$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer File: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer (raw, json) Hash identifier: jG4IvmPTPnEeSOSqmQUpaAbjF5rn+TMbhtovuhdBiV8= Subject key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Authority key identifier: 2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60 Certificate issuer: /CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160 Certificate serial: 4D72986920517D69F7D5D8D7F343B24FB2BE28AB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 04 Nov 2026 09:20:53 +0000 Certificate not after: Wed 03 Nov 2027 09:25:53 +0000 Subordinate resources: IP: 2a13:c8c4:2000::/36 Validation: OK Signature path: rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Nov 2026 19:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:72:98:69:20:51:7d:69:f7:d5:d8:d7:f3:43:b2:4f:b2:be:28:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160 Validity Not Before: Nov 4 09:20:53 2026 GMT Not After : Nov 3 09:25:53 2027 GMT Subject: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:e6:b3:26:12:df:0d:20:f3:bd:6e:3f:03: 4e:75:d1:80:b8:d5:41:b5:7d:57:68:18:e2:d5:c5: 9d:85:e1:17:d0:2e:c1:92:f5:1c:df:21:6f:3c:20: 39:d0:fe:60:ec:74:63:26:94:91:d7:14:3c:aa:b3: df:3f:95:86:83:95:db:a1:3a:86:04:e5:66:97:02: 4a:5e:3a:2b:89:ef:30:22:62:b4:c1:f9:1d:ed:63: 60:19:b3:d7:ec:fd:d6:92:b6:0e:17:4a:eb:cb:14: f9:2e:64:cd:a4:5f:24:d9:fd:12:08:32:61:4d:06: e6:f7:36:4d:03:4d:bf:9b:65:b9:bb:c0:0c:e6:a2: bc:c9:13:91:bf:25:23:2b:55:51:45:5b:15:36:31: 25:bd:20:3b:33:c6:aa:08:90:47:84:0b:da:4e:e1: 09:cf:47:c1:de:c6:76:a6:3c:38:1e:f3:d5:13:4f: 65:1f:d8:46:40:fd:9d:d6:e5:85:18:7e:25:7c:98: 29:15:5b:65:d7:5b:a3:12:41:cf:26:e5:10:f0:ce: ec:8a:90:6a:d1:c9:a8:c3:26:dd:7f:ae:e1:00:e2: f5:34:91:d6:b0:14:57:33:91:32:30:a8:86:12:32: a1:68:a7:c7:00:20:83:00:8a:eb:69:9a:b5:fa:71: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Authority Key Identifier: keyid:2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:2000::/36 Signature Algorithm: sha256WithRSAEncryption 77:29:91:de:33:42:35:7a:cb:83:60:1d:f4:77:a6:0d:cb:43: 6b:5a:35:72:21:91:36:6d:59:c2:1c:cc:fb:2e:76:32:f3:93: 67:13:62:82:2a:4a:70:93:a0:72:69:3b:2a:eb:1e:c0:39:01: db:a6:03:a1:2a:d8:dd:b1:e8:82:a6:a8:64:fe:86:0b:9b:fe: 4f:b8:a3:77:45:ab:2a:28:1a:00:92:0f:b7:23:20:08:c8:55: e1:bf:5b:34:a2:0a:ba:73:b8:8c:31:7c:b5:a5:8c:d3:27:74: 8d:1f:d9:a4:c1:ac:f1:15:e4:8d:5c:ee:9b:cb:d5:eb:ac:6f: 64:45:e1:c0:9f:39:3a:6e:94:c0:14:74:ea:2e:57:94:f0:18: 2b:53:b7:68:f8:2c:52:4a:e0:53:e2:33:8c:c9:4f:2b:41:9f: 95:96:9d:ae:6f:aa:05:76:90:62:c8:a5:54:b5:e9:3f:6b:b6: 80:a7:01:c1:ef:4e:27:46:18:26:86:3d:9a:bf:aa:08:f0:85: d1:de:cf:a4:3b:f8:d5:91:e3:5a:4e:78:48:19:05:fc:4d:60: a5:92:28:2b:32:cb:30:b9:38:5c:78:d4:28:fa:24:b1:f3:28: 8a:74:a2:ca:a4:04:89:ad:9a:cc:2b:c3:a1:2a:8c:2b:d7:6d: a7:c7:2e:34 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIUTXKYaSBRfWn31djX80OyT7K+KKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFMURBNTQ2RjA3NTg4OEIyM0REMjFFQTJBQzVGRTYx Qzk0MzE2MDAeFw0yNjExMDQwOTIwNTNaFw0yNzExMDMwOTI1NTNaMDMxMTAvBgNV BAMTKDMwMEY4N0U0NEUyNEMyRkVFRDk3ODBFMkEwQUJGMDIyRENCNTZDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKeazJhLfDSDzvW4/A0510YC4 1UG1fVdoGOLVxZ2F4RfQLsGS9RzfIW88IDnQ/mDsdGMmlJHXFDyqs98/lYaDlduh OoYE5WaXAkpeOiuJ7zAiYrTB+R3tY2AZs9fs/daStg4XSuvLFPkuZM2kXyTZ/RII MmFNBub3Nk0DTb+bZbm7wAzmorzJE5G/JSMrVVFFWxU2MSW9IDszxqoIkEeEC9pO 4QnPR8HexnamPDge89UTT2Uf2EZA/Z3W5YUYfiV8mCkVW2XXW6MSQc8m5RDwzuyK kGrRyajDJt1/ruEA4vU0kdawFFczkTIwqIYSMqFop8cAIIMAiutpmrX6cQcfAgMB AAGjggL1MIIC8TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwD4fkTiTC/u2X gOKgq/Ai3LVsWDAfBgNVHSMEGDAWgBQu4dpUbwdYiLI90h6irF/mHJQxYDAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9yc3luYy5ycGtp LmFzMjA1OTQxLm9yZy9yZXBvL0FTMjA1OTQxLzEvMkVFMURBNTQ2RjA3NTg4OEIy M0REMjFFQTJBQzVGRTYxQzk0MzE2MC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGL BggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVw b3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8y RUUxREE1NDZGMDc1ODg4QjIzREQyMUVBMkFDNUZFNjFDOTQzMTYwLmNlcjCCAT8G CCsGAQUFBwELBIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFh cy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgy OTgtZTNlOTdiZWU5N2JkLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NzgyZDM4Yi00MDE2LTQ5NmEt ODI5OC1lM2U5N2JlZTk3YmQvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJBMEFC RjAyMkRDQjU2QzU4Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMu cnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqE8jEIDANBgkq hkiG9w0BAQsFAAOCAQEAdymR3jNCNXrLg2Ad9HemDctDa1o1ciGRNm1ZwhzM+y52 MvOTZxNigipKcJOgcmk7KusewDkB26YDoSrY3bHogqaoZP6GC5v+T7ijd0WrKiga AJIPtyMgCMhV4b9bNKIKunO4jDF8taWM0yd0jR/ZpMGs8RXkjVzum8vV66xvZEXh wJ85Om6UwBR06i5XlPAYK1O3aPgsUkrgU+IzjMlPK0GflZadrm+qBXaQYsilVLXp P2u2gKcBwe9OJ0YYJoY9mr+qCPCF0d7PpDv41ZHjWk54SBkF/E1gpZIoKzLLMLk4 XHjUKPoksfMoinSiyqQEia2azCvDoSqMK9dtp8cuNA== -----END CERTIFICATE-----Generated at Mon Nov 9 11:53:52 2026 by rpki-client