$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/F43B66D2018EF2CDC4298697BF28C89F11886124.cer File: F43B66D2018EF2CDC4298697BF28C89F11886124.cer (raw, json) Hash identifier: Ru1hUedlvyt2m6poO2SxbK8zbfP9khsqPkMqZP22yRs= Subject key identifier: F4:3B:66:D2:01:8E:F2:CD:C4:29:86:97:BF:28:C8:9F:11:88:61:24 Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78 Certificate issuer: /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378 Certificate serial: 01D0FDE40715D840694877A02E4D2506667F9CFB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer Manifest: rsync://rpki.ruinet.work/repo/CowGrassland/1/F43B66D2018EF2CDC4298697BF28C89F11886124.mft caRepository: rsync://rpki.ruinet.work/repo/CowGrassland/1/ Notify URL: https://rpki.fengrui.link/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 23:29:24 +0000 Certificate not after: Mon 21 Sep 2026 23:34:24 +0000 Subordinate resources: IP: 2a14:7580:7f0::/44 Validation: OK Signature path: rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d0:fd:e4:07:15:d8:40:69:48:77:a0:2e:4d:25:06:66:7f:9c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378 Validity Not Before: Sep 22 23:29:24 2025 GMT Not After : Sep 21 23:34:24 2026 GMT Subject: CN=F43B66D2018EF2CDC4298697BF28C89F11886124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:ce:e6:e6:12:ec:75:52:0f:23:9e:33:4a: 37:6c:95:61:ea:e1:1e:f6:54:12:a4:e3:c3:ad:a9: 02:1e:8a:7d:2b:5e:ce:6b:68:8f:1c:6e:f2:a4:c7: 27:54:2f:97:c1:f4:d8:ec:8f:3e:92:be:c8:a2:a3: b3:52:35:a1:47:5f:e3:02:ba:7a:0d:2d:58:e1:25: 4d:05:37:94:b9:d9:2b:f6:d7:4f:c7:03:4a:c7:58: 31:33:a2:ff:95:71:17:bb:1b:c1:17:ae:47:2f:db: bf:ac:73:95:0e:b2:64:e9:d8:d4:9d:9e:b5:f6:93: 85:8b:5f:61:ca:87:9c:71:1d:a9:32:35:7d:e6:05: bb:7b:81:de:6a:ef:2b:5a:45:fa:9e:4f:f9:c4:33: d1:37:69:be:56:17:9b:11:a9:55:0f:c1:4d:60:22: af:c7:5c:40:8f:78:10:a9:06:77:4c:18:81:5f:80: 05:8a:4f:8e:83:1a:2f:7d:a1:f6:45:e9:ac:b1:43: c8:6f:b2:88:7a:ba:23:ff:9a:93:20:b9:f5:4d:f9: 34:e7:d9:fb:ca:76:ca:18:cf:18:b3:50:8a:2f:28: fd:df:3e:43:ad:41:9d:1a:1b:41:ef:86:50:41:c2: 0c:fc:cf:c4:7d:70:75:cf:45:83:2f:c4:7f:af:19: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:3B:66:D2:01:8E:F2:CD:C4:29:86:97:BF:28:C8:9F:11:88:61:24 X509v3 Authority Key Identifier: keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer Subject Information Access: CA Repository - URI:rsync://rpki.ruinet.work/repo/CowGrassland/1/ RPKI Manifest - URI:rsync://rpki.ruinet.work/repo/CowGrassland/1/F43B66D2018EF2CDC4298697BF28C89F11886124.mft RPKI Notify - URI:https://rpki.fengrui.link/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:7f0::/44 Signature Algorithm: sha256WithRSAEncryption 91:cb:95:e7:9f:64:5d:62:d6:e0:47:59:16:ef:7d:b5:09:b5: 