$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/1/BA8265B3E7B7C69E093A2C17538206A387735430.cer File: BA8265B3E7B7C69E093A2C17538206A387735430.cer (raw, json) Hash identifier: 0okAf422JEMOxIzMQIlGSdgYWtO1ZhRNT5PF86pWPd4= Subject key identifier: BA:82:65:B3:E7:B7:C6:9E:09:3A:2C:17:53:82:06:A3:87:73:54:30 Authority key identifier: 2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60 Certificate issuer: /CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160 Certificate serial: 7DDE394DA99B06E8A37C5FDF070895F6FC4391D7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 03 Nov 2026 11:44:02 +0000 Certificate not after: Tue 02 Nov 2027 11:49:02 +0000 Subordinate resources: IP: 2a13:c8c4:7000::/36 Validation: OK Signature path: rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 07:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:de:39:4d:a9:9b:06:e8:a3:7c:5f:df:07:08:95:f6:fc:43:91:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160 Validity Not Before: Nov 3 11:44:02 2026 GMT Not After : Nov 2 11:49:02 2027 GMT Subject: CN=BA8265B3E7B7C69E093A2C17538206A387735430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:8e:7a:b7:a1:dc:9a:78:dd:1f:8e:35:b2: 51:86:e1:dc:ee:57:8a:46:bb:fc:c9:34:7a:b7:20: 99:6a:27:69:17:48:19:a2:83:9f:ee:75:24:45:35: 34:b2:b5:63:c0:24:df:15:16:84:01:2b:27:d8:04: 49:f3:c5:51:94:4d:b9:ad:98:1e:a7:8a:60:e6:87: dc:86:d9:eb:dc:1d:2d:d5:ad:91:c4:d0:04:2d:a5: 6d:54:7c:a8:b7:2d:58:cd:e4:c9:17:43:3b:e1:06: 90:67:51:36:b8:06:a9:79:ad:34:3c:4d:09:ee:b5: 60:ba:4f:4b:fe:1b:df:f0:83:9d:ee:3f:de:04:04: cf:3d:76:cd:d6:fc:65:e5:4a:61:10:27:8c:fe:0f: 29:ec:44:4d:3d:76:23:de:ce:3d:37:c9:5c:10:dc: 0b:ed:85:4c:0f:66:72:67:6b:56:f5:48:f6:78:49: c3:a9:e5:56:f9:b0:bc:eb:ac:19:fa:34:2c:49:fb: 70:36:41:7c:a4:6c:dd:fc:81:70:1b:97:d1:ce:ca: 4a:b9:61:af:40:90:10:e4:93:d9:51:1c:58:2d:e1: 33:97:dc:66:c0:a6:f1:62:eb:ca:94:0b:ce:4d:62: 19:e9:dc:e5:28:63:10:f1:d2:23:90:ad:85:39:11: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:82:65:B3:E7:B7:C6:9E:09:3A:2C:17:53:82:06:A3:87:73:54:30 X509v3 Authority Key Identifier: keyid:2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/1/BA8265B3E7B7C69E093A2C17538206A387735430.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:7000::/36 Signature Algorithm: sha256WithRSAEncryption 90:78:09:ca:15:71:f5:a7:55:38:96:c6:97:9d:84:58:9b:f7: fe:47:c4:47:b1:bd:ba:5b:8c:6c:d7:d0:a7:e9:b8:86:bc:a7: 56:c5:2e:b2:31:92:4c:35:e0:d9:73:e3:d1:bb:c6:78:30:8d: 73:f9:b4:ed:52:2c:38:ce:5e:62:e5:cb:6a:e0:c8:a6:3a:66: 89:9a:08:0c:a5:41:55:1b:b9:b9:c6:8a:d0:0f:c4:21:f6:0a: 6a:0f:a7:3a:35:92:3b:a8:ac:53:8d:f4:0a:f0:10:93:9d:c5: