$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer File: 6003354361AF66B2F37153B9A7365EE572F6822E.cer (raw, json) Hash identifier: QyUTyyAgkgdct7t+wZBrt05NuVmmrg3C57OOUsLS0eA= Subject key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 41DA9080DE93F6793C62D17956CE8B310F9B1884 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 05 Jun 2026 18:14:18 +0000 Certificate not after: Fri 04 Jun 2027 18:19:18 +0000 Subordinate resources: IP: 2a0a:6044:ba00::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:da:90:80:de:93:f6:79:3c:62:d1:79:56:ce:8b:31:0f:9b:18:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 5 18:14:18 2026 GMT Not After : Jun 4 18:19:18 2027 GMT Subject: CN=6003354361AF66B2F37153B9A7365EE572F6822E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:49:da:69:c8:aa:7a:44:d8:d8:62:6f:d9: 7b:8d:35:d3:2d:6e:b7:a1:06:63:0f:f0:53:cf:16: 3c:3f:fd:cb:72:85:32:26:19:6e:58:f7:9b:56:6a: f8:81:a8:6e:5b:58:43:82:e6:61:c8:73:25:e5:a0: db:13:73:0a:85:d8:18:2b:89:dd:79:0f:68:9d:4d: 30:8e:4f:25:6b:71:bf:e6:b7:10:47:1c:58:18:4d: 07:93:76:ba:0e:ea:6d:06:e7:9d:16:bc:b7:61:56: 0f:48:dd:46:f1:e2:18:ee:6f:98:4f:01:b1:bf:a1: 2e:4a:ed:b4:d7:b2:30:e4:b9:f2:2b:d3:81:4f:f2: 8f:9d:da:43:15:18:81:81:73:d1:15:91:92:4f:89: ed:ae:b0:66:2d:0f:30:f0:1f:ad:91:d9:67:38:93: 68:8a:0a:a1:f8:d2:9d:6e:65:ef:d8:40:38:91:f5: cb:4e:64:f3:d0:b2:b7:e6:6e:c5:81:63:e5:6e:0f: ce:33:88:a2:a2:a0:41:66:7a:63:ed:ca:aa:7c:b8: 70:73:47:16:32:ec:0d:39:61:3d:ae:0a:42:24:9c: 8f:46:f9:25:47:15:8d:2e:1f:6b:b8:42:02:72:7e: 79:d5:8f:19:b4:eb:ae:fd:8e:b5:af:8b:9b:77:52: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/40 Signature Algorithm: sha256WithRSAEncryption 57:36:93:81:8b:33:8c:4e:ab:89:4d:fb:24:ac:c2:34:21:57: 90:33:5f:ce:cc:4b:dc:28:cd:90:ec:4e:fc:13:5c:d7:4a:f9: 6d:a6:18:1d:5c:ee:d6:f7:98:c0:7a:ea:4b:31:bb:5a:c7:58: df:eb:e9:29:96:0e:e7:59:54:a1:01:09:dd:5a:99:17:de:77: 23:95:bf:05:df:cb:88:0c:c8:ad:47:1e:48:3f:42:a2:32:63: 5b:7d:93:16:cd:56:19:fc:58:e2:6c:81:f4:18:17:58:e6:24: 8d:55:2e:e7:f8:4c:40:68:e3:52:1e:96:58:8a:21:a3:43:99: 32:f6:15:1a:0a:8c:a5:3b:3f:76:d8:f7:88:c0:e4:5e:cd:d8: d5:aa:ba:9d:82:46:80:d8:9a:96:5b:b6:58:b7:36:b1:1a:69: cc:f8:15:58:ef:39:8e:23:4b:44:99:c8:c8:90:2b:5c:d3:f4: 08:95:10:66:8e:7e:17:cb:02:cb:e6:d9:0d:2b:d1:f6:50:44: 9f:28:75:ce:8a:3a:54:82:4d:2a:6a:04:91:bd:6a:52:b2:c7: fd:1e:bf:b4:fa:b2:ef:a2:0f:17:e8:ac:c1:0f:0e:9e:e6:60: b0:ed:fe:52:a7:88:cd:14:29:8b:a5:31:27:2b:ed:a1:2f:75: 97:ae:8b:a7 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQdqQgN6T9nk8YtF5Vs6LMQ+bGIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDUxODE0MThaFw0yNzA2MDQxODE5MThaMDMxMTAvBgNV BAMTKDYwMDMzNTQzNjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMb0naaciqekTY2GJv2XuNNdMt brehBmMP8FPPFjw//ctyhTImGW5Y95tWaviBqG5bWEOC5mHIcyXloNsTcwqF2Bgr id15D2idTTCOTyVrcb/mtxBHHFgYTQeTdroO6m0G550WvLdhVg9I3Ubx4hjub5hP AbG/oS5K7bTXsjDkufIr04FP8o+d2kMVGIGBc9EVkZJPie2usGYtDzDwH62R2Wc4 k2iKCqH40p1uZe/YQDiR9ctOZPPQsrfmbsWBY+VuD84ziKKioEFmemPtyqp8uHBz RxYy7A05YT2uCkIknI9G+SVHFY0uH2u4QgJyfnnVjxm06679jrWvi5t3UkavAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgAzVDYa9msvNx U7mnNl7lcvaCLjAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzYv NjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRLowDQYJKoZIhvcNAQELBQADggEBAFc2k4GL M4xOq4lN+ySswjQhV5AzX87MS9wozZDsTvwTXNdK+W2mGB1c7tb3mMB66ksxu1rH WN/r6SmWDudZVKEBCd1amRfedyOVvwXfy4gMyK1HHkg/QqIyY1t9kxbNVhn8WOJs gfQYF1jmJI1VLuf4TEBo41IelliKIaNDmTL2FRoKjKU7P3bY94jA5F7N2NWqup2C RoDYmpZbtli3NrEaacz4FVjvOY4jS0SZyMiQK1zT9AiVEGaOfhfLAsvm2Q0r0fZQ RJ8odc6KOlSCTSpqBJG9alKyx/0ev7T6su+iDxforMEPDp7mYLDt/lKniM0UKYul MScr7aEvdZeui6c= -----END CERTIFICATE-----Generated at Sat Jun 13 14:13:54 2026 by rpki-client