$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer File: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer (raw, json) Hash identifier: cED7wv0a4NKxHDL0j1SV1HOLxVGE9+vw/KrSVkA5/aE= Subject key identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 25B554674CCB5104A52D8E89F07A0D68674E6C75 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 22 Feb 2026 11:17:26 +0000 Certificate not after: Sun 21 Feb 2027 11:22:26 +0000 Subordinate resources: IP: 2a05:dfc3:fa00::/40 IP: 2a0a:6044:6400::/40 IP: 2a0a:6044:aa10::/48 IP: 2a0f:6283:1000::/40 IP: 2a0f:6283:1300::/40 IP: 2a0f:6284:5000::/36 IP: 2a0f:6286::/32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b5:54:67:4c:cb:51:04:a5:2d:8e:89:f0:7a:0d:68:67:4e:6c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 22 11:17:26 2026 GMT Not After : Feb 21 11:22:26 2027 GMT Subject: CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:05:f1:7a:28:5d:a0:ba:64:fe:ab:92:00: fe:d6:f9:be:b9:4d:85:f4:7b:5b:b2:7e:1f:5e:d3: 4d:62:a3:9d:5c:a1:56:96:0a:b1:bd:53:7f:f5:a1: 5b:e1:25:70:35:cb:3b:d3:1b:e3:0a:d6:f1:5f:56: e3:6f:70:fb:f8:4f:1f:4c:7a:c3:01:da:f0:de:e0: 90:06:c5:ff:f0:dd:e6:f7:0a:45:61:40:4e:44:4e: 0c:be:78:78:4f:b2:ec:39:d7:df:34:59:6f:04:bb: 4f:0d:d0:43:66:e7:67:15:b1:60:bc:f0:ab:3f:c2: ac:7f:9e:4f:29:10:33:1a:f6:9b:e9:e6:2f:42:3c: 73:34:bd:69:2e:18:87:f2:41:b1:99:63:b6:92:d3: 30:96:f7:bb:30:69:4c:6c:6a:d0:e3:a5:45:9c:cf: 71:3b:9b:d5:6b:cf:0c:46:46:83:44:90:66:33:b5: 27:8f:91:c9:63:fe:31:dd:47:10:08:7b:75:eb:99: c0:01:b2:94:75:f2:90:08:aa:6e:f6:f1:56:61:3f: 65:e6:29:66:3a:fa:38:1f:15:d5:7d:f0:0d:e3:71: 97:43:82:60:b5:ed:07:00:5d:b3:2d:50:2f:45:fd: f3:f7:14:c8:58:57:23:75:66:be:cb:cd:85:46:ac: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 2a0a:6044:6400::/40 2a0a:6044:aa10::/48 2a0f:6283:1000::/40 2a0f:6283:1300::/40 2a0f:6284:5000::/36 2a0f:6286::/32 Signature Algorithm: sha256WithRSAEncryption 8e:05:02:ae:dc:e8:5c:19:c6:d5:d9:55:c3:aa:3c:10:e7:45: b7:de:3d:c8:0a:78:71:44:34:d3:4e:b7:7d:f1:65:ed:bd:8d: a3:57:2c:7c:a9:12:6d:a6:63:4a:2c:7f:b7:55:73:46:04:6c: a0:d1:cf:40:c3:0a:08:6d:41:57:e1:ec:ad:bb:62:24:c1:d4: d7:30:19:3c:53:d0:c6:e5:0d:88:bc:ec:9d:4e:0d:49:4c:0b: 3d:83:e3:36:70:51:eb:1b:83:4e:4a:c7:61:f3:11:b4:92:1e: 84:d1:71:77:f3:68:cc:1b:2e:9c:99:07:66:e5:ba:7f:08:0b: 22:6d:59:05:c5:17:cd:2b:b6:ff:be:14:48:a8:ea:d1:9a:24: 01:cd:dd:c7:0a:36:52:55:9d:74:0f:5c:27:6f:c3:cc:d0:5d: 64:d5:23:08:78:d9:90:bf:a7:ae:39:d2:76:f6:3a:af:ff:04: ca:a6:f6:27:f1:82:bd:01:db:f5:ee:df:eb:31:d4:c6:ce:73: b3:aa:77:48:62:40:ba:61:bf:1d:82:32:09:09:d4:74:b4:2b: db:62:bb:9a:07:3f:20:6d:e8:54:a1:2c:8a:ad:f5:81:5e:c1: 00:21:0b:4a:96:37:c6:ff:9c:1f:53:aa:c3:03:fa:09:a9:d2: 92:64:54:db -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgIUJbVUZ0zLUQSlLY6J8HoNaGdObHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMjIxMTE3MjZaFw0yNzAyMjExMTIyMjZaMDMxMTAvBgNV BAMTKDBENkI1MzgzNDlCNDM2QURFOEQxQ0FGQzczRTUzNDFCQkM4OEFENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHQXxeihdoLpk/quSAP7W+b65 TYX0e1uyfh9e001io51coVaWCrG9U3/1oVvhJXA1yzvTG+MK1vFfVuNvcPv4Tx9M esMB2vDe4JAGxf/w3eb3CkVhQE5ETgy+eHhPsuw51980WW8Eu08N0ENm52cVsWC8 8Ks/wqx/nk8pEDMa9pvp5i9CPHM0vWkuGIfyQbGZY7aS0zCW97swaUxsatDjpUWc z3E7m9VrzwxGRoNEkGYztSePkclj/jHdRxAIe3XrmcABspR18pAIqm728VZhP2Xm KWY6+jgfFdV98A3jcZdDgmC17QcAXbMtUC9F/fP3FMhYVyN1Zr7LzYVGrEV1AgMB AAGjggMRMIIDDTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNa1ODSbQ2rejR yvxz5TQbvIitVzAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgzYzkwLzIv MEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJCQzg4QUQ1Ny5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEH AQH/BEIwQDA+BAIAAjA4AwYAKgXfw/oDBgAqCmBEZAMHACoKYESqEAMGACoPYoMQ AwYAKg9igxMDBgQqD2KEUAMFACoPYoYwDQYJKoZIhvcNAQELBQADggEBAI4FAq7c 6FwZxtXZVcOqPBDnRbfePcgKeHFENNNOt33xZe29jaNXLHypEm2mY0osf7dVc0YE bKDRz0DDCghtQVfh7K27YiTB1NcwGTxT0MblDYi87J1ODUlMCz2D4zZwUesbg05K x2HzEbSSHoTRcXfzaMwbLpyZB2blun8ICyJtWQXFF80rtv++FEio6tGaJAHN3ccK NlJVnXQPXCdvw8zQXWTVIwh42ZC/p6450nb2Oq//BMqm9ifxgr0B2/Xu3+sx1MbO c7Oqd0hiQLphvx2CMgkJ1HS0K9tiu5oHPyBt6FShLIqt9YFewQAhC0qWN8b/nB9T qsMD+gmp0pJkVNs= -----END CERTIFICATE-----Generated at Mon Feb 23 06:24:19 2026 by rpki-client