$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer (raw, json) Hash identifier: L+IuoXIv9HLZAF9tvSCjT/oEdJyWmXTRsTqGq63lSrQ= Subject key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 46E250A89222AEFAA6367F6214FE26278ECE399C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Jul 2025 10:14:17 +0000 Certificate not after: Fri 03 Jul 2026 10:19:17 +0000 Subordinate resources: IP: 2a0a:6044:7c00::/40 IP: 2a0a:6044:8000::/36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e2:50:a8:92:22:ae:fa:a6:36:7f:62:14:fe:26:27:8e:ce:39:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 4 10:14:17 2025 GMT Not After : Jul 3 10:19:17 2026 GMT Subject: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:9c:49:95:95:c8:21:10:28:eb:46:8d:ce: 0d:32:80:68:e4:77:9e:11:97:80:a2:9d:e0:68:61: e9:21:76:2d:8c:c7:0a:38:a0:4d:8a:7d:0c:04:ba: 9b:ca:9f:5a:a8:41:90:82:c5:49:89:b5:f5:99:1c: 2d:3f:7b:94:ff:11:a2:bf:c6:4d:02:55:b2:c8:83: 13:57:1e:9e:ae:c4:0b:6f:48:da:99:79:9e:0f:c5: c9:32:ca:8d:e4:fe:ca:47:47:9c:79:24:de:b3:d8: bf:23:11:75:69:a2:5d:58:75:be:9c:ee:cf:16:1a: ff:df:09:57:d8:2b:23:c2:28:60:ae:22:4c:1a:da: 82:ab:b8:ef:91:1e:cb:33:78:c4:62:d1:c3:a5:29: 06:70:49:1d:de:66:16:41:77:0b:67:60:29:e7:66: 21:c6:a5:b1:01:92:72:ba:95:65:9c:28:ac:c5:cc: 07:ba:9c:bb:fd:9d:2e:3a:57:f0:98:0d:22:0d:ba: 9c:c1:27:2a:f8:62:9e:4b:7d:3b:fe:8c:03:72:cb: 69:eb:7d:05:c7:c1:c8:e7:f4:3f:6c:e0:26:8d:f3: 67:9b:dd:af:8c:e5:1a:48:40:cd:66:c6:1c:d1:ca: f9:4e:54:07:d9:2c:9a:1c:52:d0:7e:83:d8:62:43: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7c00::/40 2a0a:6044:8000::/36 Signature Algorithm: sha256WithRSAEncryption 13:66:50:5c:ab:30:38:cc:94:fe:8d:e5:b6:26:bd:29:69:9a: 6a:25:96:63:af:12:1c:94:29:5a:80:2c:4a:47:5e:b9:fc:05: 16:66:0f:7d:2c:03:76:4c:31:43:40:36:23:b8:d5:3b:72:6e: 76:fe:23:92:0f:41:e0:c1:23:fa:ea:c3:14:15:88:0a:fb:e7: 9e:d0:5f:62:9d:c7:9e:60:3e:27:8f:30:ad:58:4d:e7:46:6c: 4b:e6:2e:7d:3e:b3:ac:cf:d8:d2:13:88:2c:7c:ce:f3:90:b0: 47:e7:10:b6:cb:71:14:79:74:1b:79:25:f0:b7:f3:bf:70:e2: 35:df:3a:32:74:e5:70:11:79:13:a7:f7:74:2e:95:25:fa:90: 2d:cd:05:bf:dc:79:64:3c:2b:3b:8d:93:7d:fc:57:82:51:a1: 55:c9:8b:aa:9b:cc:95:dd:97:25:5d:96:c9:84:5e:5c:2d:48: 5b:26:fa:db:0e:0c:41:75:8d:e2:18:9b:22:46:9a:47:f1:2e: 6f:f1:3f:a4:4e:0a:6e:49:63:3c:43:c2:2b:94:16:46:ee:6b: 6b:85:bf:9b:ab:10:51:6e:eb:9b:3d:ac:f7:91:68:89:eb:3a: 09:7f:7c:16:8d:67:29:68:c1:21:f2:62:23:ea:e5:82:fa:a9: 9e:17:cf:fb -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgIURuJQqJIirvqmNn9iFP4mJ47OOZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDQxMDE0MTdaFw0yNjA3MDMxMDE5MTdaMDMxMTAvBgNV BAMTKDdDNEUyNTcxRDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9JxJlZXIIRAo60aNzg0ygGjk d54Rl4CineBoYekhdi2Mxwo4oE2KfQwEupvKn1qoQZCCxUmJtfWZHC0/e5T/EaK/ xk0CVbLIgxNXHp6uxAtvSNqZeZ4Pxckyyo3k/spHR5x5JN6z2L8jEXVpol1Ydb6c 7s8WGv/fCVfYKyPCKGCuIkwa2oKruO+RHsszeMRi0cOlKQZwSR3eZhZBdwtnYCnn ZiHGpbEBknK6lWWcKKzFzAe6nLv9nS46V/CYDSINupzBJyr4Yp5LfTv+jANyy2nr fQXHwcjn9D9s4CaN82eb3a+M5RpIQM1mxhzRyvlOVAfZLJocUtB+g9hiQ2KfAgMB AAGjggLpMIIC5TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8TiVx05U164O0 vdTkZootLBd2MTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2MmNiLzUv N0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEH AQH/BBowGDAWBAIAAjAQAwYAKgpgRHwDBgQqCmBEgDANBgkqhkiG9w0BAQsFAAOC AQEAE2ZQXKswOMyU/o3ltia9KWmaaiWWY68SHJQpWoAsSkdeufwFFmYPfSwDdkwx Q0A2I7jVO3Judv4jkg9B4MEj+urDFBWICvvnntBfYp3HnmA+J48wrVhN50ZsS+Yu fT6zrM/Y0hOILHzO85CwR+cQtstxFHl0G3kl8Lfzv3DiNd86MnTlcBF5E6f3dC6V JfqQLc0Fv9x5ZDwrO42TffxXglGhVcmLqpvMld2XJV2WyYReXC1IWyb62w4MQXWN 4hibIkaaR/Eub/E/pE4KbkljPEPCK5QWRu5ra4W/m6sQUW7rmz2s95Foies6CX98 Fo1nKWjBIfJiI+rlgvqpnhfP+w== -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:49 2025 by rpki-client