DBE27D1F4D28C1785E00E263E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 21 Sep 2025 05:11:00 +0000 Certificate not after: Sun 20 Sep 2026 05:16:00 +0000 Subordinate resources: IP: 2a14:7583:f400::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:58:a1:b2:3b:14:f6:7d:be:27:d1:f4:d2:8c:17:85:e0:0e:26:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Sep 21 05:11:00 2025 GMT Not After : Sep 20 05:16:00 2026 GMT Subject: CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:34:e2:3e:15:ec:ca:c6:b4:56:43:83:50:12: c8:c0:36:3c:66:48:bb:40:1d:41:ac:a6:88:c2:42: ab:69:1d:b8:84:a6:fc:7c:89:79:62:d6:16:ad:d6: 7a:72:c0:93:55:7e:66:8d:11:35:c6:c3:10:3e:6d: 43:20:ff:54:76:16:54:9d:90:93:96:fb:c9:c6:59: 61:72:d6:a3:5d:ba:f5:47:b9:78:67:6b:f2:c9:41: 22:0c:52:07:ea:67:b6:9c:74:cc:7f:78:0c:91:db: 8c:de:27:e2:40:58:ad:ea:94:9b:5d:13:77:3c:09: f1:6e:c3:31:91:c4:98:bc:21:df:c3:2c:83:af:98: 18:a0:77:3a:6a:6e:9f:1d:cc:6e:1d:98:d1:3c:c4: 1e:5e:fa:fe:88:3b:f6:98:fd:85:f7:e9:a0:bd:2b: 95:7f:f5:c0:75:1f:42:ef:7b:48:4d:be:39:d4:4b: 83:a0:08:73:d0:8d:7b:f4:fa:c0:91:05:b0:a6:6e: d3:e4:5e:13:32:33:28:d2:e2:d1:39:4a:ee:dd:11: 12:79:f7:b7:00:8c:a8:e5:d4:a8:67:4d:8b:e1:ea: 86:c8:6c:73:fb:a8:0f:bd:78:79:87:ff:66:b2:0d: ca:03:dc:80:59:42:e9:5e:cf:50:96:15:42:95:c1: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f400::/44 Signature Algorithm: sha256WithRSAEncryption 40:9f:89:1e:fb:bb:fd:ae:f1:da:2d:ec:66:bf:e2:a8:3b:c3: c7:8b:c6:96:f9:2b:e8:fb:96:f4:a5:93:64:58:7f:7c:fc:cc: 96:70:4b:98:77:19:73:c2:e6:79:a9:cb:1b:92:9f:fb:40:a3: 13:ab:c5:8f:8c:bc:97:37:a4:56:f1:e3:c9:e4:55:cf:08:8e: 22:75:22:2d:ff:5b:b3:34:95:de:e8:29:32:34:2e:23:72:bd: 98:65:57:e6:e3:42:bc:4f:a8:4e:60:ee:87:d7:c6:81:de:13: 27:f5:1d:53:d9:26:61:04:0e:56:f5:7d:98:cb:54:6c:b7:9b: 5b:44:c1:4e:3e:c0:2d:12:74:2f:7d:c7:39:6f:8a:48:6f:4d: f3:12:85:84:47:7b:1f:cb:41:f1:b7:49:9f:c1:62:28:9a:20: 21:14:2b:23:66:cd:67:ee:be:94:40:5b:19:5c:92:d1:39:25: 5a:ec:a7:9d:5d:4a:4c:c2:94:39:79:84:c7:fc:64:f2:ed:d7: 5c:93:5a:c7:b7:21:16:e0:e9:3d:2d:3a:19:37:fa:c2:6d:89: 5c:0b:04:0b:65:ef:ae:73:a3:c4:78:ec:ea:6b:16:0f:a5:56: 4f:4c:6b:93:de:df:aa:8a:0e:76:a9:1e:aa:cd:d0:c5:8c:43: 5b:f1:b9:4c -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUT1ihsjsU9n2+J9H00owXheAOJj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTA5MjEwNTExMDBaFw0yNjA5MjAwNTE2MDBaMDMxMTAvBgNV BAMTKEIxMUQ1MEE1RDQ3RjczMkYzRjgwOEZFQUU2QTM5MDZDQzQ1MDlDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNOI+FezKxrRWQ4NQEsjANjxm SLtAHUGspojCQqtpHbiEpvx8iXli1hat1npywJNVfmaNETXGwxA+bUMg/1R2FlSd kJOW+8nGWWFy1qNduvVHuXhna/LJQSIMUgfqZ7acdMx/eAyR24zeJ+JAWK3qlJtd E3c8CfFuwzGRxJi8Id/DLIOvmBigdzpqbp8dzG4dmNE8xB5e+v6IO/aY/YX36aC9 K5V/9cB1H0Lve0hNvjnUS4OgCHPQjXv0+sCRBbCmbtPkXhMyMyjS4tE5Su7dERJ5 97cAjKjl1KhnTYvh6obIbHP7qA+9eHmH/2ayDcoD3IBZQulez1CWFUKVwSdVAgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxHVCl1H9zLz+A j+rmo5BsxFCcRDAfBgNVHSMEGDAWgBSxSfI6PpnEdgKX3XEEtADINdhtGTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yYzI2NzYzZS1hZGRmLTQzZmQtYmYyZS03Yzdl Mzg5MjNlN2MvMC8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJjMjY3NjNlLWFkZGYtNDNmZC1iZjJlLTdj N2UzODkyM2U3Yy8wL0IxMUQ1MEE1RDQ3RjczMkYzRjgwOEZFQUU2QTM5MDZDQzQ1 MDlDNDQubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoUdYP0ADANBgkqhkiG9w0B AQsFAAOCAQEAQJ+JHvu7/a7x2i3sZr/iqDvDx4vGlvkr6PuW9KWTZFh/fPzMlnBL mHcZc8LmeanLG5Kf+0CjE6vFj4y8lzekVvHjyeRVzwiOInUiLf9bszSV3ugpMjQu I3K9mGVX5uNCvE+oTmDuh9fGgd4TJ/UdU9kmYQQOVvV9mMtUbLebW0TBTj7ALRJ0 L33HOW+KSG9N8xKFhEd7H8tB8bdJn8FiKJogIRQrI2bNZ+6+lEBbGVyS0TklWuyn nV1KTMKUOXmEx/xk8u3XXJNax7chFuDpPS06GTf6wm2JXAsEC2XvrnOjxHjs6msW D6VWT0xrk97fqooOdqkeqs3QxYxDW/G5TA== -----END CERTIFICATE-----Generated at Mon Oct 20 23:15:45 2025 by rpki-client