$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.cer File: 24315263C7866029FD5A13E5D92A3B0F8EF09BA1.cer (raw, json) Hash identifier: 5jJP5KGVnU9yN2LPG0v2oZM72jFlrottsfXDpiVZBTI= Subject key identifier: 24:31:52:63:C7:86:60:29:FD:5A:13:E5:D9:2A:3B:0F:8E:F0:9B:A1 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 0D38D59B0FDD3BBC20C9100BA17CF7DF3FFA7E32 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Manifest: rsync://rpki.cc/repo/AlbroHoldings/1/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.mft caRepository: rsync://rpki.cc/repo/AlbroHoldings/1/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Sat 05 Jul 2025 11:53:48 +0000 Certificate not after: Sat 04 Jul 2026 11:58:48 +0000 Subordinate resources: IP: 2a07:54c1:c000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:38:d5:9b:0f:dd:3b:bc:20:c9:10:0b:a1:7c:f7:df:3f:fa:7e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 5 11:53:48 2025 GMT Not After : Jul 4 11:58:48 2026 GMT Subject: CN=24315263C7866029FD5A13E5D92A3B0F8EF09BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:4a:77:79:4a:f0:05:a1:50:d4:cb:2d:87: 5d:62:a9:65:6b:d8:6d:7d:11:38:8e:c4:19:b3:9d: 56:39:f8:a5:41:50:b3:7d:74:e6:d2:27:56:14:9d: 89:3e:e0:8e:d1:e6:cd:cc:f0:56:d5:3c:04:97:65: db:ac:14:3f:67:c5:04:1f:2a:2d:39:2d:df:f0:22: b3:52:d2:da:1d:34:91:97:dc:cf:30:f9:5d:78:e2: 36:a5:a5:d2:84:6d:2c:49:e2:78:65:20:90:ab:18: fb:ba:9d:d7:fa:82:58:9b:2a:6e:db:c8:e2:55:ba: be:1e:72:e2:16:73:f2:77:53:56:c6:07:b0:a9:d9: c7:28:ab:50:ac:ec:de:de:83:08:03:51:c0:de:a3: b8:95:d7:3d:c8:c0:50:29:54:2a:ff:7b:2b:12:a6: 67:3c:49:86:7c:9d:31:9e:12:f0:66:95:44:b1:e0: a6:f9:6e:6b:90:db:b6:1a:2a:b8:8c:c9:c6:d4:ba: ad:49:44:75:f7:0f:91:a6:3a:30:6d:42:ff:19:6d: 71:ae:a9:9b:f4:76:0b:cb:4c:9c:ae:70:34:d4:5a: 34:05:c6:cb:0e:d0:34:0e:73:42:e7:43:ac:70:8f: ed:51:8a:59:30:8a:b2:4e:15:83:5d:8a:8a:c0:06: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:31:52:63:C7:86:60:29:FD:5A:13:E5:D9:2A:3B:0F:8E:F0:9B:A1 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/AlbroHoldings/1/ RPKI Manifest - URI:rsync://rpki.cc/repo/AlbroHoldings/1/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:c000::/40 Signature Algorithm: sha256WithRSAEncryption 18:4e:77:bc:4d:1d:95:b2:19:19:8e:5a:b5:e1:a9:95:d1:26: 84:68:28:da:e7:5b:b4:79:1b:8c:62:dc:45:60:25:03:b2:f1: ec:73:d6:7a:49:78:bf:08:b1:b0:8e:23:e9:b4:81:b5:db:3a: 08:37:ab:ea:68:c8:83:f3:6f:77:2d:a2:3c:08:1d:d2:bc:2c: