$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer File: E9EB50E364277CEB063DCA8C371364FE1CC98844.cer (raw, json) Hash identifier: 1qS8MdKDw4hii6txrLztxSaffEgP+vh9A8ix5BSkLvc= Subject key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 60CC5DF06F0EA44AE371F220E8EBDD701523F240 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 05 Jun 2026 05:16:13 +0000 Certificate not after: Fri 04 Jun 2027 05:21:13 +0000 Subordinate resources: IP: 2a0a:6044:a800::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cc:5d:f0:6f:0e:a4:4a:e3:71:f2:20:e8:eb:dd:70:15:23:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 5 05:16:13 2026 GMT Not After : Jun 4 05:21:13 2027 GMT Subject: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:03:a5:32:3d:fa:31:26:39:54:37:af:e9: 74:45:33:59:b8:40:5b:19:80:c6:bd:4c:fe:e2:91: 71:fe:18:ab:ec:27:06:c6:6b:37:c3:ff:7b:ec:e0: 42:90:14:26:33:45:35:c2:19:f4:76:87:7b:0d:b4: 45:71:02:67:8a:7e:c6:b8:66:c0:ad:cb:2d:55:3d: 61:21:e7:f5:53:31:bc:22:26:79:93:be:6f:91:a2: 6e:e2:8d:19:61:31:40:64:e8:65:a6:ad:be:82:fb: 3d:ab:c6:35:58:af:eb:d5:b2:de:c6:7b:2d:5a:44: 75:ee:cf:4f:23:9d:aa:f2:09:21:fc:c3:a7:29:5b: 44:fa:a7:08:5e:26:5d:27:90:04:b4:59:a5:40:8b: d7:1b:52:16:04:a6:74:5a:3b:e1:c0:08:35:5c:93: 86:83:0b:1b:c0:fa:ae:08:e7:09:87:07:a4:ec:eb: 8d:e7:db:10:12:4b:23:61:ee:88:b3:73:75:17:50: 2d:47:d8:32:76:bd:a4:43:87:dc:a1:3f:33:4c:7c: 58:86:85:82:f6:52:b0:16:27:ad:37:c3:da:e7:bf: 12:72:0a:09:a1:20:68:bb:71:47:ed:42:f0:09:4a: 9b:8f:96:fa:8f:2f:9a:07:7f:87:7c:51:1c:44:c0: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a800::/40 Signature Algorithm: sha256WithRSAEncryption 3b:ff:c4:c8:d8:f1:78:3e:15:41:27:20:53:9b:19:f1:56:b8: d7:66:98:7c:27:f1:fb:01:38:9a:fa:e9:b6:05:c7:cf:79:4e: a7:ec:47:d2:47:d2:05:b6:e5:aa:7a:aa:63:5d:e0:dc:2f:f1: 25:81:b3:83:d9:fc:98:50:89:af:71:19:ed:ed:c9:4d:64:e3: a2:c0:67:70:10:1c:62:cc:e5:ed:9d:4c:c2:7e:1c:b3:a2:b5: 27:14:ca:f3:d2:cf:4f:f1:eb:cc:d1:80:a1:43:40:22:ce:a7: c3:f3:2a:5d:c1:c6:a6:25:00:38:7f:c3:4b:52:fe:9e:cf:81: d1:a0:55:09:12:71:cb:94:1e:05:4e:38:16:5b:16:95:f4:69: 03:50:ff:7a:0b:97:b3:b0:39:ce:0b:42:5d:0d:44:33:ca:9c: f0:f5:27:2d:24:b0:40:d1:f7:6f:7c:5e:ac:29:a9:61:24:d2: b8:fe:09:2d:bb:9a:22:19:ee:8a:57:05:00:d0:64:83:71:eb: 81:94:ab:3a:c3:7c:55:dd:3d:32:5f:b3:94:a4:82:03:c4:69: 18:73:f9:0a:0a:39:63:26:c1:2c:5c:0d:20:2d:38:ae:c6:c1: e3:bc:b8:e3:95:f1:7f:1b:a3:7d:15:d4:fc:10:09:8a:34:88: 86:5d:69:4d -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUYMxd8G8OpErjcfIg6OvdcBUj8kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDUwNTE2MTNaFw0yNzA2MDQwNTIxMTNaMDMxMTAvBgNV BAMTKEU5RUI1MEUzNjQyNzdDRUIwNjNEQ0E4QzM3MTM2NEZFMUNDOTg4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6AOlMj36MSY5VDev6XRFM1m4 QFsZgMa9TP7ikXH+GKvsJwbGazfD/3vs4EKQFCYzRTXCGfR2h3sNtEVxAmeKfsa4 ZsCtyy1VPWEh5/VTMbwiJnmTvm+Rom7ijRlhMUBk6GWmrb6C+z2rxjVYr+vVst7G ey1aRHXuz08jnaryCSH8w6cpW0T6pwheJl0nkAS0WaVAi9cbUhYEpnRaO+HACDVc k4aDCxvA+q4I5wmHB6Ts643n2xASSyNh7oizc3UXUC1H2DJ2vaRDh9yhPzNMfFiG hYL2UrAWJ603w9rnvxJyCgmhIGi7cUftQvAJSpuPlvqPL5oHf4d8URxEwJONAgMB AAGjggLFMIICwTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTp61DjZCd86wY9 yow3E2T+HMmIRDAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMFQG CCsGAQUFBzAFhkhyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkv OGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC8wgYAGCCsGAQUFBzAK hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5 MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC9FOUVCNTBFMzY0Mjc3Q0VCMDYzRENB OEMzNzEzNjRGRTFDQzk4ODQ0Lm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRw LXJwcy5hcmluLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEqDANBgkq hkiG9w0BAQsFAAOCAQEAO//EyNjxeD4VQScgU5sZ8Va412aYfCfx+wE4mvrptgXH z3lOp+xH0kfSBbblqnqqY13g3C/xJYGzg9n8mFCJr3EZ7e3JTWTjosBncBAcYszl 7Z1Mwn4cs6K1JxTK89LPT/HrzNGAoUNAIs6nw/MqXcHGpiUAOH/DS1L+ns+B0aBV CRJxy5QeBU44FlsWlfRpA1D/eguXs7A5zgtCXQ1EM8qc8PUnLSSwQNH3b3xerCmp YSTSuP4JLbuaIhnuilcFANBkg3HrgZSrOsN8Vd09Ml+zlKSCA8RpGHP5Cgo5YybB LFwNIC04rsbB47y445XxfxujfRXU/BAJijSIhl1pTQ== -----END CERTIFICATE-----Generated at Sat Jun 13 12:58:05 2026 by rpki-client