13:cb:0e:95:8a:d9:8b:cf:0f:9c:20:8e:6e:51:bc:b4:29:3b: 8f:b7:ae:2a:aa:30:bd:3b:fd:74:36:c3:77:c8:2c:69:14:b6: 1b:2b:a7:4c:30:28:02:4a:10:04:7d:b5:57:20:d0:39:8a:14: be:7e:f1:c1:88:1f:c7:ff:16:7d:f7:cb:da:c7:91:ed:75:ff: 2c:8c:7b:68:88:b6:de:42:b9:5d:7c:c1:46:8d:9b:6e:aa:f7: 06:60:ae:78:80:1a:fb:31:e1:60:dc:29:e2:ea:d8:9f:7f:ce: f2:a2:9a:25:7b:62:74:f3:d2:44:f5:cc:eb:a9:8b:5a:86:11: c4:50:9b:a5:4e:75:5b:82:3b:07:1f:e5:0c:fa:19:d9:1a:b4: 14:e3:32:c5:70:3c:3d:a4:b4:d8:b8:4f:1c:96:0d:73:c6:1d: 76:26:e7:61:fe:f2:f4:4e:c2:06:f4:a6:be:bb:a1:92:3b:c0: 9e:60:c1:63:66:46:97:29:92:9d:9b:6a:ee:16:13:58:64:df: 44:1e:6e:85:fb:bd:7b:a1:6f:f5:7e:f1:f4:80:d2:05:32:a0: fa:21:af:30:18:c9:7a:d5:a6:79:4d:de:6f:d4:d6:5d:66:38: 3f:3e:eb:3c -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUAdD95AcV2EBpSHegLk0lBmZ/nPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJG RkZENzM3ODAeFw0yNTA5MjIyMzI5MjRaFw0yNjA5MjEyMzM0MjRaMDMxMTAvBgNV BAMTKEY0M0I2NkQyMDE4RUYyQ0RDNDI5ODY5N0JGMjhDODlGMTE4ODYxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTV87m5hLsdVIPI54zSjdslWHq 4R72VBKk48OtqQIein0rXs5raI8cbvKkxydUL5fB9Njsjz6Svsiio7NSNaFHX+MC unoNLVjhJU0FN5S52Sv210/HA0rHWDEzov+VcRe7G8EXrkcv27+sc5UOsmTp2NSd nrX2k4WLX2HKh5xxHakyNX3mBbt7gd5q7ytaRfqeT/nEM9E3ab5WF5sRqVUPwU1g Iq/HXECPeBCpBndMGIFfgAWKT46DGi99ofZF6ayxQ8hvsoh6uiP/mpMgufVN+TTn 2fvKdsoYzxizUIovKP3fPkOtQZ0aG0HvhlBBwgz8z8R9cHXPRYMvxH+vGbvRAgMB AAGjggKhMIICnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0O2bSAY7yzcQp hpe/KMifEYhhJDAfBgNVHSMEGDAWgBT23m/HrEZ/ELVwXmC4/doC//1zeDAOBgNV HQ8BAf8EBAMCAQYwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9ycGtpLmF4aXZv cmEubmV0L3JlcG8vQXhpdm9yYS1OZXQvMi9GNkRFNkZDN0FDNDY3RjEwQjU3MDVF NjBCOEZEREEwMkZGRkQ3Mzc4LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsG AQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0Y2REU2 RkM3QUM0NjdGMTBCNTcwNUU2MEI4RkREQTAyRkZGRDczNzguY2VyMIHvBggrBgEF BQcBCwSB4jCB3zA5BggrBgEFBQcwBYYtcnN5bmM6Ly9ycGtpLnJ1aW5ldC53b3Jr L3JlcG8vQ293R3Jhc3NsYW5kLzEvMGUGCCsGAQUFBzAKhllyc3luYzovL3Jwa2ku cnVpbmV0LndvcmsvcmVwby9Db3dHcmFzc2xhbmQvMS9GNDNCNjZEMjAxOEVGMkNE QzQyOTg2OTdCRjI4Qzg5RjExODg2MTI0Lm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6 Ly9ycGtpLmZlbmdydWkubGluay9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH BCoUdYAH8DANBgkqhkiG9w0BAQsFAAOCAQEAkcuV559kXWLW4EdZFu99tQm1E8sO lYrZi88PnCCOblG8tCk7j7euKqowvTv9dDbDd8gsaRS2GyunTDAoAkoQBH21VyDQ OYoUvn7xwYgfx/8WfffL2seR7XX/LIx7aIi23kK5XXzBRo2bbqr3BmCueIAa+zHh YNwp4urYn3/O8qKaJXtidPPSRPXM66mLWoYRxFCbpU51W4I7Bx/lDPoZ2Rq0FOMy xXA8PaS02LhPHJYNc8YddibnYf7y9E7CBvSmvruhkjvAnmDBY2ZGlymSnZtq7hYT WGTfRB5uhfu9e6Fv9X7x9IDSBTKg+iGvMBjJetWmeU3eb9TWXWY4Pz7rPA== -----END CERTIFICATE-----Generated at Tue Nov 4 20:36:50 2025 by rpki-client