$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer File: 015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer (raw, json) Hash identifier: c80CvwDZoubTS+o+8/y3yxxmbgVrfvNdqKcIkfRnfGM= Subject key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2CB706E300976DC9F115CEA57ADF1DD8E34119C7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 04 Jul 2025 00:42:39 +0000 Certificate not after: Fri 03 Jul 2026 00:47:39 +0000 Subordinate resources: IP: 2a0f:6287:e000::/35 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 16:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b7:06:e3:00:97:6d:c9:f1:15:ce:a5:7a:df:1d:d8:e3:41:19:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 4 00:42:39 2025 GMT Not After : Jul 3 00:47:39 2026 GMT Subject: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:21:4b:a3:12:49:1a:ee:5b:65:83:09:b2: 69:57:62:5c:b3:97:7e:fa:5d:6b:7e:36:dd:36:6d: e4:01:48:da:49:35:6d:26:25:ad:78:90:22:65:21: 19:63:a2:7f:d3:27:8a:6b:30:80:6f:98:1a:a2:03: 0a:a0:64:d3:cd:bf:d7:ed:c3:23:44:12:43:8b:fb: 8f:5a:c0:fa:80:5c:de:6b:79:3f:50:cd:cc:49:30: 68:64:c0:c1:0e:6f:32:ac:83:f0:6f:b0:a9:67:ec: ac:22:0a:43:6f:ad:7a:9b:7c:97:93:f2:60:f7:15: ba:b6:31:40:6d:87:f7:19:34:54:e4:c4:b4:5a:2f: 50:7a:88:3b:b9:39:c1:df:a8:7e:ba:ae:84:90:9e: 38:a5:fc:17:ba:aa:00:2f:e2:7e:5d:a0:b6:df:11: e0:a7:46:d5:10:48:e9:b5:ef:39:3d:dd:0d:6e:a7: 13:14:48:e9:2d:ca:0e:ca:fa:93:16:1d:dc:48:d3: 32:cc:16:94:53:14:5f:8c:68:d8:e3:02:f2:5c:9d: 4b:9f:43:7a:ee:56:27:3b:8b:ac:23:c0:57:da:95: ff:82:70:da:28:33:f1:0b:9a:8f:c3:82:dc:45:e2: 24:89:d4:8f:f8:8b:dc:a4:f9:9d:79:b8:1b:3e:47: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:e000::/35 Signature Algorithm: sha256WithRSAEncryption 18:0f:29:b9:5a:ec:02:29:99:69:3f:58:5d:7c:2a:37:92:39: 8f:79:87:52:cb:d6:b9:17:49:da:6d:0b:73:c9:9b:7c:54:1d: fc:9b:41:fe:74:23:da:21:2d:57:12:66:3f:3c:ed:eb:4e:c7: 24:a8:b5:cc:0f:ca:a8:d5:d7:a0:10:40:c4:e5:45:21:c6:a7: a5:a0:22:09:ef:e6:78:80:6d:35:8f:f8:0c:8e:0b:5d:02:e6: a2:d2:0c:13:18:ec:4f:5a:ca:5c:38:7a:45:f5:9c:0a:2a:fa: 4b:3e:d2:ef:cb:7b:57:08:4d:ff:c1:f3:09:72:0a:1f:c8:6a: 97:9b:e6:62:9f:55:e1:54:a1:2e:45:94:2a:af:f7:be:57:02: 09:44:69:9e:27:4f:80:74:0a:f1:fc:02:86:3c:94:ca:77:fb: 67:66:d0:96:c4:69:8f:ba:52:80:61:37:0a:1f:33:8e:f4:d5: de:ae:da:f4:92:03:10:de:c7:6a:69:8f:35:13:72:61:48:74: ff:55:46:e6:25:70:c0:61:57:cf:a8:3e:b0:99:9d:54:ba:b2: 37:dc:49:b7:1a:2b:69:ae:ae:29:65:ea:45:b3:0f:c2:50:62: 0c:a7:dd:0a:7f:e9:72:55:ae:bd:63:66:a6:16:15:df:f0:7b: 2a:44:98:c4 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIULLcG4wCXbcnxFc6let8d2ONBGccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDQwMDQyMzlaFw0yNjA3MDMwMDQ3MzlaMDMxMTAvBgNV BAMTKDAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJiFLoxJJGu5bZYMJsmlXYlyz l376XWt+Nt02beQBSNpJNW0mJa14kCJlIRljon/TJ4prMIBvmBqiAwqgZNPNv9ft wyNEEkOL+49awPqAXN5reT9QzcxJMGhkwMEObzKsg/BvsKln7KwiCkNvrXqbfJeT 8mD3Fbq2MUBth/cZNFTkxLRaL1B6iDu5OcHfqH66roSQnjil/Be6qgAv4n5doLbf EeCnRtUQSOm17zk93Q1upxMUSOktyg7K+pMWHdxI0zLMFpRTFF+MaNjjAvJcnUuf Q3ruVic7i6wjwFfalf+CcNooM/ELmo/DgtxF4iSJ1I/4i9yk+Z15uBs+R/c7AgMB AAGjggLFMIICwTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBXHBuTVzUvSX7 vo+DkMhKfPV9FTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMFQG CCsGAQUFBzAFhkhyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkv OGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wgYAGCCsGAQUFBzAK hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5 MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRENUNENEJEMjVGQkJF OEY4MzkwQzg0QTdDRjU3RDE1Lm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRw LXJwcy5hcmluLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUqD2KH4DANBgkq hkiG9w0BAQsFAAOCAQEAGA8puVrsAimZaT9YXXwqN5I5j3mHUsvWuRdJ2m0Lc8mb fFQd/JtB/nQj2iEtVxJmPzzt607HJKi1zA/KqNXXoBBAxOVFIcanpaAiCe/meIBt NY/4DI4LXQLmotIMExjsT1rKXDh6RfWcCir6Sz7S78t7VwhN/8HzCXIKH8hql5vm Yp9V4VShLkWUKq/3vlcCCURpnidPgHQK8fwChjyUynf7Z2bQlsRpj7pSgGE3Ch8z jvTV3q7a9JIDEN7HammPNRNyYUh0/1VG5iVwwGFXz6g+sJmdVLqyN9xJtxoraa6u KWXqRbMPwlBiDKfdCn/pclWuvWNmphYV3/B7KkSYxA== -----END CERTIFICATE-----Generated at Fri Jul 4 20:43:35 2025 by rpki-client