$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (raw, json) Hash identifier: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc= Subject key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 5B33D671B3C16D7CB9680084A95A2B92E604A5AA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 02 Nov 2025 11:03:32 +0000 Certificate not after: Sun 01 Nov 2026 11:08:32 +0000 Subordinate resources: IP: 2a14:7581:3090::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:33:d6:71:b3:c1:6d:7c:b9:68:00:84:a9:5a:2b:92:e6:04:a5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Nov 2 11:03:32 2025 GMT Not After : Nov 1 11:08:32 2026 GMT Subject: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:22:99:5e:68:e1:f7:33:a3:6a:74:e0:f1:4c: 2a:6b:9b:86:c0:ee:ed:21:df:a5:1e:e9:02:f1:c2: 02:ed:20:7e:bd:9c:81:5c:fb:e3:a9:99:a8:4b:09: e5:1a:26:16:85:4f:88:28:af:1f:d9:a2:fe:74:b0: f2:01:14:6c:b0:27:2f:04:92:90:d9:1d:dd:e6:97: 18:b0:a2:10:2b:8b:9a:0b:44:b4:9a:0b:12:b2:27: 5b:01:36:82:44:da:e1:c4:37:1b:d8:33:fc:ae:d8: 8b:c7:e0:86:26:2b:4b:d9:39:0e:60:ac:b5:a6:a2: 5d:4c:f7:cb:c5:10:ca:d2:fd:a4:f9:48:00:35:3f: 8c:f6:a2:ee:0a:1f:de:8b:85:34:64:d3:ec:d7:21: 89:e4:af:0a:55:96:ba:0b:2a:61:db:f1:d0:98:ab: 35:da:d5:d1:8e:1b:2e:37:e7:b5:ab:64:86:68:2b: 18:dc:43:a1:42:a1:ab:6c:d9:ec:d5:7f:06:83:94: ab:9e:41:8e:a8:21:ce:31:f2:3f:07:c7:22:38:18: b7:bc:e8:cd:42:73:cd:37:12:f7:c1:0b:82:71:9f: d6:7e:5d:97:f6:d6:56:14:5b:58:6d:b9:39:af:b1: 6f:96:a1:b6:a8:01:29:59:b9:f0:49:3e:4b:58:82: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3090::/44 Signature Algorithm: sha256WithRSAEncryption 2d:ac:82:a4:50:ee:b8:6c:d0:bf:19:d3:dc:0e:d5:3c:e4:03: da:fd:33:4e:9f:62:e8:48:64:3b:aa:61:14:d2:5c:ce:14:7e: 5d:42:87:cd:3e:ed:e3:b7:52:96:c4:a5:05:93:e7:ee:4d:42: 71:a8:03:0c:a1:bf:dd:0c:b0:be:03:68:c7:98:e9:25:44:ab: 09:d3:79:09:72:16:c5:b2:82:c0:b9:b4:c2:8b:2a:4b:3c:63: e8:10:ac:01:c5:38:2c:ed:73:0e:e3:ae:7d:8a:6f:60:4e:10: 3b:ef:53:4b:f7:4b:32:f2:f4:76:da:ac:f3:96:ea:97:1a:bf: d8:43:af:75:13:1b:df:32:d1:b4:ae:68:b9:98:fe:86:96:f7: b3:f8:95:8b:06:0e:d6:d4:ae:05:71:62:ac:0f:95:4f:5a:61: 50:25:21:dd:e1:59:42:c3:0b:0c:26:9d:3b:5a:40:2c:5c:01: f5:fa:f2:67:df:c1:93:fe:11:4a:b4:ae:75:77:ba:f9:48:7b: c7:14:d2:60:53:d7:de:d9:28:72:6a:c4:7d:43:06:67:2b:b0: 0e:45:25:cc:9d:90:a1:51:b7:64:da:99:97:66:31:46:75:6f: 5d:f2:b2:32:4e:37:0e:81:fb:87:fb:fc:b1:34:60:9e:f7:a6: 23:66:2f:e9 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUWzPWcbPBbXy5aACEqVorkuYEpaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNTExMDIxMTAzMzJaFw0yNjExMDExMTA4MzJaMDMxMTAvBgNV BAMTKDY0RDYyOUFBM0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkIpleaOH3M6NqdODxTCprm4bA 7u0h36Ue6QLxwgLtIH69nIFc++OpmahLCeUaJhaFT4gorx/Zov50sPIBFGywJy8E kpDZHd3mlxiwohAri5oLRLSaCxKyJ1sBNoJE2uHENxvYM/yu2IvH4IYmK0vZOQ5g rLWmol1M98vFEMrS/aT5SAA1P4z2ou4KH96LhTRk0+zXIYnkrwpVlroLKmHb8dCY qzXa1dGOGy4357WrZIZoKxjcQ6FCoats2ezVfwaDlKueQY6oIc4x8j8HxyI4GLe8 6M1Cc803EvfBC4Jxn9Z+XZf21lYUW1htuTmvsW+WobaoASlZufBJPktYgmBpAgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRk1imqPPOPn3cK 27sgxt69C4zeBTAfBgNVHSMEGDAWgBQgKoLabnPOQmLhi67WCj+myIkj8DAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2Vl YzA2N2NlMzkvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMz ZWVjMDY3Y2UzOS8yLzY0RDYyOUFBM0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4 Q0RFMDUubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoUdYEwkDANBgkqhkiG9w0B AQsFAAOCAQEALayCpFDuuGzQvxnT3A7VPOQD2v0zTp9i6EhkO6phFNJczhR+XUKH zT7t47dSlsSlBZPn7k1CcagDDKG/3QywvgNox5jpJUSrCdN5CXIWxbKCwLm0wosq Szxj6BCsAcU4LO1zDuOufYpvYE4QO+9TS/dLMvL0dtqs85bqlxq/2EOvdRMb3zLR tK5ouZj+hpb3s/iViwYO1tSuBXFirA+VT1phUCUh3eFZQsMLDCadO1pALFwB9fry Z9/Bk/4RSrSudXe6+Uh7xxTSYFPX3tkocmrEfUMGZyuwDkUlzJ2QoVG3ZNqZl2Yx RnVvXfKyMk43DoH7h/v8sTRgnvemI2Yv6Q== -----END CERTIFICATE-----Generated at Tue Nov 4 22:30:57 2025 by rpki-client