$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer File: A9D80600BE2DA447AA0056537C94F64A1A69D021.cer (raw, json) Hash identifier: bSHUv+L8IdpncxB6rNgQ+e7LinITeH03Xd4W+7s8TqU= Subject key identifier: A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 39EBA468E02B225759FEB32BCB7B7B0AFCD77B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Manifest: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft caRepository: rsync://krill.cxy.hk/repo/Xinyu/5/ Notify URL: https://krill.cxy.hk/rrdp/notification.xml Certificate not before: Wed 22 Jul 2026 13:24:05 +0000 Certificate not after: Wed 21 Jul 2027 13:29:05 +0000 Subordinate resources: AS: 151673 IP: 2406:840:efa0::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:eb:a4:68:e0:2b:22:57:59:fe:b3:2b:cb:7b:7b:0a:fc:d7:7b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 22 13:24:05 2026 GMT Not After : Jul 21 13:29:05 2027 GMT Subject: CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:ef:5e:52:8e:3e:ea:b5:95:74:bb:60:f1: 3a:24:8b:9d:89:3d:80:76:86:ec:f1:de:2b:5f:c7: 13:62:b0:a7:c2:2f:98:9b:94:ca:ea:d1:da:09:8e: 12:f7:14:33:30:0a:ae:f5:97:c1:6f:9f:62:61:a7: 61:19:aa:f4:40:7a:95:19:bf:d0:81:ad:41:8f:2b: 7d:c9:70:28:f4:fc:24:a3:6b:e9:c8:b5:d0:22:0a: c3:ed:b6:d2:e4:3f:8b:ce:81:6a:b9:ec:3b:03:d9: 7b:94:69:73:97:4e:c5:99:ec:1c:08:51:c8:40:ea: 54:ce:b7:1d:86:a4:48:84:91:85:e3:1a:41:da:19: 6e:6f:31:59:34:8b:7e:31:3f:71:b2:aa:08:92:84: 0f:2d:ad:eb:87:36:a1:9a:d8:34:ac:9d:87:c9:64: 28:35:cb:ce:c4:80:5a:73:73:75:7b:73:cc:e1:1e: 1a:d3:da:a4:57:65:a1:22:05:99:53:df:40:c1:1f: e6:5f:ee:84:2b:92:11:5b:46:08:36:dc:50:e4:f2: a4:7c:5d:d1:5e:37:6f:81:de:33:e0:5e:f0:f3:b3: 87:6f:29:91:d4:82:fd:0a:2f:fa:f3:c5:90:71:f1: c9:3f:e1:a5:b9:50:35:cc:99:1a:f7:9d:df:09:57: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: CA Repository - URI:rsync://krill.cxy.hk/repo/Xinyu/5/ RPKI Manifest - URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft RPKI Notify - URI:https://krill.cxy.hk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:efa0::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151673 Signature Algorithm: sha256WithRSAEncryption 90:3e:90:4b:f0:a9:b9:e1:49:39:6d:67:d5:f1:14:6f:99:32: 4d:63:f8:7c:4b:f3:09:ea:ea:1e:ac:69:11:4d:39:3b:ef:cf: 1b:47:69:11:f9:fc:de:9f:ef:3d:a8:f2:8b:40:9d:f6:f4:9e: 35:1d:8a:9e:69:04:e0:44:a3:66:99:81:18:ca:58:7a:aa:19: db:c5:2a:93:49:bc:f1:00:38:6e:d9:75:26:93:78:17:ff:23: a8:cf:e3:cb:d5:8e:31:9d:6a:2c:e7:a8:0f:4c:57:e2:43:05: 4b:f6:ed:2a:5c:e1:b6:52:85:8b:2e:3c:6a:b3:52:5d:dc:45: b1:e9:aa:6d:58:22:fb:8c:84:3b:d7:dc:e7:e7:7d:34:85:f0: ac:a8:7e:60:99:5f:ba:ad:57:d3:87:22:3f:da:f9:6a:c1:3f: 64:76:4d:63:c4:c1:7b:05:19:ee:f6:c3:ad:f8:7e:9f:b3:54: f1:af:30:71:51:ae:2a:f0:bc:a2:c4:4e:97:3f:8b:d0:a0:47: 78:39:fe:3b:66:2c:03:32:c7:b3:54:0c:51:ef:e8:9d:a2:43: df:bd:52:e7:78:77:43:2d:a4:f0:73:28:6a:92:f0:e4:43:da: 22:ad:2f:89:41:2a:f8:08:b1:c8:67:2d:67:4c:45:5a:a6:ec: f3:46:b3:27 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUOeukaOArIldZ/rMry3t7CvzXe2AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMjEzMjQwNVoX DTI3MDcyMTEzMjkwNVowMzExMC8GA1UEAxMoQTlEODA2MDBCRTJEQTQ0N0FBMDA1 NjUzN0M5NEY2NEExQTY5RDAyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAO715Sjj7qtZV0u2DxOiSLnYk9gHaG7PHeK1/HE2Kwp8IvmJuUyurR2gmO EvcUMzAKrvWXwW+fYmGnYRmq9EB6lRm/0IGtQY8rfclwKPT8JKNr6ci10CIKw+22 0uQ/i86BarnsOwPZe5Rpc5dOxZnsHAhRyEDqVM63HYakSISRheMaQdoZbm8xWTSL fjE/cbKqCJKEDy2t64c2oZrYNKydh8lkKDXLzsSAWnNzdXtzzOEeGtPapFdloSIF mVPfQMEf5l/uhCuSEVtGCDbcUOTypHxd0V43b4HeM+Be8POzh28pkdSC/Qov+vPF kHHxyT/hpblQNcyZGved3wlXgi8CAwEAAaOCAq4wggKqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKnYBgC+LaRHqgBWU3yU9koaadAhMB8GA1UdIwQYMBaAFNv2 ODugXb1RCMLTIc15/gJC55rfMA4GA1UdDwEB/wQEAwIBBjCBlQYDVR0fBIGNMIGK MIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8xL0RC RjYzODNCQTA1REJENTEwOEMyRDMyMUNENzlGRTAyNDJFNzlBREYuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyLzJfWTRP NkJkdlZFSXd0TWh6WG4tQWtMbm10OC5jZXIwgdQGCCsGAQUFBwELBIHHMIHEMC4G CCsGAQUFBzAFhiJyc3luYzovL2tyaWxsLmN4eS5oay9yZXBvL1hpbnl1LzUvMFoG CCsGAQUFBzAKhk5yc3luYzovL2tyaWxsLmN4eS5oay9yZXBvL1hpbnl1LzUvQTlE ODA2MDBCRTJEQTQ0N0FBMDA1NjUzN0M5NEY2NEExQTY5RDAyMS5tZnQwNgYIKwYB BQUHMA2GKmh0dHBzOi8va3JpbGwuY3h5LmhrL3JyZHAvbm90aWZpY2F0aW9uLnht bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcEJAYIQO+gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJQeTANBgkq hkiG9w0BAQsFAAOCAQEAkD6QS/CpueFJOW1n1fEUb5kyTWP4fEvzCerqHqxpEU05 O+/PG0dpEfn83p/vPajyi0Cd9vSeNR2KnmkE4ESjZpmBGMpYeqoZ28Uqk0m88QA4 btl1JpN4F/8jqM/jy9WOMZ1qLOeoD0xX4kMFS/btKlzhtlKFiy48arNSXdxFsemq bVgi+4yEO9fc5+d9NIXwrKh+YJlfuq1X04ciP9r5asE/ZHZNY8TBewUZ7vbDrfh+ n7NU8a8wcVGuKvC8osROlz+L0KBHeDn+O2YsAzLHs1QMUe/onaJD371S53h3Qy2k 8HMoapLw5EPaIq0viUEq+AixyGctZ0xFWqbs80azJw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:54:54 2026 by rpki-client