f1:83:5e:fa:fe:40:ff:e7:1a:fd:96:9f:d8:97:4b:63:7a:2e: 15:1a:5b:cf:dc:75:53:28:de:17:ad:01:7c:bd:8f:38:7d:0b: 49:a1:df:08:83:60:4c:12:1a:91:2f:a7:33:55:84:0b:76:03: d8:80:7d:9f:76:2f:98:8a:a5:e0:e9:b6:e2:7f:c8:86:a6:95: cf:81:30:46:60:a0:f2:45:a4:f5:97:d1:8e:ed:de:d0:59:ba: 2c:81:94:80:d4:55:8d:d3:85:e0:54:37:e2:ce:07:db:ae:73: bf:03:63:83:08:9a:1b:45:ab:63:e5:84:c5:cc:a7:6a:9d:72: 2b:93:87:4a:e1:f0:db:67:c0:43:18:d5:53:3d:53:7a:47:80: 73:ae:88:64:58:47:7a:81:16:5e:e0:bc:87:f3:ff:46:0b:3b: 4d:3a:59:6a:f0:aa:83:4f:f4:68:37:bd:a4:af:98:78:ec:a9: e2:8c:4c:f2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDTjVmw/dO7wgyRALoXz33z/6fjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDUxMTUzNDhaFw0yNjA3MDQxMTU4NDhaMDMxMTAvBgNV BAMTKDI0MzE1MjYzQzc4NjYwMjlGRDVBMTNFNUQ5MkEzQjBGOEVGMDlCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYEp3eUrwBaFQ1Msth11iqWVr 2G19ETiOxBmznVY5+KVBULN9dObSJ1YUnYk+4I7R5s3M8FbVPASXZdusFD9nxQQf Ki05Ld/wIrNS0todNJGX3M8w+V144jalpdKEbSxJ4nhlIJCrGPu6ndf6glibKm7b yOJVur4ecuIWc/J3U1bGB7Cp2ccoq1Cs7N7egwgDUcDeo7iV1z3IwFApVCr/eysS pmc8SYZ8nTGeEvBmlUSx4Kb5bmuQ27YaKriMycbUuq1JRHX3D5GmOjBtQv8ZbXGu qZv0dgvLTJyucDTUWjQFxssO0DQOc0LnQ6xwj+1RilkwirJOFYNdiorABg0bAgMB AAGjggKoMIICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkMVJjx4ZgKf1a E+XZKjsPjvCboTAfBgNVHSMEGDAWgBRv92rEIYlP1czWMy+iqc8zAxLOqDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC82RkY3NkFDNDIxODk0RkQ1Q0NENjMzMkZB MkE5Q0YzMzAzMTJDRUE4LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy82RkY3NkFDNDIxODk0RkQ1Q0NE NjMzMkZBMkE5Q0YzMzAzMTJDRUE4LmNlcjCB1QYIKwYBBQUHAQsEgcgwgcUwMQYI KwYBBQUHMAWGJXJzeW5jOi8vcnBraS5jYy9yZXBvL0FsYnJvSG9sZGluZ3MvMS8w XQYIKwYBBQUHMAqGUXJzeW5jOi8vcnBraS5jYy9yZXBvL0FsYnJvSG9sZGluZ3Mv MS8yNDMxNTI2M0M3ODY2MDI5RkQ1QTEzRTVEOTJBM0IwRjhFRjA5QkExLm1mdDAx BggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNjL3JyZHAvbm90aWZpY2F0aW9uLnht bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAKgdUwcAwDQYJKoZIhvcNAQELBQADggEBABhOd7xNHZWyGRmOWrXh qZXRJoRoKNrnW7R5G4xi3EVgJQOy8exz1npJeL8IsbCOI+m0gbXbOgg3q+poyIPz b3ctojwIHdK8LPGDXvr+QP/nGv2Wn9iXS2N6LhUaW8/cdVMo3hetAXy9jzh9C0mh 3wiDYEwSGpEvpzNVhAt2A9iAfZ92L5iKpeDptuJ/yIamlc+BMEZgoPJFpPWX0Y7t 3tBZuiyBlIDUVY3TheBUN+LOB9uuc78DY4MImhtFq2PlhMXMp2qdciuTh0rh8Ntn wEMY1VM9U3pHgHOuiGRYR3qBFl7gvIfz/0YLO006WWrwqoNP9Gg3vaSvmHjsqeKM TPI= -----END CERTIFICATE-----Generated at Sun Jul 27 15:50:48 2025 by rpki-client