
$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/2/F43B66D2018EF2CDC4298697BF28C89F11886124.cer
File: F43B66D2018EF2CDC4298697BF28C89F11886124.cer (raw, json)
Hash identifier: Gudq6xJ5o/4Rg5nXrqdvU9RENQKSYeS5AwTIXUaIv3o=
Subject key identifier: F4:3B:66:D2:01:8E:F2:CD:C4:29:86:97:BF:28:C8:9F:11:88:61:24
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Certificate issuer: /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial: 532D69977C6DD7B0511DF4646C3F2CB745314ABB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Manifest: rsync://rpki.ruinet.work/repo/CowGrassland/1/F43B66D2018EF2CDC4298697BF28C89F11886124.mft
caRepository: rsync://rpki.ruinet.work/repo/CowGrassland/1/
Notify URL: https://rpki.fengrui.link/rrdp/notification.xml
Certificate not before: Mon 14 Sep 2026 13:13:14 +0000
Certificate not after: Mon 13 Sep 2027 13:18:14 +0000
Subordinate resources: IP: 2a14:7580:7f0::/44
Validation: OK
Signature path: rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2d:69:97:7c:6d:d7:b0:51:1d:f4:64:6c:3f:2c:b7:45:31:4a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Validity
Not Before: Sep 14 13:13:14 2026 GMT
Not After : Sep 13 13:18:14 2027 GMT
Subject: CN=F43B66D2018EF2CDC4298697BF28C89F11886124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:ce:e6:e6:12:ec:75:52:0f:23:9e:33:4a:
37:6c:95:61:ea:e1:1e:f6:54:12:a4:e3:c3:ad:a9:
02:1e:8a:7d:2b:5e:ce:6b:68:8f:1c:6e:f2:a4:c7:
27:54:2f:97:c1:f4:d8:ec:8f:3e:92:be:c8:a2:a3:
b3:52:35:a1:47:5f:e3:02:ba:7a:0d:2d:58:e1:25:
4d:05:37:94:b9:d9:2b:f6:d7:4f:c7:03:4a:c7:58:
31:33:a2:ff:95:71:17:bb:1b:c1:17:ae:47:2f:db:
bf:ac:73:95:0e:b2:64:e9:d8:d4:9d:9e:b5:f6:93:
85:8b:5f:61:ca:87:9c:71:1d:a9:32:35:7d:e6:05:
bb:7b:81:de:6a:ef:2b:5a:45:fa:9e:4f:f9:c4:33:
d1:37:69:be:56:17:9b:11:a9:55:0f:c1:4d:60:22:
af:c7:5c:40:8f:78:10:a9:06:77:4c:18:81:5f:80:
05:8a:4f:8e:83:1a:2f:7d:a1:f6:45:e9:ac:b1:43:
c8:6f:b2:88:7a:ba:23:ff:9a:93:20:b9:f5:4d:f9:
34:e7:d9:fb:ca:76:ca:18:cf:18:b3:50:8a:2f:28:
fd:df:3e:43:ad:41:9d:1a:1b:41:ef:86:50:41:c2:
0c:fc:cf:c4:7d:70:75:cf:45:83:2f:c4:7f:af:19:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:3B:66:D2:01:8E:F2:CD:C4:29:86:97:BF:28:C8:9F:11:88:61:24
X509v3 Authority Key Identifier:
keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ruinet.work/repo/CowGrassland/1/
RPKI Manifest - URI:rsync://rpki.ruinet.work/repo/CowGrassland/1/F43B66D2018EF2CDC4298697BF28C89F11886124.mft
RPKI Notify - URI:https://rpki.fengrui.link/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:7f0::/44
Signature Algorithm: sha256WithRSAEncryption
6d:e3:1e:24:a0:3a:ba:d6:65:bb:e8:41:c9:2e:49:61:ee:3e:
01:79:18:54:a8:04:d5:87:cd:f9:71:4d:ad:7d:bd:ca:fc:23:
87:fc:d8:a6:c1:62:6f:02:97:24:c5:79:16:44:c6:66:73:04:
6a:64:98:b1:19:05:57:98:be:88:b3:93:e7:51:e7:3c:e1:bf:
e4:45:35:d4:65:6e:74:8c:1c:e8:3b:d3:d1:12:57:1e:b9:63:
3b:ea:db:9f:1f:5c:f3:bf:30:a0:7c:fb:00:b3:b8:39:09:ab:
86:49:23:eb:3f:1a:bf:39:c8:fa:6c:3b:15:00:ae:f3:4a:1a:
94:26:ba:79:32:1e:21:3b:60:65:70:3f:ee:07:0c:ac:da:0d:
fe:9b:58:01:b6:90:41:47:8f:56:8a:60:f1:bc:b7:ae:4f:79:
1d:7c:d6:7f:80:29:bc:c2:8d:c1:01:c0:e6:59:a5:5c:8b:d0:
d3:aa:0f:d0:9f:22:53:7c:2f:03:7d:7b:22:4b:34:f2:c7:25:
6f:1e:37:65:6e:e9:92:34:5e:5c:fa:cc:50:f0:af:21:f1:92:
d7:d4:88:43:5f:14:09:2b:09:4c:79:32:1d:7c:e9:1f:b0:e9:
95:69:6a:5f:fc:5d:51:e6:dc:3a:2b:3a:75:79:22:0f:f5:83:
76:36:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:10:26 2026 by rpki-client