$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer File: ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer (raw, json) Hash identifier: +SsLTMTOpCWVaB9PKcusKpGgmwlQLXdCfiGow4UbZ5g= Subject key identifier: AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 64A856F3A67C300746CDE5773938A28AD7A6E7C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 22 Jul 2026 12:15:08 +0000 Certificate not after: Wed 21 Jul 2027 12:20:08 +0000 Subordinate resources: AS: 153376 IP: 2406:840:e600::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a8:56:f3:a6:7c:30:07:46:cd:e5:77:39:38:a2:8a:d7:a6:e7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 22 12:15:08 2026 GMT Not After : Jul 21 12:20:08 2027 GMT Subject: CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:7a:bc:a0:e4:ff:88:6a:04:44:3d:5d:62: cb:01:08:cc:fe:6a:87:99:05:40:18:6a:b9:6e:ba: 74:15:23:0c:90:50:18:3f:5f:43:cf:bf:5c:d2:45: 4e:27:1d:37:07:08:68:0b:e6:64:79:8a:cb:99:f0: 60:b1:76:66:95:aa:a2:b7:99:64:f9:e4:ed:21:50: f2:d7:c4:c5:e9:5d:47:a6:bc:84:a9:34:3d:78:88: 49:da:d5:17:2c:70:35:91:4e:43:7b:a1:e2:4f:15: e5:ec:99:0a:99:97:5a:73:20:ab:ef:02:f5:7c:bc: 21:c4:59:de:df:0e:a3:ba:cc:3e:d3:24:81:b5:ed: 7d:ac:52:ed:8f:70:44:87:66:f7:c9:e5:48:93:cb: 3c:f1:40:bd:f5:01:16:05:5b:28:57:a1:93:b6:14: 24:91:0d:d4:86:57:ee:d7:5a:51:c4:8a:36:95:27: 10:1d:aa:a2:68:a5:f3:d1:e3:5d:0c:85:2d:c9:80: a9:cb:97:4a:f8:e0:10:a4:a1:1a:dd:23:37:13:37: b4:85:d1:0e:0a:d7:46:41:0b:c1:16:45:ca:33:96: 38:26:fb:55:23:ef:c5:bf:f6:2d:e0:93:35:58:70: 90:d5:3a:1a:df:50:07:02:c5:db:cf:90:f6:8a:d9: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e600::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 153376 Signature Algorithm: sha256WithRSAEncryption 19:8e:c9:20:5e:52:6f:20:4c:00:56:49:9d:42:8f:01:4d:9a: e8:5b:16:be:ab:74:42:5b:6a:e6:aa:cd:9d:d4:5d:dd:62:85: fa:89:c6:a2:c2:50:ac:47:e0:96:de:67:82:98:d0:b0:4f:5b: 62:ac:28:4d:b8:28:13:a5:bd:50:03:93:79:44:02:a2:a7:c8: 26:f5:a2:90:e7:31:19:4a:8b:f9:7d:13:69:b2:b8:56:cd:13: 7e:e9:17:6a:da:b6:ae:21:85:61:70:57:b3:51:62:e7:ae:d4: da:12:79:86:90:90:bb:85:ed:11:8a:2f:51:36:b1:18:ec:98: ec:7e:9a:3b:7a:a7:2c:92:d0:41:10:44:fe:cd:e9:bd:08:cc: 46:18:ac:fb:36:ea:51:d3:37:da:d4:3a:90:f4:9a:91:50:8a: 05:e1:e3:1b:f0:cc:04:f3:39:65:a6:ed:87:cc:d5:b4:55:f6: 45:fc:fc:0c:b2:c9:61:b3:a1:c0:d5:e6:7c:5b:76:e5:d5:84: 5d:90:e9:34:b6:1e:bc:d6:af:5a:eb:dc:0b:bc:2b:a9:87:3a: 31:18:32:8e:68:13:e8:6f:8e:5f:28:99:fe:4d:23:c3:39:63: 5d:3e:26:ff:51:d3:d5:a4:6d:c4:43:cf:f2:02:4f:80:66:72: b4:96:e9:ac -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgIUZKhW86Z8MAdGzeV3OTiiitem58gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMjEyMTUwOFoX DTI3MDcyMTEyMjAwOFowMzExMC8GA1UEAxMoQUJFRjBDMkJFMUJDQTcyNjU5NkMy MUVEMTMyNjQ5QTdBMzQzMDQxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL28eryg5P+IagREPV1iywEIzP5qh5kFQBhquW66dBUjDJBQGD9fQ8+/XNJF TicdNwcIaAvmZHmKy5nwYLF2ZpWqoreZZPnk7SFQ8tfExeldR6a8hKk0PXiISdrV FyxwNZFOQ3uh4k8V5eyZCpmXWnMgq+8C9Xy8IcRZ3t8Oo7rMPtMkgbXtfaxS7Y9w RIdm98nlSJPLPPFAvfUBFgVbKFehk7YUJJEN1IZX7tdaUcSKNpUnEB2qomil89Hj XQyFLcmAqcuXSvjgEKShGt0jNxM3tIXRDgrXRkELwRZFyjOWOCb7VSPvxb/2LeCT NVhwkNU6Gt9QBwLF28+Q9orZSgsCAwEAAaOCAxowggMWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKvvDCvhvKcmWWwh7RMmSaejQwQaMB8GA1UdIwQYMBaAFNv2 ODugXb1RCMLTIc15/gJC55rfMA4GA1UdDwEB/wQEAwIBBjCBlQYDVR0fBIGNMIGK MIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8xL0RC RjYzODNCQTA1REJENTEwOEMyRDMyMUNENzlGRTAyNDJFNzlBREYuY3JsMH4GCCsG AQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9y ZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyLzJfWTRP NkJkdlZFSXd0TWh6WG4tQWtMbm10OC5jZXIwggE/BggrBgEFBQcBCwSCATEwggEt MF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8z LzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEwM2Y4 LzMvQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdBMzQzMDQxQS5tZnQw PAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90 aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEJAYIQOYAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwJXIDANBgkqhkiG9w0BAQsFAAOCAQEAGY7JIF5SbyBMAFZJnUKPAU2a6FsW vqt0Qltq5qrNndRd3WKF+onGosJQrEfglt5ngpjQsE9bYqwoTbgoE6W9UAOTeUQC oqfIJvWikOcxGUqL+X0TabK4Vs0TfukXatq2riGFYXBXs1Fi567U2hJ5hpCQu4Xt EYovUTaxGOyY7H6aO3qnLJLQQRBE/s3pvQjMRhis+zbqUdM32tQ6kPSakVCKBeHj G/DMBPM5Zabth8zVtFX2Rfz8DLLJYbOhwNXmfFt25dWEXZDpNLYevNavWuvcC7wr qYc6MRgyjmgT6G+OXyiZ/k0jwzljXT4m/1HT1aRtxEPP8gJPgGZytJbprA== -----END CERTIFICATE-----Generated at Thu Jul 23 18:59:38 2026 by rpki-client