$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer File: 4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer (raw, json) Hash identifier: hPR1D7VXGlTTYRICm1raSOZjDRDO2quvNOQ2c93ilxg= Subject key identifier: 4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B Authority key identifier: 2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60 Certificate issuer: /CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160 Certificate serial: 7531374081ECB52AF2DC9DF2C7808B0327772E74 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer Manifest: rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.mft caRepository: rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/ Notify URL: https://krill.proxy-arp.network/rrdp/notification.xml Certificate not before: Tue 03 Nov 2026 10:22:55 +0000 Certificate not after: Tue 02 Nov 2027 10:27:55 +0000 Subordinate resources: IP: 2a13:c8c4:fc00::/39 Validation: OK Signature path: rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 07:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:31:37:40:81:ec:b5:2a:f2:dc:9d:f2:c7:80:8b:03:27:77:2e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160 Validity Not Before: Nov 3 10:22:55 2026 GMT Not After : Nov 2 10:27:55 2027 GMT Subject: CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:83:ee:8f:e2:39:ee:a5:fe:de:01:55:8d: a2:28:e8:25:7f:78:3e:d6:07:e1:47:db:32:77:69: 3c:54:19:7a:29:0d:ed:b2:4d:69:27:16:fd:39:53: 6d:cc:a4:cd:b4:a3:7e:09:64:c1:c8:62:c5:b2:70: b0:0f:e8:29:e7:1b:56:7c:57:a4:ec:76:8b:2f:f8: da:6d:b4:ab:97:f4:c2:e9:eb:33:69:45:64:08:81: 94:ff:37:3e:f6:73:58:95:de:7e:19:69:d5:ac:d3: fb:9a:23:be:df:62:7a:ed:5f:38:8c:2d:86:a6:2f: 8d:d2:ee:f6:f6:51:a5:a5:0d:e1:70:fc:1f:4e:8b: ec:ba:ec:21:82:c2:ff:cb:c6:c6:a7:d1:5b:46:ff: f3:8e:c9:eb:bc:0a:f6:0a:00:4a:ce:be:af:2e:86: 2a:ce:b9:7c:24:e0:87:cd:90:19:5f:39:41:59:9d: 29:8c:93:6f:30:7c:2c:77:d6:75:ad:32:3e:6c:51: cd:f0:d5:14:0f:ba:4f:18:32:d3:fc:cf:1c:74:da: 4a:60:ab:58:a2:a4:42:ff:d7:ea:bb:30:5c:a2:7c: e5:5d:2b:c8:39:76:bd:54:11:91:23:cf:99:e9:2b: 27:62:82:24:3f:36:76:be:7e:5b:9c:df:8a:57:dd: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B X509v3 Authority Key Identifier: keyid:2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer Subject Information Access: CA Repository - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/ RPKI Manifest - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.mft RPKI Notify - URI:https://krill.proxy-arp.network/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:fc00::/39 Signature Algorithm: sha256WithRSAEncryption 64:d3:fc:e4:6f:0c:77:03:94:c5:38:a1:06:7e:3e:18:0b:27: 89:d2:44:2c:08:84:cb:ca:10:e7:dc:93:76:3e:a5:37:03:71: 