$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (raw, json) Hash identifier: s0ySXvvYrwTq9CBssacTanXm7O7LF97Lh1FHHkibkvg= Subject key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 3D9A960925586B57BE15EE33E3CF3D7AD157B2C7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Manifest: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft caRepository: rsync://krill.cxy.hk/repo/Xinyu/2/ Notify URL: https://krill.cxy.hk/rrdp/notification.xml Certificate not before: Mon 21 Sep 2026 19:01:16 +0000 Certificate not after: Mon 20 Sep 2027 19:06:16 +0000 Subordinate resources: IP: 2a14:7586:6000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9a:96:09:25:58:6b:57:be:15:ee:33:e3:cf:3d:7a:d1:57:b2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 21 19:01:16 2026 GMT Not After : Sep 20 19:06:16 2027 GMT Subject: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:d1:cd:0f:db:b0:b1:c5:a4:f3:6f:ed:1e: fa:23:a4:d1:ba:32:dd:02:dc:d5:24:f3:6d:29:ef: 2e:74:8c:ca:c1:cb:84:a0:ea:34:d6:4f:39:b6:a6: fd:fd:77:6f:1b:45:b4:f3:06:5f:19:e1:db:90:2e: 22:60:cc:88:80:5c:75:db:7c:64:c7:5a:39:53:5f: 1e:33:81:46:eb:36:6f:fa:9c:ec:5c:23:00:71:ba: ef:9c:96:36:bd:fa:f1:c6:76:46:f4:14:83:50:ea: d4:8b:b0:bf:b4:61:da:47:27:78:48:b4:61:2b:bb: f3:22:be:94:b6:ae:e7:e9:2c:58:90:5c:69:7a:ca: 35:49:15:ed:25:8f:c9:e9:57:17:b7:78:1e:59:ce: b6:42:7b:89:41:30:1a:11:c2:6f:0d:fc:c4:89:cf: 47:6c:b1:f9:4f:6e:79:99:af:59:c8:27:dd:83:6d: fa:a1:dc:3e:ac:66:3b:e5:f5:79:41:56:13:77:05: 99:d9:b0:56:07:07:ad:0f:7f:94:65:da:72:51:97: 1a:46:c8:57:91:7a:2c:e4:ad:b7:dc:7f:03:7a:6f: e9:d0:d0:48:e5:8a:7b:03:a6:be:4a:e6:1a:60:5d: c4:12:ab:6a:ee:c8:7f:08:32:98:54:ef:d4:bb:14: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: CA Repository - URI:rsync://krill.cxy.hk/repo/Xinyu/2/ RPKI Manifest - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft RPKI Notify - URI:https://krill.cxy.hk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6000::/40 Signature Algorithm: sha256WithRSAEncryption 9a:00:16:9b:36:5c:9b:98:78:95:c5:ac:51:7f:12:0b:fd:12: a8:9d:13:a6:d4:7b:b9:72:53:1a:22:48:03:c9:25:aa:41:2d: e2:bd:56:c0:6c:06:8e:cc:bc:bc:db:63:89:a3:69:97:5c:16: 11:15:16:49:d7:a5:3f:bf:0e:c0:47:f7:a7:aa:b6:4f:72:25: 46:76:fd:c9:78:4e:f2:ef:9b:96:70:d1:c3:af:38:04:99:34: d7:ca:b9:c5:c3:da:30:d9:95:ee:ac:b4:7a:1b:32:fd:4f:4a: a9:8e:ac:a6:9e:84:44:57:b1:b2:fd:e2:b6:8e:9e:0a:c8:9d: 6f:c8:d5:df:49:4b:90:b9:e1:87:be:f7:ad:23:bb:e2:ad:0a: 1b:69:cb:67:6c:bb:a7:a8:93:ff:d2:5f:9d:f5:ae:f7:59:ff: c1:e9:35:ed:c0:46:00:13:1b:92:f3:d1:1f:25:00:7e:30:b1: e4:2a:99:68:65:7f:01:65:d7:e5:06:d3:02:bd:20:e4:1e:2f: d4:86:24:7f:65:52:a5:f0:a4:1a:f1:84:5b:f4:56:89:f0:f7: ab:ec:3b:c7:d1:ba:a5:b0:f4:1e:49:71:06:78:e6:fb:b3:dd: 8e:9d:1f:8a:b9:45:df:99:6d:ab:bd:89:89:a9:0e:1e:be:ee: 86:53:cf:33 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUPZqWCSVYa1e+Fe4z4889etFXsscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MjExOTAxMTZaFw0yNzA5MjAxOTA2MTZaMDMxMTAvBgNV BAMTKDk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgNHND9uwscWk82/tHvojpNG6 Mt0C3NUk820p7y50jMrBy4Sg6jTWTzm2pv39d28bRbTzBl8Z4duQLiJgzIiAXHXb fGTHWjlTXx4zgUbrNm/6nOxcIwBxuu+clja9+vHGdkb0FINQ6tSLsL+0YdpHJ3hI tGEru/MivpS2rufpLFiQXGl6yjVJFe0lj8npVxe3eB5ZzrZCe4lBMBoRwm8N/MSJ z0dssflPbnmZr1nIJ92Dbfqh3D6sZjvl9XlBVhN3BZnZsFYHB60Pf5Rl2nJRlxpG yFeReizkrbfcfwN6b+nQ0EjlinsDpr5K5hpgXcQSq2ruyH8IMphU79S7FAT7AgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYaLigGNQenUGN k7UsCjEXT0DxHjAfBgNVHSMEGDAWgBSD3nA3uOIFZtL+ibqJF4g7a5ZOPjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzgzREU3MDM3 QjhFMjA1NjZEMkZFODlCQTg5MTc4ODNCNkI5NjRFM0UuY2VyMIHUBggrBgEFBQcB CwSBxzCBxDAuBggrBgEFBQcwBYYicnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUu bWZ0MDYGCCsGAQUFBzANhipodHRwczovL2tyaWxsLmN4eS5oay9ycmRwL25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYZgMA0GCSqGSIb3DQEBCwUAA4IBAQCaABab NlybmHiVxaxRfxIL/RKonROm1Hu5clMaIkgDySWqQS3ivVbAbAaOzLy822OJo2mX XBYRFRZJ16U/vw7AR/enqrZPciVGdv3JeE7y75uWcNHDrzgEmTTXyrnFw9ow2ZXu rLR6GzL9T0qpjqymnoREV7Gy/eK2jp4KyJ1vyNXfSUuQueGHvvetI7virQobactn bLunqJP/0l+d9a73Wf/B6TXtwEYAExuS89EfJQB+MLHkKploZX8BZdflBtMCvSDk Hi/UhiR/ZVKl8KQa8YRb9FaJ8Per7DvH0bqlsPQeSXEGeOb7s92OnR+KuUXfmW2r vYmJqQ4evu6GU88z -----END CERTIFICATE-----Generated at Tue Sep 22 03:17:30 2026 by rpki-client