$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.cer File: 9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.cer (raw, json) Hash identifier: wLRhFi868Yq6U7aKu4r+Lg3ExFDFh+DUjWR9qvPNGKo= Subject key identifier: 9D:80:6A:3F:24:FD:00:B8:89:A8:26:9B:95:FA:AB:61:DF:3E:A3:CB Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 5948F07E4C2A9645F2FB2BE535353B508A2D3268 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Manifest: rsync://rpki.ruinet.work/repo/CowGrassland/2/9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.mft caRepository: rsync://rpki.ruinet.work/repo/CowGrassland/2/ Notify URL: https://rpki.fengrui.link/rrdp/notification.xml Certificate not before: Mon 07 Sep 2026 23:21:57 +0000 Certificate not after: Mon 06 Sep 2027 23:26:57 +0000 Subordinate resources: IP: 2a0a:d685:500::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:48:f0:7e:4c:2a:96:45:f2:fb:2b:e5:35:35:3b:50:8a:2d:32:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Sep 7 23:21:57 2026 GMT Not After : Sep 6 23:26:57 2027 GMT Subject: CN=9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:30:9b:ff:98:f8:97:53:8f:6e:03:c3:74: ff:ec:45:80:ae:b1:f9:45:50:0e:45:09:62:7c:ea: 40:65:e8:51:e4:f1:0c:4a:f2:68:f7:fd:21:f9:6c: 29:30:73:05:4e:d6:bc:4b:ae:a3:ab:3d:f6:e0:79: 9a:69:4a:7b:0c:16:21:28:f1:fe:85:e2:e0:1d:c3: c4:65:19:e0:47:d8:88:dc:7e:fa:dc:9a:4e:b8:0b: 1e:82:cc:7d:61:ae:0c:d8:34:06:10:6b:46:5d:14: 58:23:77:d2:9f:b8:11:b6:7f:42:bf:ea:ce:16:02: 51:d1:f8:17:a5:04:ad:f1:97:a9:d2:2a:f9:9b:b8: ff:c8:00:2f:2e:1e:66:ac:c9:3d:2c:ac:cf:d4:00: f8:4f:0d:40:98:33:79:d7:d4:68:f2:74:dc:b5:4d: 7e:f6:14:88:66:85:a5:84:a2:9f:27:e3:a3:31:9e: da:99:81:5d:97:f9:95:58:cf:b4:5e:be:84:83:36: a9:5b:42:dd:29:71:d4:e7:16:4f:b1:e1:38:33:df: f5:6e:fd:c1:3b:d7:8d:52:5c:87:14:26:b6:19:f9: de:9c:a6:19:f0:94:ef:c3:b4:12:8a:30:5b:f5:b8: bc:8f:ba:b0:4d:69:4c:1c:04:70:1e:d2:98:fe:2f: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:80:6A:3F:24:FD:00:B8:89:A8:26:9B:95:FA:AB:61:DF:3E:A3:CB X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: CA Repository - URI:rsync://rpki.ruinet.work/repo/CowGrassland/2/ RPKI Manifest - URI:rsync://rpki.ruinet.work/repo/CowGrassland/2/9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.mft RPKI Notify - URI:https://rpki.fengrui.link/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:500::/40 Signature Algorithm: sha256WithRSAEncryption 13:83:bc:17:a7:4c:d3:2d:c5:fe:b6:eb:b6:02:9d:11:61:00: 