87:b1:88:85:9d:b0:fb:2f:c8:3f:fc:8a:d5:b4:27:28:71:0e: ad:7e:a9:ca:94:40:a1:ae:13:dc:12:b3:31:33:a8:3f:3b:25: 5a:89:a6:2e:79:fd:07:9f:3b:51:35:22:4a:5c:56:4d:f2:08: 85:2b:7d:25:b5:f1:43:2f:6c:75:f4:87:2c:a6:49:e9:a9:ac: b5:c0:b7:8d:e4:c9:24:55:ac:f4:0a:d1:a3:d1:ec:e8:2a:df: 36:44:71:c9:4b:a0:4b:67:e8:fd:b4:84:d7:e2:62:e2:69:b7: 5c:30:24:15:ae:31:04:2a:64:b5:cc:96:cf:bd:75:a4:34:3b: 84:89:19:5b:ce:c5:9d:95:72:d7:5c:58:cf:5f:83:99:19:75: dc:fb:09:31:f0:63:79:11:fc:10:73:7a:21:6b:9c:12:eb:dc: 9e:3b:a4:23:91:d6:fc:e7:50:7e:4b:08:2d:d0:33:c1:1f:fe: eb:61:51:d8:bd:61:38:68:86:c4:85:0c:4e:95:1d:05:11:b8: 85:40:a7:5f:62:a3:cb:cc:63:18:6a:d6:48:13:c2:1b:6f:5d: 62:13:09:f9 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUdTE3QIHstSry3J3yx4CLAyd3LnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFMURBNTQ2RjA3NTg4OEIyM0REMjFFQTJBQzVGRTYx Qzk0MzE2MDAeFw0yNjExMDMxMDIyNTVaFw0yNzExMDIxMDI3NTVaMDMxMTAvBgNV BAMTKDRFQzJFQkVFRjFENDFDMzk2RDk2QTNBQzU4NDE0RTlFODIyODUxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqoPuj+I57qX+3gFVjaIo6CV/ eD7WB+FH2zJ3aTxUGXopDe2yTWknFv05U23MpM20o34JZMHIYsWycLAP6CnnG1Z8 V6Tsdosv+NpttKuX9MLp6zNpRWQIgZT/Nz72c1iV3n4ZadWs0/uaI77fYnrtXziM LYamL43S7vb2UaWlDeFw/B9Oi+y67CGCwv/Lxsan0VtG//OOyeu8CvYKAErOvq8u hirOuXwk4IfNkBlfOUFZnSmMk28wfCx31nWtMj5sUc3w1RQPuk8YMtP8zxx02kpg q1iipEL/1+q7MFyifOVdK8g5dr1UEZEjz5npKydigiQ/Nna+fluc34pX3d2ZAgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROwuvu8dQcOW2W o6xYQU6egihRezAfBgNVHSMEGDAWgBQu4dpUbwdYiLI90h6irF/mHJQxYDAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9yc3luYy5ycGtp LmFzMjA1OTQxLm9yZy9yZXBvL0FTMjA1OTQxLzEvMkVFMURBNTQ2RjA3NTg4OEIy M0REMjFFQTJBQzVGRTYxQzk0MzE2MC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGL BggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVw b3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8y RUUxREE1NDZGMDc1ODg4QjIzREQyMUVBMkFDNUZFNjFDOTQzMTYwLmNlcjCB/QYI KwYBBQUHAQsEgfAwge0wPQYIKwYBBQUHMAWGMXJzeW5jOi8vcnN5bmMucHJveHkt YXJwLm5ldHdvcmsvcmVwby9iZ3A0My11MjEvMS8waQYIKwYBBQUHMAqGXXJzeW5j Oi8vcnN5bmMucHJveHktYXJwLm5ldHdvcmsvcmVwby9iZ3A0My11MjEvMS80RUMy RUJFRUYxRDQxQzM5NkQ5NkEzQUM1ODQxNEU5RTgyMjg1MTdCLm1mdDBBBggrBgEF BQcwDYY1aHR0cHM6Ly9rcmlsbC5wcm94eS1hcnAubmV0d29yay9ycmRwL25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGASoTyMT8MA0GCSqGSIb3DQEBCwUAA4IBAQBk0/zk bwx3A5TFOKEGfj4YCyeJ0kQsCITLyhDn3JN2PqU3A3GHsYiFnbD7L8g//IrVtCco cQ6tfqnKlEChrhPcErMxM6g/OyVaiaYuef0HnztRNSJKXFZN8giFK30ltfFDL2x1 9Icspknpqay1wLeN5MkkVaz0CtGj0ezoKt82RHHJS6BLZ+j9tITX4mLiabdcMCQV rjEEKmS1zJbPvXWkNDuEiRlbzsWdlXLXXFjPX4OZGXXc+wkx8GN5EfwQc3oha5wS 69yeO6Qjkdb851B+Swgt0DPBH/7rYVHYvWE4aIbEhQxOlR0FEbiFQKdfYqPLzGMY atZIE8Ibb11iEwn5 -----END CERTIFICATE-----Generated at Thu Nov 5 16:50:47 2026 by rpki-client