$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer File: 558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer (raw, json) Hash identifier: M9sNJceqX4VFrSZjq5UgkR2ke1SnMLLDcK9cGxmBHqc= Subject key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 47122DBE6566E379785A98A0A9192CB31A1F6099 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft caRepository: rsync://rpki.cc/repo/MythicalKitten/17/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Sat 06 Jun 2026 16:51:19 +0000 Certificate not after: Sat 05 Jun 2027 16:56:19 +0000 Subordinate resources: IP: 2a07:54c1::/36 IP: 2a07:54c1:3200::/40 IP: 2a07:54c1:6000::/36 IP: 2a07:54c1:8000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:12:2d:be:65:66:e3:79:78:5a:98:a0:a9:19:2c:b3:1a:1f:60:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 6 16:51:19 2026 GMT Not After : Jun 5 16:56:19 2027 GMT Subject: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:a0:47:15:16:b6:0f:05:15:7e:be:e6:92: 7d:4e:9c:d2:3e:25:ae:1c:af:4e:9c:eb:58:b7:59: 57:f8:1e:61:df:fc:ab:84:72:03:be:6a:cc:3e:06: f4:5a:fe:f6:13:8e:5e:fd:d6:14:56:b9:7f:c3:bb: c6:30:aa:8b:2a:f8:6d:ce:fd:bc:7e:f0:41:7a:1d: 0e:7f:e5:ec:ec:64:bb:1d:94:11:34:2a:a4:14:22: 92:58:8f:6e:ca:dc:59:e8:b9:76:81:77:e3:33:8f: e9:11:fc:a8:4b:c5:30:88:b1:cf:54:27:5c:89:a3: e0:9b:f9:28:34:a1:c8:83:5e:a9:62:de:be:b8:f1: 97:8a:46:6f:b4:19:22:8a:29:18:ce:8e:47:33:95: 3b:69:62:48:63:bd:1a:63:b7:6a:fc:0d:ae:77:5c: 6b:f4:7c:d5:93:c7:14:d3:e8:d4:cb:c5:b5:ba:e5: a0:53:e2:c7:2e:0e:d9:fb:aa:0b:04:f8:d3:d8:67: 31:b0:b0:5a:db:87:e8:80:5c:31:f5:39:b5:94:22: 5f:64:96:51:22:ca:25:80:08:39:96:ff:24:0f:45: a7:1f:cf:52:41:4c:0f:cf:ac:88:65:cb:41:2a:a3: 2f:3a:85:f0:ee:03:57:b8:42:2d:14:40:b6:e6:13: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/17/ RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1::/36 2a07:54c1:3200::/40 2a07:54c1:6000::/36 2a07:54c1:8000::/36 Signature Algorithm: sha256WithRSAEncryption 27:eb:41:7d:2c:a2:3c:b2:b1:bd:73:2a:05:de:de:40:22:ed: b3:14:dd:65:ab:54:18:0c:94:af:23:2e:b5:3e:79:94:97:16: 9d:75:ab:a4:53:6a:28:23:71:ed:8f:7e:eb:4a:9b:ca:44:87: f9:42:bf:bc:eb:03:77:54:ee:cc:92:b3:69:79:cf:ad:e4:dd: 10:f3:fa:64:33:5e:47:6b:63:79:00:9c:90:ca:b8:68:86:c7: 4e:10:0f:90:99:55:c6:42:c3:e7:dd:40:ec:7c:52:18:a4:3a: 36:12:94:e3:0b:1c:86:49:e6:4d:b5:69:7d:49:69:96:f2:1b: 26:3f:ba:07:17:af:00:8e:c0:ec:bf:db:5f:de:5a:84:26:65: 6c:60:48:9e:fe:c8:c9:ce:4e:97:9c:99:6a:38:c6:9c:13:5c: 05:30:5f:7a:c9:0e:6d:76:32:f4:ac:3a:a5:d8:05:1b:83:66: 07:9e:28:12:ee:63:8b:04:cd:c6:6f:58:2d:ac:22:3e:1a:d3: 44:67:50:3a:56:a5:1b:6c:c1:db:fe:77:9f:5c:95:f0:66:7d: 09:bc:33:e1:d4:90:ce:a9:c3:26:a8:54:37:c2:44:67:e1:e9: 03:4b:52:f5:a7:88:fe:8a:ef:dc:f1:26:cf:b1:7a:cc:4d:d2: 33:dc:8e:31 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIURxItvmVm43l4WpigqRkssxofYJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDYxNjUxMTlaFw0yNzA2MDUxNjU2MTlaMDMxMTAvBgNV BAMTKDU1OEFCOEQxRTM4NEMxOUUyNjVDM0MxRjQwRTdGMzNEOTcwRjcxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgH6BHFRa2DwUVfr7mkn1OnNI+ Ja4cr06c61i3WVf4HmHf/KuEcgO+asw+BvRa/vYTjl791hRWuX/Du8Ywqosq+G3O /bx+8EF6HQ5/5ezsZLsdlBE0KqQUIpJYj27K3FnouXaBd+Mzj+kR/KhLxTCIsc9U J1yJo+Cb+Sg0ociDXqli3r648ZeKRm+0GSKKKRjOjkczlTtpYkhjvRpjt2r8Da53 XGv0fNWTxxTT6NTLxbW65aBT4scuDtn7qgsE+NPYZzGwsFrbh+iAXDH1ObWUIl9k llEiyiWACDmW/yQPRacfz1JBTA/PrIhly0Eqoy86hfDuA1e4Qi0UQLbmExq5AgMB AAGjggLEMIICwDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVirjR44TBniZc PB9A5/M9lw9xIDAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCB2QYIKwYBBQUHAQsEgcwwgckwMwYI KwYBBQUHMAWGJ3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzE3 LzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0 ZW4vMTcvNTU4QUI4RDFFMzg0QzE5RTI2NUMzQzFGNDBFN0YzM0Q5NzBGNzEyMC5t ZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jYy9ycmRwL25vdGlmaWNhdGlv bi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq MCgwJgQCAAIwIAMGBCoHVMEAAwYAKgdUwTIDBgQqB1TBYAMGBCoHVMGAMA0GCSqG SIb3DQEBCwUAA4IBAQAn60F9LKI8srG9cyoF3t5AIu2zFN1lq1QYDJSvIy61PnmU lxaddaukU2ooI3Htj37rSpvKRIf5Qr+86wN3VO7MkrNpec+t5N0Q8/pkM15Ha2N5 AJyQyrhohsdOEA+QmVXGQsPn3UDsfFIYpDo2EpTjCxyGSeZNtWl9SWmW8hsmP7oH F68AjsDsv9tf3lqEJmVsYEie/sjJzk6XnJlqOMacE1wFMF96yQ5tdjL0rDql2AUb g2YHnigS7mOLBM3Gb1gtrCI+GtNEZ1A6VqUbbMHb/nefXJXwZn0JvDPh1JDOqcMm qFQ3wkRn4ekDS1L1p4j+iu/c8SbPsXrMTdIz3I4x -----END CERTIFICATE-----Generated at Sat Jun 13 08:22:11 2026 by rpki-client