$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer File: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer (raw, json) Hash identifier: ENFdC/NQUiehUfZU4H7Aclkt0tlEZlGP0GlkO/FtUIw= Subject key identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3E425EBF001F0879D66B5E1D70A47B44E3D9112E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 01 Mar 2026 17:20:17 +0000 Certificate not after: Sun 28 Feb 2027 17:25:17 +0000 Subordinate resources: IP: 2a05:dfc3:fa00::/40 IP: 2a0a:6044:6400::/40 IP: 2a0a:6044:aa10::/48 IP: 2a0f:6283:1000::/40 IP: 2a0f:6283:1300::/40 IP: 2a0f:6284:5000::/36 IP: 2a0f:6286::/32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:42:5e:bf:00:1f:08:79:d6:6b:5e:1d:70:a4:7b:44:e3:d9:11:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 1 17:20:17 2026 GMT Not After : Feb 28 17:25:17 2027 GMT Subject: CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:05:f1:7a:28:5d:a0:ba:64:fe:ab:92:00: fe:d6:f9:be:b9:4d:85:f4:7b:5b:b2:7e:1f:5e:d3: 4d:62:a3:9d:5c:a1:56:96:0a:b1:bd:53:7f:f5:a1: 5b:e1:25:70:35:cb:3b:d3:1b:e3:0a:d6:f1:5f:56: e3:6f:70:fb:f8:4f:1f:4c:7a:c3:01:da:f0:de:e0: 90:06:c5:ff:f0:dd:e6:f7:0a:45:61:40:4e:44:4e: 0c:be:78:78:4f:b2:ec:39:d7:df:34:59:6f:04:bb: 4f:0d:d0:43:66:e7:67:15:b1:60:bc:f0:ab:3f:c2: ac:7f:9e:4f:29:10:33:1a:f6:9b:e9:e6:2f:42:3c: 73:34:bd:69:2e:18:87:f2:41:b1:99:63:b6:92:d3: 30:96:f7:bb:30:69:4c:6c:6a:d0:e3:a5:45:9c:cf: 71:3b:9b:d5:6b:cf:0c:46:46:83:44:90:66:33:b5: 27:8f:91:c9:63:fe:31:dd:47:10:08:7b:75:eb:99: c0:01:b2:94:75:f2:90:08:aa:6e:f6:f1:56:61:3f: 65:e6:29:66:3a:fa:38:1f:15:d5:7d:f0:0d:e3:71: 97:43:82:60:b5:ed:07:00:5d:b3:2d:50:2f:45:fd: f3:f7:14:c8:58:57:23:75:66:be:cb:cd:85:46:ac: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 2a0a:6044:6400::/40 2a0a:6044:aa10::/48 2a0f:6283:1000::/40 2a0f:6283:1300::/40 2a0f:6284:5000::/36 2a0f:6286::/32 Signature Algorithm: sha256WithRSAEncryption 2a:31:5a:8f:18:aa:4c:f6:1c:a9:7d:4b:06:7f:7e:e0:09:f1: e8:fa:eb:ed:a1:82:3e:91:a9:a4:ed:36:13:5c:76:55:65:59: 74:fe:c9:31:ac:f0:8b:bb:79:4f:3d:41:c6:fc:b1:bf:60:21: 6a:de:c6:70:02:8a:0e:36:86:70:1f:8a:12:d6:03:51:57:e0: 37:af:88:e6:51:7b:b8:d8:d3:24:4c:8e:8c:13:67:37:39:72: 15:05:91:20:be:62:26:4d:ee:f6:4b:d3:b2:6c:ce:e4:be:2f: 52:a6:b4:cd:85:3d:14:a5:1d:65:8a:33:63:59:81:a2:b7:a9: 77:7b:30:bc:a7:2a:01:35:38:59:ff:2b:bb:2f:29:ed:35:04: 6d:f2:bb:62:56:c0:76:58:42:e0:8f:fb:7d:ae:c3:3a:ed:f4: 71:49:77:0c:e6:2f:cb:11:4b:ef:6f:7f:72:01:c2:17:99:f4: 40:36:5d:af:97:fc:c8:cc:68:61:55:7e:f5:27:70:8d:d8:e8: 2e:12:a8:fd:04:70:3b:ea:60:c3:29:3a:25:f5:da:94:65:c8: 69:4e:8e:16:99:d2:b9:ec:65:52:9b:53:ed:10:ee:50:49:4a: 1a:b6:a8:40:ff:f4:1b:80:af:be:00:05:df:5d:83:d4:c9:8e: 0f:bd:0e:3d -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgIUPkJevwAfCHnWa14dcKR7ROPZES4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMDExNzIwMTdaFw0yNzAyMjgxNzI1MTdaMDMxMTAvBgNV BAMTKDBENkI1MzgzNDlCNDM2QURFOEQxQ0FGQzczRTUzNDFCQkM4OEFENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHQXxeihdoLpk/quSAP7W+b65 TYX0e1uyfh9e001io51coVaWCrG9U3/1oVvhJXA1yzvTG+MK1vFfVuNvcPv4Tx9M esMB2vDe4JAGxf/w3eb3CkVhQE5ETgy+eHhPsuw51980WW8Eu08N0ENm52cVsWC8 8Ks/wqx/nk8pEDMa9pvp5i9CPHM0vWkuGIfyQbGZY7aS0zCW97swaUxsatDjpUWc z3E7m9VrzwxGRoNEkGYztSePkclj/jHdRxAIe3XrmcABspR18pAIqm728VZhP2Xm KWY6+jgfFdV98A3jcZdDgmC17QcAXbMtUC9F/fP3FMhYVyN1Zr7LzYVGrEV1AgMB AAGjggMRMIIDDTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNa1ODSbQ2rejR yvxz5TQbvIitVzAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgzYzkwLzIv MEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJCQzg4QUQ1Ny5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEH AQH/BEIwQDA+BAIAAjA4AwYAKgXfw/oDBgAqCmBEZAMHACoKYESqEAMGACoPYoMQ AwYAKg9igxMDBgQqD2KEUAMFACoPYoYwDQYJKoZIhvcNAQELBQADggEBACoxWo8Y qkz2HKl9SwZ/fuAJ8ej66+2hgj6RqaTtNhNcdlVlWXT+yTGs8Iu7eU89Qcb8sb9g IWrexnACig42hnAfihLWA1FX4DeviOZRe7jY0yRMjowTZzc5chUFkSC+YiZN7vZL 07JszuS+L1KmtM2FPRSlHWWKM2NZgaK3qXd7MLynKgE1OFn/K7svKe01BG3yu2JW wHZYQuCP+32uwzrt9HFJdwzmL8sRS+9vf3IBwheZ9EA2Xa+X/MjMaGFVfvUncI3Y 6C4SqP0EcDvqYMMpOiX12pRlyGlOjhaZ0rnsZVKbU+0Q7lBJShq2qED/9BuAr74A Bd9dg9TJjg+9Dj0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:48:02 2026 by rpki-client