$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer (raw, json) Hash identifier: Jf1jpVcjr8NGHTxYGBd5CuqSOMNQU3Wg3lWTcY7k/0g= Subject key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 030819EE33E03BC61AB7B41BDBA14F1DA4B5BF4A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 24 Jul 2025 10:59:48 +0000 Certificate not after: Thu 23 Jul 2026 11:04:48 +0000 Subordinate resources: IP: 2a0a:6044:b300::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:08:19:ee:33:e0:3b:c6:1a:b7:b4:1b:db:a1:4f:1d:a4:b5:bf:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 24 10:59:48 2025 GMT Not After : Jul 23 11:04:48 2026 GMT Subject: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:d5:a9:ea:fa:12:d0:c4:96:92:47:43:c5: 27:da:6c:50:68:e1:63:0a:26:97:cc:32:fd:ad:d4: 4b:15:f4:90:92:25:0a:1d:79:71:eb:a2:c1:c5:16: 32:a1:ba:05:1b:41:7b:bf:ba:b4:ae:61:62:12:48: 63:0f:96:84:c8:e8:5d:cd:ab:b1:08:4b:47:f9:0f: ac:4a:48:fd:32:5c:f3:88:8a:47:fb:bf:a7:f2:ae: da:2e:37:aa:0c:f4:e8:90:5a:99:e9:09:4c:c6:52: 78:e3:a8:2e:20:98:7b:d2:dd:88:48:ee:63:4a:ec: 93:3d:31:58:cb:99:38:56:97:51:db:03:1c:7e:ad: a3:20:c4:0d:5a:ef:7b:00:f7:2d:f5:84:98:99:87: 53:49:ae:ca:f2:ef:26:7a:c3:a8:6d:6c:c1:a0:02: ef:8d:4c:bb:46:51:1d:d5:30:40:32:7c:a7:28:ae: 0b:6d:6f:b7:fc:87:99:0e:35:81:e2:62:97:5f:0e: ff:70:bd:79:c5:92:89:0f:5a:8c:db:91:8e:04:cb: 2e:92:7b:ad:65:71:3a:40:40:f8:6a:78:47:a1:50: 9f:4a:4c:2c:2f:7a:86:42:08:43:57:7d:94:03:02: e1:80:21:3a:78:01:29:ff:5a:df:6b:1c:4b:e1:cf: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b300::/40 Signature Algorithm: sha256WithRSAEncryption 05:57:12:11:2f:8b:67:16:d4:63:b7:e0:47:84:46:49:53:6d: 4c:11:7c:ad:55:5a:86:c5:92:e0:18:65:7a:85:f6:dd:aa:01: 0e:ca:29:30:ab:66:3b:61:fe:c1:4c:bb:5d:7a:1d:02:18:c9: 22:bb:81:f0:98:6a:e0:2c:10:5d:4a:c1:31:65:2e:fc:ae:b5: 6c:88:d5:4e:01:6e:a0:1c:d2:0e:75:45:3e:41:17:41:3c:c9: 55:0f:f9:95:97:45:03:1d:96:64:4a:84:6e:15:42:a3:d8:16: 40:02:fa:09:c9:33:dd:80:41:39:dd:95:85:94:65:95:1f:39: 80:65:2b:f4:e6:61:b6:d2:e6:1c:5a:f7:d6:41:a3:79:3c:09: 2b:8f:4e:cb:f4:a8:ed:89:ee:08:03:90:87:01:ca:53:bc:1d: f7:c7:3a:de:ad:d9:c6:32:dd:6d:55:d6:16:dc:25:89:23:f2: 3b:79:35:51:1e:3f:36:59:62:64:31:a1:8c:ba:27:04:ae:0f: d5:8b:2a:cb:0d:c5:d9:20:83:d4:8a:a0:5d:4d:58:e8:94:71: f1:9b:c8:c9:5c:7e:97:24:cb:39:b0:a9:26:24:bd:8f:26:b4: f5:b0:69:81:03:85:40:69:32:b7:1c:be:bf:7c:d3:39:cc:a2: ae:7b:ef:9b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUAwgZ7jPgO8Yat7Qb26FPHaS1v0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MjQxMDU5NDhaFw0yNjA3MjMxMTA0NDhaMDMxMTAvBgNV BAMTKEIzRjBENzczRENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxdWp6voS0MSWkkdDxSfabFBo 4WMKJpfMMv2t1EsV9JCSJQodeXHrosHFFjKhugUbQXu/urSuYWISSGMPloTI6F3N q7EIS0f5D6xKSP0yXPOIikf7v6fyrtouN6oM9OiQWpnpCUzGUnjjqC4gmHvS3YhI 7mNK7JM9MVjLmThWl1HbAxx+raMgxA1a73sA9y31hJiZh1NJrsry7yZ6w6htbMGg Au+NTLtGUR3VMEAyfKcorgttb7f8h5kONYHiYpdfDv9wvXnFkokPWozbkY4Eyy6S e61lcTpAQPhqeEehUJ9KTCwveoZCCENXfZQDAuGAITp4ASn/Wt9rHEvhz5wRAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSz8Ndz3L5SOj+x 9dJtADNIdLyfsjAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRlYTA5LzIv QjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRLMwDQYJKoZIhvcNAQELBQADggEBAAVXEhEv i2cW1GO34EeERklTbUwRfK1VWobFkuAYZXqF9t2qAQ7KKTCrZjth/sFMu116HQIY ySK7gfCYauAsEF1KwTFlLvyutWyI1U4BbqAc0g51RT5BF0E8yVUP+ZWXRQMdlmRK hG4VQqPYFkAC+gnJM92AQTndlYWUZZUfOYBlK/TmYbbS5hxa99ZBo3k8CSuPTsv0 qO2J7ggDkIcBylO8HffHOt6t2cYy3W1V1hbcJYkj8jt5NVEePzZZYmQxoYy6JwSu D9WLKssNxdkgg9SKoF1NWOiUcfGbyMlcfpckyzmwqSYkvY8mtPWwaYEDhUBpMrcc vr980znMoq5775s= -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:46 2025 by rpki-client