ee:ad:20:cc:27:54:c3:a2:fb:ca:11:55:23:42:2c:3a:1f:5e: 8d:a0:15:9e:60:4a:bc:bc:43:87:e3:72:ae:3a:ed:b8:ce:ca: 73:d0:e1:5d:bb:09:95:f0:b9:e3:02:3f:89:49:e5:00:00:4f: 5e:3e:90:eb:55:ee:94:ba:26:c9:6d:71:81:5f:2d:be:48:4a: aa:e3:4b:24:78:bf:f4:ff:d6:64:10:5f:b4:c4:c6:c2:5a:0a: d2:e7:a0:11:63:98:4b:bc:39:58:91:a4:70:26:81:1e:e0:2b: bb:fa:10:9d:2d:b8:41:56:a4:bc:51:5a:7d:59:de:d3:eb:86: 3a:15:3d:b3:55:7d:17:39:b4:fb:52:04:71:22:22:58:2c:53: 70:e1:42:7c -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIUfd45TambBuijfF/fBwiV9vxDkdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFMURBNTQ2RjA3NTg4OEIyM0REMjFFQTJBQzVGRTYx Qzk0MzE2MDAeFw0yNjExMDMxMTQ0MDJaFw0yNzExMDIxMTQ5MDJaMDMxMTAvBgNV BAMTKEJBODI2NUIzRTdCN0M2OUUwOTNBMkMxNzUzODIwNkEzODc3MzU0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwT456t6HcmnjdH441slGG4dzu V4pGu/zJNHq3IJlqJ2kXSBmig5/udSRFNTSytWPAJN8VFoQBKyfYBEnzxVGUTbmt mB6nimDmh9yG2evcHS3VrZHE0AQtpW1UfKi3LVjN5MkXQzvhBpBnUTa4Bql5rTQ8 TQnutWC6T0v+G9/wg53uP94EBM89ds3W/GXlSmEQJ4z+DynsRE09diPezj03yVwQ 3AvthUwPZnJna1b1SPZ4ScOp5Vb5sLzrrBn6NCxJ+3A2QXykbN38gXAbl9HOykq5 Ya9AkBDkk9lRHFgt4TOX3GbApvFi68qUC85NYhnp3OUoYxDx0iOQrYU5EeUhAgMB AAGjggL1MIIC8TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6gmWz57fGngk6 LBdTggajh3NUMDAfBgNVHSMEGDAWgBQu4dpUbwdYiLI90h6irF/mHJQxYDAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9yc3luYy5ycGtp LmFzMjA1OTQxLm9yZy9yZXBvL0FTMjA1OTQxLzEvMkVFMURBNTQ2RjA3NTg4OEIy M0REMjFFQTJBQzVGRTYxQzk0MzE2MC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGL BggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVw b3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8y RUUxREE1NDZGMDc1ODg4QjIzREQyMUVBMkFDNUZFNjFDOTQzMTYwLmNlcjCCAT8G CCsGAQUFBwELBIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFh cy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWY4MWViYzEtMGFlOC00OWVlLTgz YWMtMjIwZDVjY2M5YTJhLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lZjgxZWJjMS0wYWU4LTQ5ZWUt ODNhYy0yMjBkNWNjYzlhMmEvMS9CQTgyNjVCM0U3QjdDNjlFMDkzQTJDMTc1Mzgy MDZBMzg3NzM1NDMwLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMu cnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqE8jEcDANBgkq hkiG9w0BAQsFAAOCAQEAkHgJyhVx9adVOJbGl52EWJv3/kfER7G9uluMbNfQp+m4 hrynVsUusjGSTDXg2XPj0bvGeDCNc/m07VIsOM5eYuXLauDIpjpmiZoIDKVBVRu5 ucaK0A/EIfYKag+nOjWSO6isU430CvAQk53F7q0gzCdUw6L7yhFVI0IsOh9ejaAV nmBKvLxDh+NyrjrtuM7Kc9DhXbsJlfC54wI/iUnlAABPXj6Q61XulLomyW1xgV8t vkhKquNLJHi/9P/WZBBftMTGwloK0uegEWOYS7w5WJGkcCaBHuAru/oQnS24QVak vFFafVne0+uGOhU9s1V9Fzm0+1IEcSIiWCxTcOFCfA== -----END CERTIFICATE-----Generated at Thu Nov 5 14:33:13 2026 by rpki-client