$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer File: 5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer (raw, json) Hash identifier: s62YWKeFlE1bDzhZO2SkyAxMHud2ywPfovj8Y4ybUvA= Subject key identifier: 5C:76:E6:4D:72:F3:F9:5E:46:8F:23:BE:C4:5D:C2:F2:FF:76:93:8B Authority key identifier: 75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70 Certificate issuer: /CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970 Certificate serial: 22F418DA090C938FDA84150A35E99EC78B3A1D5C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 16 Jun 2025 16:47:05 +0000 Certificate not after: Mon 15 Jun 2026 16:52:05 +0000 Subordinate resources: IP: 2a06:9f41:100::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 17:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f4:18:da:09:0c:93:8f:da:84:15:0a:35:e9:9e:c7:8b:3a:1d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970 Validity Not Before: Jun 16 16:47:05 2025 GMT Not After : Jun 15 16:52:05 2026 GMT Subject: CN=5C76E64D72F3F95E468F23BEC45DC2F2FF76938B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:c0:ec:7d:cf:00:b9:43:91:07:e3:b4:c7: 66:7b:b5:88:49:d6:8c:e2:86:bc:f1:ff:0d:a4:9e: 36:bf:ad:f6:4b:db:60:c5:d7:de:78:be:64:44:d7: e0:07:f8:80:f4:b4:b5:dc:db:38:b0:45:9e:d8:29: 03:0e:33:7f:99:28:6c:b8:7e:ab:c4:f4:67:cb:90: ea:6b:6e:f5:b9:c4:7b:4d:79:af:cb:27:21:fb:59: c6:c6:74:42:c3:6f:b0:5e:f3:eb:5d:23:2f:81:a6: 9e:47:a6:a0:98:43:c7:24:d3:ee:c3:c0:4c:1a:e4: 9d:ae:f8:fd:47:97:aa:24:da:8d:5d:c6:98:72:e2: 48:d8:c2:07:ae:13:d8:0d:fd:ad:09:e2:03:03:3a: 24:e8:86:de:92:5f:c6:fd:a7:7e:72:b0:eb:ed:ab: 4c:ec:91:da:96:9a:64:00:e1:e6:47:73:6e:7c:2c: 1c:46:f6:81:65:14:06:0d:ed:94:b6:f0:8d:e8:79: d3:5a:62:87:14:47:93:bf:d1:e6:b7:c1:16:1f:62: c4:f3:c5:d9:39:f9:33:9c:6b:8c:c7:5c:6d:fb:1a: 8b:7a:63:d5:0b:98:a9:dc:3f:91:ce:3e:48:db:8f: 1a:7e:79:d7:f1:7e:45:c1:4d:91:0f:0b:1b:f1:92: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:76:E6:4D:72:F3:F9:5E:46:8F:23:BE:C4:5D:C2:F2:FF:76:93:8B X509v3 Authority Key Identifier: keyid:75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:100::/40 Signature Algorithm: sha256WithRSAEncryption a6:78:ab:db:82:6d:b2:0f:d7:12:e2:32:47:79:a1:8e:11:84: be:e1:02:4b:6b:4b:24:1c:59:36:1b:10:fa:3a:f6:c1:d2:7c: ed:d1:70:99:20:ce:99:98:b9:c4:2e:d9:d2:b5:59:d0:35:ca: 6d:bc:15:9e:dc:fb:34:63:9f:0d:88:9a:b2:cc:07:79:a3:f3: 67:47:2e:bd:bf:18:b2:65:39:a7:f7:d1:03:22:bc:7f:e0:ab: e7:6c:96:21:e6:fb:94:91:72:ce:a9:21:39:19:25:c6:20:3a: aa:f5:8e:3d:8c:03:7c:55:cd:ad:96:ba:94:75:61:ec:81:f4: 7a:63:5d:bf:d9:9d:68:da:b2:d9:73:1c:dc:ef:21:fd:d0:b5: c6:bd:9d:46:4d:5e:1a:93:93:3a:ea:5a:15:e5:dc:87:6b:be: ae:4f:d9:fc:9b:3c:94:d3:ad:8f:df:ac:a1:3f:ca:75:35:d1: a6:b4:af:0d:65:0e:d7:75:d3:41:27:87:ac:3a:35:29:78:5a: 67:d6:cd:97:a4:87:ff:79:79:d4:54:c6:50:8d:a0:49:d8:de: f7:58:33:cf:c1:d0:d9:cc:db:b7:e4:24:ce:fd:6a:65:77:29: 70:af:b2:fe:e0:8b:89:13:47:2e:f1:67:8e:44:42:09:cc:d5: 0f:e9:b5:57 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUIvQY2gkMk4/ahBUKNemex4s6HVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1 RDhCQTk3MDAeFw0yNTA2MTYxNjQ3MDVaFw0yNjA2MTUxNjUyMDVaMDMxMTAvBgNV BAMTKDVDNzZFNjRENzJGM0Y5NUU0NjhGMjNCRUM0NURDMkYyRkY3NjkzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ncDsfc8AuUORB+O0x2Z7tYhJ 1ozihrzx/w2knja/rfZL22DF1954vmRE1+AH+ID0tLXc2ziwRZ7YKQMOM3+ZKGy4 fqvE9GfLkOprbvW5xHtNea/LJyH7WcbGdELDb7Be8+tdIy+Bpp5HpqCYQ8ck0+7D wEwa5J2u+P1Hl6ok2o1dxphy4kjYwgeuE9gN/a0J4gMDOiToht6SX8b9p35ysOvt q0zskdqWmmQA4eZHc258LBxG9oFlFAYN7ZS28I3oedNaYocUR5O/0ea3wRYfYsTz xdk5+TOca4zHXG37Got6Y9ULmKncP5HOPkjbjxp+edfxfkXBTZEPCxvxkvp/AgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRcduZNcvP5XkaP I77EXcLy/3aTizAfBgNVHSMEGDAWgBR11cLs0w9oDbXRaYf0V/60XYupcDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMS83NUQ1QzJFQ0QzMEY2ODBEQjVEMTY5ODdG NDU3RkVCNDVEOEJBOTcwLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83NUQ1QzJFQ0QzMEY2ODBEQjVE MTY5ODdGNDU3RkVCNDVEOEJBOTcwLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzMv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcv My81Qzc2RTY0RDcyRjNGOTVFNDY4RjIzQkVDNDVEQzJGMkZGNzY5MzhCLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBp9BATANBgkqhkiG9w0BAQsFAAOCAQEApnir 24Jtsg/XEuIyR3mhjhGEvuECS2tLJBxZNhsQ+jr2wdJ87dFwmSDOmZi5xC7Z0rVZ 0DXKbbwVntz7NGOfDYiasswHeaPzZ0cuvb8YsmU5p/fRAyK8f+Cr52yWIeb7lJFy zqkhORklxiA6qvWOPYwDfFXNrZa6lHVh7IH0emNdv9mdaNqy2XMc3O8h/dC1xr2d Rk1eGpOTOupaFeXch2u+rk/Z/Js8lNOtj9+soT/KdTXRprSvDWUO13XTQSeHrDo1 KXhaZ9bNl6SH/3l51FTGUI2gSdje91gzz8HQ2czbt+Qkzv1qZXcpcK+y/uCLiRNH LvFnjkRCCczVD+m1Vw== -----END CERTIFICATE-----Generated at Tue Jun 17 11:06:19 2025 by rpki-client