$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (raw, json) Hash identifier: f9gqWZd9jTaN/TKqyxZTflFWhQLjKexUjNI5xY975P4= Subject key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 27CCD6FF8E1E810687B55BF05E5ABC76DD5909D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Manifest: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft caRepository: rsync://krill.cxy.hk/repo/Xinyu/2/ Notify URL: https://krill.cxy.hk/rrdp/notification.xml Certificate not before: Thu 24 Sep 2026 12:23:04 +0000 Certificate not after: Thu 23 Sep 2027 12:28:04 +0000 Subordinate resources: IP: 2a14:7586:6000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cc:d6:ff:8e:1e:81:06:87:b5:5b:f0:5e:5a:bc:76:dd:59:09:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 24 12:23:04 2026 GMT Not After : Sep 23 12:28:04 2027 GMT Subject: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:d1:cd:0f:db:b0:b1:c5:a4:f3:6f:ed:1e: fa:23:a4:d1:ba:32:dd:02:dc:d5:24:f3:6d:29:ef: 2e:74:8c:ca:c1:cb:84:a0:ea:34:d6:4f:39:b6:a6: fd:fd:77:6f:1b:45:b4:f3:06:5f:19:e1:db:90:2e: 22:60:cc:88:80:5c:75:db:7c:64:c7:5a:39:53:5f: 1e:33:81:46:eb:36:6f:fa:9c:ec:5c:23:00:71:ba: ef:9c:96:36:bd:fa:f1:c6:76:46:f4:14:83:50:ea: d4:8b:b0:bf:b4:61:da:47:27:78:48:b4:61:2b:bb: f3:22:be:94:b6:ae:e7:e9:2c:58:90:5c:69:7a:ca: 35:49:15:ed:25:8f:c9:e9:57:17:b7:78:1e:59:ce: b6:42:7b:89:41:30:1a:11:c2:6f:0d:fc:c4:89:cf: 47:6c:b1:f9:4f:6e:79:99:af:59:c8:27:dd:83:6d: fa:a1:dc:3e:ac:66:3b:e5:f5:79:41:56:13:77:05: 99:d9:b0:56:07:07:ad:0f:7f:94:65:da:72:51:97: 1a:46:c8:57:91:7a:2c:e4:ad:b7:dc:7f:03:7a:6f: e9:d0:d0:48:e5:8a:7b:03:a6:be:4a:e6:1a:60:5d: c4:12:ab:6a:ee:c8:7f:08:32:98:54:ef:d4:bb:14: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: CA Repository - URI:rsync://krill.cxy.hk/repo/Xinyu/2/ RPKI Manifest - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft RPKI Notify - URI:https://krill.cxy.hk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6000::/40 Signature Algorithm: sha256WithRSAEncryption d5:b6:b3:0c:39:7a:73:d9:2d:ba:b3:e4:a2:dc:53:00:0d:40: 6e:db:45:78:cb:d2:19:0e:11:58:33:85:8a:6f:ad:da:72:ed: 94:f8:84:33:4a:8c:ea:36:4d:f0:53:4e:51:4b:00:1c:5e:6b: 46:38:4e:ab:fb:c4:e1:5e:b1:a2:f1:80:e8:3d:9f:27:36:57: aa:18:d2:1f:de:93:11:72:71:0c:6e:89:f5:a5:48:c7:be:06: 86:68:de:94:2a:b3:d4:a7:b4:74:5f:99:b6:08:eb:74:18:4a: e4:fa:c6:2c:c2:db:3d:86:bd:0f:c1:8d:65:de:9b:dd:6b:a9: b7:81:60:b7:b4:03:7f:32:a0:10:0f:6e:c9:3d:2b:cf:47:1f: 05:6e:ed:4e:a5:df:a2:e8:1d:bb:ab:22:79:ea:33:ec:5f:c9: 58:91:27:b9:42:85:b9:a9:dc:da:d9:3c:23:b8:5d:3b:58:d5: 7a:09:af:a7:5b:a3:68:da:d1:78:7b:e7:ef:f9:aa:77:91:fb: a8:7c:5e:7d:e3:80:69:6b:59:54:a3:17:1b:a8:af:01:a4:03: 07:4a:98:8e:c3:09:2f:ed:e3:49:42:ae:51:36:66:ee:57:22: c7:dd:41:f9:27:6e:04:df:84:e7:d2:6a:49:68:f3:46:39:0b: 05:d3:15:b1 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUJ8zW/44egQaHtVvwXlq8dt1ZCdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MjQxMjIzMDRaFw0yNzA5MjMxMjI4MDRaMDMxMTAvBgNV BAMTKDk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgNHND9uwscWk82/tHvojpNG6 Mt0C3NUk820p7y50jMrBy4Sg6jTWTzm2pv39d28bRbTzBl8Z4duQLiJgzIiAXHXb fGTHWjlTXx4zgUbrNm/6nOxcIwBxuu+clja9+vHGdkb0FINQ6tSLsL+0YdpHJ3hI tGEru/MivpS2rufpLFiQXGl6yjVJFe0lj8npVxe3eB5ZzrZCe4lBMBoRwm8N/MSJ z0dssflPbnmZr1nIJ92Dbfqh3D6sZjvl9XlBVhN3BZnZsFYHB60Pf5Rl2nJRlxpG yFeReizkrbfcfwN6b+nQ0EjlinsDpr5K5hpgXcQSq2ruyH8IMphU79S7FAT7AgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYaLigGNQenUGN k7UsCjEXT0DxHjAfBgNVHSMEGDAWgBSD3nA3uOIFZtL+ibqJF4g7a5ZOPjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzgzREU3MDM3 QjhFMjA1NjZEMkZFODlCQTg5MTc4ODNCNkI5NjRFM0UuY2VyMIHUBggrBgEFBQcB CwSBxzCBxDAuBggrBgEFBQcwBYYicnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUu bWZ0MDYGCCsGAQUFBzANhipodHRwczovL2tyaWxsLmN4eS5oay9ycmRwL25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYZgMA0GCSqGSIb3DQEBCwUAA4IBAQDVtrMM OXpz2S26s+Si3FMADUBu20V4y9IZDhFYM4WKb63acu2U+IQzSozqNk3wU05RSwAc XmtGOE6r+8ThXrGi8YDoPZ8nNleqGNIf3pMRcnEMbon1pUjHvgaGaN6UKrPUp7R0 X5m2COt0GErk+sYswts9hr0PwY1l3pvda6m3gWC3tAN/MqAQD27JPSvPRx8Fbu1O pd+i6B27qyJ56jPsX8lYkSe5QoW5qdza2TwjuF07WNV6Ca+nW6No2tF4e+fv+ap3 kfuofF5944Bpa1lUoxcbqK8BpAMHSpiOwwkv7eNJQq5RNmbuVyLH3UH5J24E34Tn 0mpJaPNGOQsF0xWx -----END CERTIFICATE-----Generated at Fri Sep 25 04:03:37 2026 by rpki-client