$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer File: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (raw, json) Hash identifier: 3JqipuA1JIiU1ER7Sz5JBPtDiBYydKQk38DQO4fHsCg= Subject key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 2245707E0D6EFDB07D8B29C983DB43079015C2C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 17 Apr 2026 22:11:47 +0000 Certificate not after: Fri 16 Apr 2027 22:16:47 +0000 Subordinate resources: IP: 2a06:1283:8a00:: -- 2a06:1283:8fff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 21:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:45:70:7e:0d:6e:fd:b0:7d:8b:29:c9:83:db:43:07:90:15:c2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Apr 17 22:11:47 2026 GMT Not After : Apr 16 22:16:47 2027 GMT Subject: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:4a:3c:b9:3b:18:62:5c:e7:8c:2a:b0:e3: a5:21:50:5f:56:66:16:99:b4:f1:99:7f:3a:22:04: a9:de:b9:1b:49:85:a9:f4:34:92:1b:e1:92:de:5a: b1:78:b2:5c:20:27:2e:f2:8c:22:a3:f2:a0:6c:19: 38:59:74:2a:fe:10:79:24:56:05:de:32:4a:1a:26: 8d:1f:4d:33:12:70:46:39:4f:c4:82:fb:a9:79:b0: 9a:64:f5:dd:25:9b:7a:25:e4:3d:b4:d4:31:c0:b6: cc:17:e9:95:3f:68:27:3a:79:91:a5:3c:15:0a:25: 5a:eb:a7:a4:3b:62:53:5d:36:28:09:60:5d:9e:77: 84:02:25:7a:13:63:35:b0:92:fe:24:0d:22:ba:43: e8:ef:d4:b5:bc:ce:da:e0:3a:b0:1d:a6:81:47:04: be:00:ac:b7:e8:66:5f:61:4d:82:ac:4b:36:5d:54: a1:00:c6:2e:69:78:70:f3:32:b9:db:a2:83:71:c1: 3e:34:c3:bc:23:88:c7:bf:d1:c8:32:a5:40:d5:e9: 36:43:17:87:7f:df:be:27:ba:d0:cd:38:f6:2c:0d: cf:fc:db:4f:16:9e:dc:da:9d:ec:6a:23:54:10:bc: 29:b8:5e:c9:a4:73:8b:a7:7c:57:8d:77:5f:25:57: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8a00::-2a06:1283:8fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 88:9e:8a:4a:45:cd:1e:a8:e7:84:fb:8d:0d:1b:e4:a3:31:38: b1:95:3e:39:7c:e7:0d:bc:ee:b6:38:95:f7:07:27:0a:7f:ea: 42:17:a1:06:18:6e:8b:0d:87:61:cd:6b:8e:49:01:d0:d7:1d: 86:0e:4d:d6:21:33:3d:f0:e3:c7:3e:67:40:9d:96:0b:0f:6b: 43:f3:8a:f1:d9:d1:2c:a5:d5:97:7c:34:2e:5b:81:3e:3c:75: 89:0f:c5:d2:0e:bc:d2:aa:41:9a:55:2f:94:8b:71:84:95:7e: 81:15:14:9f:b0:f8:3c:cb:7c:1e:27:43:4d:21:1c:be:e9:4d: 11:23:0e:79:0b:7d:df:e3:69:78:38:d0:85:01:3b:ca:cf:c3: 69:c5:97:ec:8e:98:f3:81:21:4d:8e:fd:79:63:a7:97:99:0c: ac:0d:28:d7:7b:e7:2c:20:d2:a3:0f:e6:4a:28:fd:40:b5:57: b4:a1:4a:d9:f7:1c:ef:25:b3:67:6a:2b:7c:02:e1:f6:56:e3: 40:62:e6:52:69:26:a9:66:ef:52:72:0f:28:f0:9f:aa:ab:07: 36:f8:f6:72:60:34:87:58:5d:63:7a:0e:4a:f1:14:dd:63:0c: 66:be:31:0d:bb:b1:45:7c:9a:a8:86:8b:59:b3:c1:de:e8:b4: 26:6a:c7:15 -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgIUIkVwfg1u/bB9iynJg9tDB5AVwsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA0MTcyMjExNDdaFw0yNzA0MTYyMjE2NDdaMDMxMTAvBgNV BAMTKEIxMTNCMzFFOUYwMUEyRjQxODcwRThDNzc0OTJCMThFQkE4MzBFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeC0o8uTsYYlznjCqw46UhUF9W ZhaZtPGZfzoiBKneuRtJhan0NJIb4ZLeWrF4slwgJy7yjCKj8qBsGThZdCr+EHkk VgXeMkoaJo0fTTMScEY5T8SC+6l5sJpk9d0lm3ol5D201DHAtswX6ZU/aCc6eZGl PBUKJVrrp6Q7YlNdNigJYF2ed4QCJXoTYzWwkv4kDSK6Q+jv1LW8ztrgOrAdpoFH BL4ArLfoZl9hTYKsSzZdVKEAxi5peHDzMrnbooNxwT40w7wjiMe/0cgypUDV6TZD F4d/374nutDNOPYsDc/8208WntzanexqI1QQvCm4Xsmkc4unfFeNd18lV/bZAgMB AAGjggMoMIIDJDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxE7MenwGi9Bhw 6Md0krGOuoMOBzAfBgNVHSMEGDAWgBTVTUQ7Z8HMXqG1RG6gZDysOnqLLDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS80L0Q1NEQ0NDNC NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS83NzlhNzkwMy0yZWRiLTQ4YWQtYWJlYi1lZTM5 YTc5Zjg1MDcvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzc3OWE3OTAzLTJlZGItNDhhZC1hYmViLWVl MzlhNzlmODUwNy8yL0IxMTNCMzFFOUYwMUEyRjQxODcwRThDNzc0OTJCMThFQkE4 MzBFMDcubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEjAQAwYBKgYSg4oDBgQqBhKDgDAN BgkqhkiG9w0BAQsFAAOCAQEAiJ6KSkXNHqjnhPuNDRvkozE4sZU+OXznDbzutjiV 9wcnCn/qQhehBhhuiw2HYc1rjkkB0Ncdhg5N1iEzPfDjxz5nQJ2WCw9rQ/OK8dnR LKXVl3w0LluBPjx1iQ/F0g680qpBmlUvlItxhJV+gRUUn7D4PMt8HidDTSEcvulN ESMOeQt93+NpeDjQhQE7ys/DacWX7I6Y84EhTY79eWOnl5kMrA0o13vnLCDSow/m Sij9QLVXtKFK2fcc7yWzZ2orfALh9lbjQGLmUmkmqWbvUnIPKPCfqqsHNvj2cmA0 h1hdY3oOSvEU3WMMZr4xDbuxRXyaqIaLWbPB3ui0JmrHFQ== -----END CERTIFICATE-----Generated at Sat Apr 18 03:02:37 2026 by rpki-client