$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer (raw, json) Hash identifier: EyOR3kFBU0QpTpoo020C3996Vq/y1VmQmz9szsRBIGU= Subject key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6FF16B081A590C2CD2CA64DC492153A6E8CDD5F8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 06 Jun 2026 06:12:00 +0000 Certificate not after: Sat 05 Jun 2027 06:17:00 +0000 Subordinate resources: IP: 2a0a:6044:a300::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f1:6b:08:1a:59:0c:2c:d2:ca:64:dc:49:21:53:a6:e8:cd:d5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 6 06:12:00 2026 GMT Not After : Jun 5 06:17:00 2027 GMT Subject: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:f5:b2:fd:e1:6b:ec:89:23:f1:ee:76:61: b7:52:0e:20:1c:34:53:c3:2a:bb:57:d3:95:f7:df: 6c:7b:ea:14:f6:ee:9e:04:17:a7:16:1f:70:a7:da: d4:d0:d8:d1:5d:69:46:46:84:c8:ac:73:c5:ba:79: bc:cb:34:60:8d:1e:0f:0e:14:ee:66:45:71:cb:0f: bd:7a:45:06:a1:ee:7d:b4:ff:52:09:cb:ed:39:06: fb:34:ad:ee:f2:d5:5f:00:61:1c:7b:8f:72:16:0a: 81:ef:86:00:73:06:fb:fe:43:24:ae:30:f9:2b:9a: 24:86:72:82:b4:5f:62:e5:82:09:b4:8d:c3:11:94: 33:af:e0:3f:68:65:ef:36:06:ce:34:8d:ab:70:f7: 76:6d:92:ce:f6:ca:2e:f4:df:a9:5c:12:5b:f7:60: 3d:d4:fd:7b:72:d5:0d:97:e2:21:9e:07:a1:bb:1d: cc:6d:fc:a3:cb:e4:5c:27:05:86:7d:2f:a6:ef:66: f8:84:7f:e2:6a:28:36:b1:71:82:d6:0e:21:8d:a7: ba:ae:36:b2:71:1e:c7:38:fc:33:3f:55:4f:cb:77: 53:5e:51:12:58:d1:7b:5a:71:70:f5:ca:17:8e:6d: 52:2b:05:b5:9e:8b:b5:61:da:f6:78:83:cb:4a:61: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a300::/40 Signature Algorithm: sha256WithRSAEncryption 4f:dd:8c:13:77:1c:47:9d:1d:da:58:0b:23:b3:4f:ff:b8:10: 04:ac:69:8a:cf:33:09:76:91:4f:7e:db:5c:25:8a:f0:90:a7: cd:66:b0:8d:83:79:ee:2a:37:6c:fb:d4:e7:92:47:0b:37:7b: 11:0b:ad:96:33:d0:d3:1c:c3:11:be:af:a6:33:c0:b7:cd:24: 48:0a:ea:b1:9c:6f:54:62:f6:bf:96:ff:ae:be:e5:62:a2:c7: dd:f5:8b:8d:15:8e:52:e3:2d:71:e0:18:e2:6a:a5:54:3d:25: 33:80:6c:75:6d:57:77:17:5b:3a:dd:2f:27:66:2a:05:7a:c4: 19:40:64:9f:f7:17:af:27:a7:36:d4:89:2f:fe:6f:42:be:f8: c3:b3:7f:3a:60:7d:d9:3d:c3:45:44:bd:98:b5:fe:c5:4b:a4: 33:f8:82:6b:20:c7:4b:4e:10:0f:7d:15:68:5a:de:77:04:51: 49:91:67:e1:31:42:d9:51:a8:86:8c:9c:38:d0:3b:a4:67:05: 19:4c:23:d6:65:8d:c8:2c:72:d4:a8:64:5b:d4:3a:8a:0c:9e: 9c:90:c1:1b:65:91:74:95:53:3c:30:a8:ba:69:93:4a:f7:50: 9a:d8:1d:37:19:3e:be:b1:f1:3c:8f:38:64:18:1f:62:80:0b: a7:c1:93:3e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUb/FrCBpZDCzSymTcSSFTpujN1fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDYwNjEyMDBaFw0yNzA2MDUwNjE3MDBaMDMxMTAvBgNV BAMTKDJGMkMzMTI0MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZnfWy/eFr7Ikj8e52YbdSDiAc NFPDKrtX05X332x76hT27p4EF6cWH3Cn2tTQ2NFdaUZGhMisc8W6ebzLNGCNHg8O FO5mRXHLD716RQah7n20/1IJy+05Bvs0re7y1V8AYRx7j3IWCoHvhgBzBvv+QySu MPkrmiSGcoK0X2Llggm0jcMRlDOv4D9oZe82Bs40jatw93Ztks72yi7036lcElv3 YD3U/Xty1Q2X4iGeB6G7Hcxt/KPL5FwnBYZ9L6bvZviEf+JqKDaxcYLWDiGNp7qu NrJxHsc4/DM/VU/Ld1NeURJY0XtacXD1yheObVIrBbWei7Vh2vZ4g8tKYYzLAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvLDEkASwH9nda YkHfxjvgQUyYrTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4Lzkv MkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRKMwDQYJKoZIhvcNAQELBQADggEBAE/djBN3 HEedHdpYCyOzT/+4EASsaYrPMwl2kU9+21wlivCQp81msI2Dee4qN2z71OeSRws3 exELrZYz0NMcwxG+r6YzwLfNJEgK6rGcb1Ri9r+W/66+5WKix931i40VjlLjLXHg GOJqpVQ9JTOAbHVtV3cXWzrdLydmKgV6xBlAZJ/3F68npzbUiS/+b0K++MOzfzpg fdk9w0VEvZi1/sVLpDP4gmsgx0tOEA99FWha3ncEUUmRZ+ExQtlRqIaMnDjQO6Rn BRlMI9ZljcgsctSoZFvUOooMnpyQwRtlkXSVUzwwqLppk0r3UJrYHTcZPr6x8TyP OGQYH2KAC6fBkz4= -----END CERTIFICATE-----Generated at Wed Jun 17 08:44:29 2026 by rpki-client