$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer File: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (raw, json) Hash identifier: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw= Subject key identifier: E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 7030644BD03037788AA5D6BB4D364B3D1FC5074E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Manifest: rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.mft caRepository: rsync://rpki.ruinet.work/repo/CowGrassland/0/ Notify URL: https://rpki.fengrui.link/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 23:29:22 +0000 Certificate not after: Mon 21 Sep 2026 23:34:22 +0000 Subordinate resources: IP: 2a14:7583:f4f0::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 17:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:30:64:4b:d0:30:37:78:8a:a5:d6:bb:4d:36:4b:3d:1f:c5:07:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Sep 22 23:29:22 2025 GMT Not After : Sep 21 23:34:22 2026 GMT Subject: CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:24:98:b2:bf:cb:9d:f1:5f:4a:76:aa:c9: e0:b5:23:1a:c3:79:f0:51:62:fe:3d:00:ce:af:66: ab:e9:c0:aa:71:4f:75:fa:12:a9:56:3f:90:4f:e1: 50:0e:ed:85:5f:5e:27:a7:c8:01:da:35:12:09:e8: 38:42:6e:f8:e6:17:9f:8d:4e:4c:5f:e4:c7:a3:6c: bf:17:e0:cd:58:70:e4:eb:23:28:62:40:14:10:eb: fb:df:4a:14:4d:ff:db:fb:64:e6:f5:25:96:88:28: 06:75:76:cd:2a:b8:2c:66:65:f3:2f:e7:bd:24:c0: 9f:c4:c2:ed:05:b0:93:ac:91:21:f9:36:ee:13:6d: 05:82:11:a7:95:c6:be:68:d8:51:36:1e:80:61:57: 2b:32:f9:c8:7c:00:4e:1c:ff:a6:79:9f:8d:65:74: 01:9c:41:f4:93:83:77:3e:04:8a:34:39:c6:10:38: e0:44:d2:76:35:56:16:9c:44:41:26:8f:41:c7:6e: 1e:a5:d5:74:90:74:95:63:48:6c:95:a0:ad:e5:6f: cf:0e:ed:1e:f8:7f:0f:b6:1f:d3:50:51:c8:e2:95: f8:54:36:ac:a7:a6:d7:ec:aa:66:84:13:d4:f0:e9: 79:1e:02:14:a7:6f:1a:89:5c:e2:cb:06:3e:4c:b6: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: CA Repository - URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/ RPKI Manifest - URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.mft RPKI Notify - URI:https://rpki.fengrui.link/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f4f0::/44 Signature Algorithm: sha256WithRSAEncryption 15:07:7d:00:93:48:46:c1:d5:ea:90:ab:94:4b:b6:95:7e:44: d4:6e:26:7b:cf:f4:d4:10:9d:70:a1:5f:7c:05:02:ba:0f:81: ca:a4:1c:83:be:27:f1:9b:10:27:94:63:18:ae:57:d6:07:6b: b3:c8:34:d8:4c:e9:47:49:be:5b:c4:05:68:89:4b:24:cb:aa: 59:22:3c:fe:52:ce:02:c3:6f:ad:ca:93:af:90:bc:21:7b:89: 9a:80:0d:cd:7a:26:58:7e:a3:c1:59:1c:e9:58:69:62:f5:17: 85:04:00:d5:76:62:dc:5c:88:80:66:8d:57:dd:0f:54:f1:35: a3:eb:6d:c3:44:0b:22:b3:c4:ba:2f:74:7f:57:17:5f:da:35: 89:3e:d8:51:5a:34:ba:77:4b:c4:c5:05:19:58:f4:39:ba:0e: a9:ca:8e:42:b5:50:1c:a4:26:68:29:9d:51:1b:b1:9c:c6:95: 37:dc:03:09:a1:84:78:9c:20:b4:02:77:d4:35:d5:b9:75:ca: 76:8d:92:7b:29:46:4c:29:b6:6a:9b:7c:2e:74:4a:02:00:90: 51:d7:bb:e5:3d:2d:fc:af:5e:bb:e0:0a:7d:ef:cf:22:ea:5d: aa:94:4d:57:9e:12:2e:a5:6b:84:c9:38:cb:e1:a0:a0:7b:34: bd:4c:cc:b2 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUcDBkS9AwN3iKpda7TTZLPR/FB04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTA5MjIyMzI5MjJaFw0yNjA5MjEyMzM0MjJaMDMxMTAvBgNV BAMTKEUyRDgwNjNDMjBDNUZGMUMxQzFBQ0MzQUQ0RTlEMEMwQzg2NDgyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXySYsr/LnfFfSnaqyeC1IxrD efBRYv49AM6vZqvpwKpxT3X6EqlWP5BP4VAO7YVfXienyAHaNRIJ6DhCbvjmF5+N Tkxf5MejbL8X4M1YcOTrIyhiQBQQ6/vfShRN/9v7ZOb1JZaIKAZ1ds0quCxmZfMv 570kwJ/Ewu0FsJOskSH5Nu4TbQWCEaeVxr5o2FE2HoBhVysy+ch8AE4c/6Z5n41l dAGcQfSTg3c+BIo0OcYQOOBE0nY1VhacREEmj0HHbh6l1XSQdJVjSGyVoK3lb88O 7R74fw+2H9NQUcjilfhUNqynptfsqmaEE9Tw6XkeAhSnbxqJXOLLBj5Mtub3AgMB AAGjggLOMIICyjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTi2AY8IMX/HBwa zDrU6dDAyGSCKTAfBgNVHSMEGDAWgBSxSfI6PpnEdgKX3XEEtADINdhtGTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkuY2VyMIHvBggrBgEFBQcB CwSB4jCB3zA5BggrBgEFBQcwBYYtcnN5bmM6Ly9ycGtpLnJ1aW5ldC53b3JrL3Jl cG8vQ293R3Jhc3NsYW5kLzAvMGUGCCsGAQUFBzAKhllyc3luYzovL3Jwa2kucnVp bmV0LndvcmsvcmVwby9Db3dHcmFzc2xhbmQvMC9FMkQ4MDYzQzIwQzVGRjFDMUMx QUNDM0FENEU5RDBDMEM4NjQ4MjI5Lm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9y cGtpLmZlbmdydWkubGluay9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoU dYP08DANBgkqhkiG9w0BAQsFAAOCAQEAFQd9AJNIRsHV6pCrlEu2lX5E1G4me8/0 1BCdcKFffAUCug+ByqQcg74n8ZsQJ5RjGK5X1gdrs8g02EzpR0m+W8QFaIlLJMuq WSI8/lLOAsNvrcqTr5C8IXuJmoANzXomWH6jwVkc6VhpYvUXhQQA1XZi3FyIgGaN V90PVPE1o+ttw0QLIrPEui90f1cXX9o1iT7YUVo0undLxMUFGVj0OboOqcqOQrVQ HKQmaCmdURuxnMaVN9wDCaGEeJwgtAJ31DXVuXXKdo2SeylGTCm2apt8LnRKAgCQ Ude75T0t/K9eu+AKfe/PIupdqpRNV54SLqVrhMk4y+GgoHs0vUzMsg== -----END CERTIFICATE-----Generated at Thu Oct 9 03:30:08 2025 by rpki-client