18:e8:74:da:5d:a7:60:0b:14:5e:89:c5:e5:4f:0f:6a:4f:92: f8:a3:01:29:ab:0a:6d:f7:7c:7e:04:4a:fb:87:6e:f1:d0:87: 06:ce:b8:96:2e:70:ee:4a:f2:bf:66:73:9a:75:b5:ef:70:74: f8:28:4e:93:15:48:02:b2:ff:76:2e:35:7d:28:fc:8b:6b:f2: 6f:82:3f:2d:fc:0e:73:54:9e:03:e0:fc:7a:6f:c1:0f:eb:f8: f3:96:cf:dd:d4:7b:46:2b:cb:61:16:52:8a:b6:06:98:a2:9f: 23:6e:06:1c:31:be:5f:4c:74:92:ff:d8:e8:7d:52:90:ea:af: 8d:2e:16:2f:d0:5e:32:cf:fa:b7:60:b2:65:85:f3:f7:5a:45: e5:71:0b:5a:94:92:06:85:cd:a4:13:03:2e:2e:00:2b:de:39: f0:1b:7e:d8:ed:98:c9:18:c8:0a:a9:cc:35:fe:f9:a5:84:41: d2:6a:ab:74:b6:a6:33:87:0b:3c:cd:60:ee:fe:9e:da:17:e4: 65:61:b2:b0:04:49:26:96:13:cc:ad:90:c1:85:58:0f:14:32: d7:0f:83:66:bf:ca:cb:fb:a6:d2:01:1f:0d:17:98:72:2f:a2: 17:55:d3:14 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUWUjwfkwqlkXy+yvlNTU7UIotMmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjA5MDcyMzIxNTdaFw0yNzA5MDYyMzI2NTdaMDMxMTAvBgNV BAMTKDlEODA2QTNGMjRGRDAwQjg4OUE4MjY5Qjk1RkFBQjYxREYzRUEzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4jCb/5j4l1OPbgPDdP/sRYCu sflFUA5FCWJ86kBl6FHk8QxK8mj3/SH5bCkwcwVO1rxLrqOrPfbgeZppSnsMFiEo 8f6F4uAdw8RlGeBH2Ijcfvrcmk64Cx6CzH1hrgzYNAYQa0ZdFFgjd9KfuBG2f0K/ 6s4WAlHR+BelBK3xl6nSKvmbuP/IAC8uHmasyT0srM/UAPhPDUCYM3nX1GjydNy1 TX72FIhmhaWEop8n46MxntqZgV2X+ZVYz7RevoSDNqlbQt0pcdTnFk+x4Tgz3/Vu /cE7141SXIcUJrYZ+d6cphnwlO/DtBKKMFv1uLyPurBNaUwcBHAe0pj+L9jDAgMB AAGjggLNMIICyTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdgGo/JP0AuImo JpuV+qth3z6jyzAfBgNVHSMEGDAWgBQjihGuJFNX5y/rOXhce8A6lzpE4TAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzIzOEExMUFF MjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEuY2VyMIHvBggrBgEFBQcB CwSB4jCB3zA5BggrBgEFBQcwBYYtcnN5bmM6Ly9ycGtpLnJ1aW5ldC53b3JrL3Jl cG8vQ293R3Jhc3NsYW5kLzIvMGUGCCsGAQUFBzAKhllyc3luYzovL3Jwa2kucnVp bmV0LndvcmsvcmVwby9Db3dHcmFzc2xhbmQvMi85RDgwNkEzRjI0RkQwMEI4ODlB ODI2OUI5NUZBQUI2MURGM0VBM0NCLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9y cGtpLmZlbmdydWkubGluay9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoK 1oUFMA0GCSqGSIb3DQEBCwUAA4IBAQATg7wXp0zTLcX+tuu2Ap0RYQAY6HTaXadg CxReicXlTw9qT5L4owEpqwpt93x+BEr7h27x0IcGzriWLnDuSvK/ZnOadbXvcHT4 KE6TFUgCsv92LjV9KPyLa/Jvgj8t/A5zVJ4D4Px6b8EP6/jzls/d1HtGK8thFlKK tgaYop8jbgYcMb5fTHSS/9jofVKQ6q+NLhYv0F4yz/q3YLJlhfP3WkXlcQtalJIG hc2kEwMuLgAr3jnwG37Y7ZjJGMgKqcw1/vmlhEHSaqt0tqYzhws8zWDu/p7aF+Rl YbKwBEkmlhPMrZDBhVgPFDLXD4Nmv8rL+6bSAR8NF5hyL6IXVdMU -----END CERTIFICATE-----Generated at Wed Sep 23 01:10:11 2026 by rpki-client