$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer File: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer (raw, json) Hash identifier: K9XY2n4jk7Tq8GaMPnVmDCC5yfGQuenSufStnXxsNYU= Subject key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 6E973E9B8D87C748B8CA18C6E878655BACB541DC Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 17 Apr 2026 06:47:37 +0000 Certificate not after: Fri 16 Apr 2027 06:52:37 +0000 Subordinate resources: IP: 2a06:1283:8000::/36 IP: 2a06:1283:bd00::/40 IP: 2a06:1283:c110::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:97:3e:9b:8d:87:c7:48:b8:ca:18:c6:e8:78:65:5b:ac:b5:41:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Apr 17 06:47:37 2026 GMT Not After : Apr 16 06:52:37 2027 GMT Subject: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:98:af:f9:bd:f4:53:e6:c8:c4:d4:b2:d2: d2:1b:92:c0:e4:c4:66:52:cd:cd:c1:1c:ae:62:3e: ee:f1:08:57:f6:87:a7:86:bc:03:7c:0b:19:2c:57: 82:a8:f3:34:91:06:0c:7a:6e:52:e9:62:f1:fe:13: db:cd:91:f9:8e:c9:69:84:54:c6:2b:ae:f3:d7:af: 6c:fc:bf:28:c3:52:2d:0e:58:cc:e0:12:61:46:37: 61:24:a9:b3:50:81:59:d9:bf:3e:df:af:53:f6:5b: 81:8b:d8:ec:01:ae:33:5f:52:d7:74:0c:ac:52:3a: 59:1e:1d:15:2c:2e:70:48:ac:b9:9a:95:75:a4:4a: 0c:f7:e4:d7:19:66:e3:f2:3e:5f:cc:06:b6:bb:a3: d7:ec:a5:f0:9b:27:da:eb:5f:c8:18:d7:7c:9f:9d: 72:ec:73:69:76:f8:95:92:d7:50:fc:0c:6e:47:37: e2:77:58:08:7b:9a:40:72:34:7a:ec:21:18:24:2c: 78:ca:92:46:c6:0a:13:15:cf:40:67:9b:13:37:da: dd:42:e1:a6:81:2f:d5:45:63:1f:58:7b:ee:3c:1a: 35:4c:cf:1e:6b:b5:1d:2f:34:97:6a:35:96:a1:09: 8c:bf:a5:74:8e:23:5d:80:7a:27:8b:1c:f6:d0:07: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8000::/36 2a06:1283:bd00::/40 2a06:1283:c110::/44 Signature Algorithm: sha256WithRSAEncryption 55:d4:ee:be:f7:d5:41:e1:4f:91:4a:51:0b:9d:ca:89:a7:16: 85:0b:11:e4:d9:a8:f1:52:2a:ca:27:bf:ad:8b:65:06:c0:00: d3:4a:e5:1b:95:da:ad:5b:d3:3f:f0:c4:3a:20:3d:66:39:54: aa:80:9b:bc:f2:56:50:16:5f:a0:09:70:12:36:c9:62:1f:16: 8a:bc:13:eb:02:6f:a5:ec:9c:ea:9d:9c:c1:64:d3:9c:51:23: 0e:88:75:d0:34:ba:f8:67:67:ff:37:27:86:7a:23:19:63:0e: e0:fd:0b:ce:b9:d7:76:94:b2:da:c0:00:c1:01:80:d5:3b:11: 77:2d:d9:b4:78:84:4a:be:51:02:9f:00:85:2e:c0:4e:81:e7: 98:33:bd:42:79:3b:e4:e2:5a:8f:9e:60:57:7b:54:6c:b3:db: c7:b2:16:77:17:95:c9:1a:37:5b:2d:8b:8c:dd:6f:f6:b8:3f: cf:84:12:65:49:b4:d9:8f:b0:29:c3:db:f0:97:67:d5:bb:03: 77:bb:d8:9e:d5:be:3a:69:aa:5c:7c:ef:0d:89:8c:0c:89:02: 37:81:49:b3:12:d7:63:39:ac:e6:18:0a:ae:72:f2:6a:6f:a4: 6a:8e:2e:a9:ae:e8:1e:6b:7c:ed:75:4d:a2:03:79:1c:f1:ee: ca:95:99:f6 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIUbpc+m42Hx0i4yhjG6HhlW6y1QdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA0MTcwNjQ3MzdaFw0yNzA0MTYwNjUyMzdaMDMxMTAvBgNV BAMTKEQ1NEQ0NDNCNjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Upiv+b30U+bIxNSy0tIbksDk xGZSzc3BHK5iPu7xCFf2h6eGvAN8CxksV4Ko8zSRBgx6blLpYvH+E9vNkfmOyWmE VMYrrvPXr2z8vyjDUi0OWMzgEmFGN2EkqbNQgVnZvz7fr1P2W4GL2OwBrjNfUtd0 DKxSOlkeHRUsLnBIrLmalXWkSgz35NcZZuPyPl/MBra7o9fspfCbJ9rrX8gY13yf nXLsc2l2+JWS11D8DG5HN+J3WAh7mkByNHrsIRgkLHjKkkbGChMVz0BnmxM32t1C 4aaBL9VFYx9Ye+48GjVMzx5rtR0vNJdqNZahCYy/pXSOI12AeieLHPbQB+XTAgMB AAGjggMkMIIDIDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVTUQ7Z8HMXqG1 RG6gZDysOnqLLDAfBgNVHSMEGDAWgBRIB8EYvTSJNLXMWbPop6jBTynD+zAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC80ODA3QzExOEJEMzQ4OTM0QjVDQzU5QjNF OEE3QThDMTRGMjlDM0ZCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy80ODA3QzExOEJEMzQ4OTM0QjVD QzU5QjNFOEE3QThDMTRGMjlDM0ZCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzYv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIv Ni9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVBMDY0M0NBQzNBN0E4QjJDLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUH AQcBAf8EIzAhMB8EAgACMBkDBgQqBhKDgAMGACoGEoO9AwcEKgYSg8EQMA0GCSqG SIb3DQEBCwUAA4IBAQBV1O6+99VB4U+RSlELncqJpxaFCxHk2ajxUirKJ7+ti2UG wADTSuUbldqtW9M/8MQ6ID1mOVSqgJu88lZQFl+gCXASNsliHxaKvBPrAm+l7Jzq nZzBZNOcUSMOiHXQNLr4Z2f/NyeGeiMZYw7g/QvOudd2lLLawADBAYDVOxF3Ldm0 eIRKvlECnwCFLsBOgeeYM71CeTvk4lqPnmBXe1Rss9vHshZ3F5XJGjdbLYuM3W/2 uD/PhBJlSbTZj7Apw9vwl2fVuwN3u9ie1b46aapcfO8NiYwMiQI3gUmzEtdjOazm GAqucvJqb6Rqji6prugea3ztdU2iA3kc8e7KlZn2 -----END CERTIFICATE-----Generated at Fri Apr 17 14:59:36 2026 by rpki-client