$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer File: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer (raw, json) Hash identifier: E9CNptHKWNvvuPC6W5ihJwZNW+cRtTj6Wt8oB63Ybug= Subject key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 Authority key identifier: AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80 Certificate issuer: /CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280 Certificate serial: 4A368ECD33D228C0BD9F29C9633D1A7D799AB489 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 31 Oct 2025 13:55:30 +0000 Certificate not after: Fri 30 Oct 2026 14:00:30 +0000 Subordinate resources: IP: 2a0f:1cc6:b100::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:36:8e:cd:33:d2:28:c0:bd:9f:29:c9:63:3d:1a:7d:79:9a:b4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280 Validity Not Before: Oct 31 13:55:30 2025 GMT Not After : Oct 30 14:00:30 2026 GMT Subject: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:ff:bd:0a:20:fc:42:69:8f:97:f2:0b:ae: 95:5c:c1:e7:41:27:f8:be:e9:12:38:80:07:61:15: d9:58:b2:7e:b4:25:fd:0a:bf:9b:0d:31:c0:e8:09: 0c:4a:d6:4e:27:42:21:9e:e2:43:92:0d:14:fd:6f: 1f:d1:94:5b:4a:12:73:9b:b6:95:30:6e:3e:d6:56: fe:00:f5:f6:b7:d3:fa:9b:f6:d3:e4:73:79:54:bc: 50:ae:80:6e:dd:b7:46:65:1f:c2:d7:4b:c5:81:39: a1:91:1e:25:4c:cc:fb:40:d7:5e:8b:53:69:db:df: fd:5b:d3:cc:83:3c:19:3a:11:d2:54:b3:36:eb:2f: f5:0f:e3:3a:61:b6:b5:a9:8d:f5:64:bf:e1:b2:f1: e4:e9:b0:e0:c6:51:bf:54:cf:06:71:25:ac:cd:16: d1:b5:52:81:dd:85:0e:c8:05:a6:38:53:82:01:80: 06:23:cf:65:d8:c7:7e:3b:a0:78:87:b2:25:dc:07: 05:85:db:65:f7:e2:cd:40:ba:db:31:f8:b0:9c:0e: 8f:87:e3:d4:03:0b:5c:57:71:07:d5:17:db:ce:f2: 57:66:6b:42:e1:82:82:4c:46:4f:78:cb:44:e3:e3: bd:68:13:d3:bf:eb:55:77:df:05:99:b1:b2:25:22: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 X509v3 Authority Key Identifier: keyid:AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b100::/44 Signature Algorithm: sha256WithRSAEncryption a5:0f:e9:f4:c1:9d:2c:13:6c:dc:af:6e:70:aa:d4:07:1b:ca: 26:38:e5:26:e6:49:35:81:1a:37:da:b7:1a:3c:24:49:54:22: 4c:8d:0b:82:59:15:63:62:a8:b7:96:01:b3:fd:6e:4a:33:3e: 8a:af:1e:0d:8b:59:b4:be:b0:11:e1:55:2e:c9:56:eb:95:a3: 43:7a:00:b0:2b:31:ed:a0:77:38:86:98:8d:7a:11:82:22:48: f5:b2:75:be:69:ca:1d:db:47:af:97:7a:20:ae:32:bf:86:35: fd:f8:42:44:99:9d:32:29:89:91:06:74:05:09:44:28:b1:c4: ff:3e:7d:73:4e:54:78:b3:9e:dd:74:da:f1:26:81:43:0c:20: de:e1:6b:93:91:90:a3:0c:89:78:24:50:c2:a1:cd:e8:80:74: e5:d3:ec:ab:c5:fa:78:2c:05:5b:23:c5:e1:ca:54:b7:48:62: 26:fb:c0:25:b0:51:0e:98:0e:78:c3:90:44:05:9e:33:e2:c2: 2b:f1:d5:4e:07:f4:59:cb:0d:4a:0d:43:48:39:34:89:e0:b6: 3b:fd:e2:aa:f9:00:6b:12:c6:24:5d:4b:95:af:96:d5:4c:e9: 3b:d2:ee:bb:30:6b:83:ce:c7:53:c1:d3:db:49:3e:9d:4c:8b: 04:ff:9f:d2 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUSjaOzTPSKMC9nynJYz0afXmatIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNEMyQzc1NDNBNzNDNDJERkE5NEY5OTUwQzM3QkRD ODU5RDI4MDAeFw0yNTEwMzExMzU1MzBaFw0yNjEwMzAxNDAwMzBaMDMxMTAvBgNV BAMTKDlGNzA0MkMzQjM4QTJBNERBQjc1NjMzNzEyMkFEMkI5MjdERDZERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vf+9CiD8QmmPl/ILrpVcwedB J/i+6RI4gAdhFdlYsn60Jf0Kv5sNMcDoCQxK1k4nQiGe4kOSDRT9bx/RlFtKEnOb tpUwbj7WVv4A9fa30/qb9tPkc3lUvFCugG7dt0ZlH8LXS8WBOaGRHiVMzPtA116L U2nb3/1b08yDPBk6EdJUszbrL/UP4zphtrWpjfVkv+Gy8eTpsODGUb9UzwZxJazN FtG1UoHdhQ7IBaY4U4IBgAYjz2XYx347oHiHsiXcBwWF22X34s1Autsx+LCcDo+H 49QDC1xXcQfVF9vO8ldma0LhgoJMRk94y0Tj471oE9O/61V33wWZsbIlIoRTAgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfcELDs4oqTat1 YzcSKtK5J91t4DAfBgNVHSMEGDAWgBSv9MLHVDpzxC36lPmVDDe9yFnSgDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1hNWJlLTQ2 NGMtYThiOS04YjdiMzc0YWUzZmEvMi9BRkY0QzJDNzU0M0E3M0M0MkRGQTk0Rjk5 NTBDMzdCREM4NTlEMjgwLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8wL0FGRjRDMkM3 NTQzQTczQzQyREZBOTRGOTk1MEMzN0JEQzg1OUQyODAuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2Vl YzA2N2NlMzkvMC8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMz ZWVjMDY3Y2UzOS8wLzlGNzA0MkMzQjM4QTJBNERBQjc1NjMzNzEyMkFEMkI5MjdE RDZERTAubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPHMaxADANBgkqhkiG9w0B AQsFAAOCAQEApQ/p9MGdLBNs3K9ucKrUBxvKJjjlJuZJNYEaN9q3GjwkSVQiTI0L glkVY2Kot5YBs/1uSjM+iq8eDYtZtL6wEeFVLslW65WjQ3oAsCsx7aB3OIaYjXoR giJI9bJ1vmnKHdtHr5d6IK4yv4Y1/fhCRJmdMimJkQZ0BQlEKLHE/z59c05UeLOe 3XTa8SaBQwwg3uFrk5GQowyJeCRQwqHN6IB05dPsq8X6eCwFWyPF4cpUt0hiJvvA JbBRDpgOeMOQRAWeM+LCK/HVTgf0WcsNSg1DSDk0ieC2O/3iqvkAaxLGJF1Lla+W 1UzpO9LuuzBrg87HU8HT20k+nUyLBP+f0g== -----END CERTIFICATE-----Generated at Wed Nov 5 06:46:54 2025 by rpki-client