$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer (raw, json) Hash identifier: 2lYHXiDSyylhMaypEl+xBcuhfgxSDLfbKMRJJA/SpbE= Subject key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78 Certificate issuer: /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378 Certificate serial: 1D0387BD437DF3FEF2F33356578F0F5BE0A2E9D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 31 Oct 2025 16:31:52 +0000 Certificate not after: Fri 30 Oct 2026 16:36:52 +0000 Subordinate resources: IP: 2a14:7580:770::/44 Validation: OK Signature path: rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:03:87:bd:43:7d:f3:fe:f2:f3:33:56:57:8f:0f:5b:e0:a2:e9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378 Validity Not Before: Oct 31 16:31:52 2025 GMT Not After : Oct 30 16:36:52 2026 GMT Subject: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:a4:ed:32:74:83:fd:95:ea:74:7d:4c:f2: 1f:91:f8:7f:6e:2c:19:19:6a:ee:70:d2:10:5c:5d: b3:ce:76:a1:10:4b:3a:b5:67:51:ef:03:41:dd:dc: 8b:5e:1c:5b:d3:5f:4b:28:5b:78:e7:4b:f7:8b:6a: 96:4f:c2:b9:ea:1a:b0:47:1f:00:da:84:78:0f:aa: df:58:51:e4:73:e1:15:a1:ec:66:e2:d0:85:26:7a: 7c:39:96:21:99:67:46:b9:76:23:01:d4:ea:0a:33: fa:5e:92:15:a6:e9:85:be:fd:3a:78:ab:4b:73:e1: 5d:4c:1a:59:a1:2a:42:ed:35:24:42:3d:c4:bb:52: 10:24:b6:9c:76:f9:88:21:eb:75:fd:92:e9:8a:3a: ce:52:aa:d1:f5:9b:3d:61:47:11:f3:82:20:56:b3: 9f:94:9b:4c:80:d0:58:b5:20:c3:08:b8:10:71:50: 76:89:d7:55:4a:49:25:22:5d:1c:4c:cd:19:72:5b: 94:ba:4c:90:aa:ce:bc:bb:a6:18:d5:47:31:04:69: fa:54:b3:3b:56:4d:01:08:83:8a:0f:19:6b:c4:ca: 3d:c6:c8:5c:34:82:9d:2c:f1:08:ea:e0:77:fa:da: 66:5f:0a:38:22:b0:e4:10:02:60:dc:de:89:fa:c7: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Authority Key Identifier: keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:770::/44 Signature Algorithm: sha256WithRSAEncryption 6b:db:a4:9e:40:89:e2:d9:6c:98:2e:5a:e4:c4:8c:e6:cd:38: 0f:37:90:0a:8e:b4:e0:b8:e6:fa:6e:5a:e5:f0:a7:8f:47:a9: d4:61:35:80:48:13:2e:54:b4:f5:ff:4b:2b:29:05:e5:a2:4f: fe:09:c8:9e:f0:e1:80:f2:9e:39:d2:87:d6:6c:90:6c:d0:ec: 3a:e1:3d:26:92:cf:3f:c6:74:40:82:8a:52:6b:93:f3:28:d3: ea:7c:a2:89:e4:48:14:57:88:6f:b7:c0:a1:27:e8:38:30:7b: 51:dd:8e:60:d4:49:ff:98:c9:62:b8:1f:f6:65:e0:54:3e:c0: e3:da:ff:90:bb:b0:eb:f4:f4:68:4b:7a:38:fc:6c:4b:7c:8d: a9:3e:59:89:a6:ee:22:1f:b2:79:6e:2e:57:ee:85:09:6c:9d: ce:60:a7:46:28:da:91:ad:f0:26:ef:db:80:3a:47:1f:9d:34: da:7b:47:c6:3c:b8:61:81:d8:e5:1b:16:71:d8:db:b3:4c:a8: 05:cd:bb:9b:5f:76:c1:fe:5e:c9:a9:f8:bb:b4:19:eb:2c:54: ab:40:89:eb:c6:ec:a1:a9:d3:c4:fe:12:f5:91:14:27:7f:38: cd:3b:ba:1b:2c:4a:41:37:ff:de:e8:39:17:00:d2:01:d4:f9: 69:aa:dd:49 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUHQOHvUN98/7y8zNWV48PW+Ci6dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJG RkZENzM3ODAeFw0yNTEwMzExNjMxNTJaFw0yNjEwMzAxNjM2NTJaMDMxMTAvBgNV BAMTKDI1OEQxQ0UwQ0I3NkE5ODZFNTZDN0E5MEE2NkJBN0RDNzJGNTk1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb5KTtMnSD/ZXqdH1M8h+R+H9u LBkZau5w0hBcXbPOdqEQSzq1Z1HvA0Hd3IteHFvTX0soW3jnS/eLapZPwrnqGrBH HwDahHgPqt9YUeRz4RWh7Gbi0IUmenw5liGZZ0a5diMB1OoKM/pekhWm6YW+/Tp4 q0tz4V1MGlmhKkLtNSRCPcS7UhAktpx2+Ygh63X9kumKOs5SqtH1mz1hRxHzgiBW s5+Um0yA0Fi1IMMIuBBxUHaJ11VKSSUiXRxMzRlyW5S6TJCqzry7phjVRzEEafpU sztWTQEIg4oPGWvEyj3GyFw0gp0s8Qjq4Hf62mZfCjgisOQQAmDc3on6x/AlAgMB AAGjggLyMIIC7jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQljRzgy3aphuVs epCma6fccvWVKjAfBgNVHSMEGDAWgBT23m/HrEZ/ELVwXmC4/doC//1zeDAOBgNV HQ8BAf8EBAMCAQYwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9ycGtpLmF4aXZv cmEubmV0L3JlcG8vQXhpdm9yYS1OZXQvMi9GNkRFNkZDN0FDNDY3RjEwQjU3MDVF NjBCOEZEREEwMkZGRkQ3Mzc4LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsG AQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0Y2REU2 RkM3QUM0NjdGMTBCNTcwNUU2MEI4RkREQTAyRkZGRDczNzguY2VyMIIBPwYIKwYB BQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wM2ZkMGI3Ni03MjQzLTRiMjYtOTc2MC1j YzA3Yjk0YmZlMjMvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAzZmQwYjc2LTcyNDMtNGIyNi05NzYw LWNjMDdiOTRiZmUyMy8xLzI1OEQxQ0UwQ0I3NkE5ODZFNTZDN0E5MEE2NkJBN0RD NzJGNTk1MkEubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtp LnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoUdYAHcDANBgkqhkiG 9w0BAQsFAAOCAQEAa9uknkCJ4tlsmC5a5MSM5s04DzeQCo604Ljm+m5a5fCnj0ep 1GE1gEgTLlS09f9LKykF5aJP/gnInvDhgPKeOdKH1myQbNDsOuE9JpLPP8Z0QIKK UmuT8yjT6nyiieRIFFeIb7fAoSfoODB7Ud2OYNRJ/5jJYrgf9mXgVD7A49r/kLuw 6/T0aEt6OPxsS3yNqT5ZiabuIh+yeW4uV+6FCWydzmCnRijaka3wJu/bgDpHH500 2ntHxjy4YYHY5RsWcdjbs0yoBc27m192wf5eyan4u7QZ6yxUq0CJ68bsoanTxP4S 9ZEUJ384zTu6GyxKQTf/3ug5FwDSAdT5aardSQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:36:52 2025 by rpki-client