$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer File: 015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer (raw, json) Hash identifier: UFGRwoRbqfYdGeOMgJjGGzXQHssnxGVjeW+G4tOAGS0= Subject key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 41F007CB93F6C41A1ED49E6F64225A60BCA7C5F0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sat 06 Jun 2026 06:24:20 +0000 Certificate not after: Sat 05 Jun 2027 06:29:20 +0000 Subordinate resources: IP: 2a0f:6287:e000::/35 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f0:07:cb:93:f6:c4:1a:1e:d4:9e:6f:64:22:5a:60:bc:a7:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 6 06:24:20 2026 GMT Not After : Jun 5 06:29:20 2027 GMT Subject: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:21:4b:a3:12:49:1a:ee:5b:65:83:09:b2: 69:57:62:5c:b3:97:7e:fa:5d:6b:7e:36:dd:36:6d: e4:01:48:da:49:35:6d:26:25:ad:78:90:22:65:21: 19:63:a2:7f:d3:27:8a:6b:30:80:6f:98:1a:a2:03: 0a:a0:64:d3:cd:bf:d7:ed:c3:23:44:12:43:8b:fb: 8f:5a:c0:fa:80:5c:de:6b:79:3f:50:cd:cc:49:30: 68:64:c0:c1:0e:6f:32:ac:83:f0:6f:b0:a9:67:ec: ac:22:0a:43:6f:ad:7a:9b:7c:97:93:f2:60:f7:15: ba:b6:31:40:6d:87:f7:19:34:54:e4:c4:b4:5a:2f: 50:7a:88:3b:b9:39:c1:df:a8:7e:ba:ae:84:90:9e: 38:a5:fc:17:ba:aa:00:2f:e2:7e:5d:a0:b6:df:11: e0:a7:46:d5:10:48:e9:b5:ef:39:3d:dd:0d:6e:a7: 13:14:48:e9:2d:ca:0e:ca:fa:93:16:1d:dc:48:d3: 32:cc:16:94:53:14:5f:8c:68:d8:e3:02:f2:5c:9d: 4b:9f:43:7a:ee:56:27:3b:8b:ac:23:c0:57:da:95: ff:82:70:da:28:33:f1:0b:9a:8f:c3:82:dc:45:e2: 24:89:d4:8f:f8:8b:dc:a4:f9:9d:79:b8:1b:3e:47: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6287:e000::/35 Signature Algorithm: sha256WithRSAEncryption 0b:27:06:54:c0:6c:17:59:55:7b:8c:ff:71:95:58:a7:43:4e: 70:8b:84:de:23:0d:db:42:57:54:06:8e:35:ef:64:67:0d:5c: fe:aa:6f:e9:4d:f0:ee:a1:64:0a:e8:c5:59:8a:14:0f:08:85: 98:56:d2:1d:31:85:7d:22:58:8d:51:7c:e4:1d:ad:dd:6b:d6: b3:99:3d:b0:70:64:62:05:12:7d:ee:12:b7:ec:62:6e:99:e1: d1:dc:95:43:4c:b7:86:9a:66:a9:8f:f8:29:e9:ad:21:47:1c: ff:8e:07:46:08:45:3c:72:11:2e:bf:9b:16:8f:98:b5:6a:0d: 28:f3:ae:27:04:7b:b0:ad:72:f5:62:c0:72:46:1e:58:d3:05: e8:90:96:a7:ca:2d:fd:12:a6:49:c0:86:99:0d:8d:10:58:35: 7a:b9:29:d0:29:5b:4e:9e:57:91:5d:6d:f6:a3:1e:54:ea:9e: aa:94:d6:7a:f6:12:8b:5c:f2:8a:50:9c:0c:04:78:60:06:08: 82:fd:c6:eb:37:6d:04:35:6d:8a:3c:b1:d7:c7:59:ed:20:d1: 8f:db:71:32:64:b2:68:58:cd:ff:00:b0:ed:48:23:cd:f5:cf: 6d:d5:39:b8:57:ce:58:37:d1:1c:c9:c1:4e:9d:81:25:fa:e3: d2:3c:a6:e4 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUQfAHy5P2xBoe1J5vZCJaYLynxfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MDYwNjI0MjBaFw0yNzA2MDUwNjI5MjBaMDMxMTAvBgNV BAMTKDAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJiFLoxJJGu5bZYMJsmlXYlyz l376XWt+Nt02beQBSNpJNW0mJa14kCJlIRljon/TJ4prMIBvmBqiAwqgZNPNv9ft wyNEEkOL+49awPqAXN5reT9QzcxJMGhkwMEObzKsg/BvsKln7KwiCkNvrXqbfJeT 8mD3Fbq2MUBth/cZNFTkxLRaL1B6iDu5OcHfqH66roSQnjil/Be6qgAv4n5doLbf EeCnRtUQSOm17zk93Q1upxMUSOktyg7K+pMWHdxI0zLMFpRTFF+MaNjjAvJcnUuf Q3ruVic7i6wjwFfalf+CcNooM/ELmo/DgtxF4iSJ1I/4i9yk+Z15uBs+R/c7AgMB AAGjggLFMIICwTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBXHBuTVzUvSX7 vo+DkMhKfPV9FTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMFQG CCsGAQUFBzAFhkhyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkv OGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wgYAGCCsGAQUFBzAK hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5 MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRENUNENEJEMjVGQkJF OEY4MzkwQzg0QTdDRjU3RDE1Lm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRw LXJwcy5hcmluLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUqD2KH4DANBgkq hkiG9w0BAQsFAAOCAQEACycGVMBsF1lVe4z/cZVYp0NOcIuE3iMN20JXVAaONe9k Zw1c/qpv6U3w7qFkCujFWYoUDwiFmFbSHTGFfSJYjVF85B2t3WvWs5k9sHBkYgUS fe4St+xibpnh0dyVQ0y3hppmqY/4KemtIUcc/44HRghFPHIRLr+bFo+YtWoNKPOu JwR7sK1y9WLAckYeWNMF6JCWp8ot/RKmScCGmQ2NEFg1erkp0ClbTp5XkV1t9qMe VOqeqpTWevYSi1zyilCcDAR4YAYIgv3G6zdtBDVtijyx18dZ7SDRj9txMmSyaFjN /wCw7UgjzfXPbdU5uFfOWDfRHMnBTp2BJfrj0jym5A== -----END CERTIFICATE-----Generated at Sat Jun 6 09:38:37 2026 by rpki-client