$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer File: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer (raw, json) Hash identifier: +BQe9mb1w+FpjzAREx9M+LCPLRuKvRKfEepCHgi++90= Subject key identifier: 57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2AE3C3B23351A02ACCFB0DC15A59436B47FAE945 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 21 Feb 2026 22:58:04 +0000 Certificate not after: Sat 20 Feb 2027 23:03:04 +0000 Subordinate resources: IP: 2a0a:6044:b300::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e3:c3:b2:33:51:a0:2a:cc:fb:0d:c1:5a:59:43:6b:47:fa:e9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 21 22:58:04 2026 GMT Not After : Feb 20 23:03:04 2027 GMT Subject: CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:4e:30:4a:e7:7b:71:08:be:68:b4:21:87: c4:d1:6e:3b:f2:b7:e4:36:99:f0:99:5c:80:77:0c: 04:ef:af:32:e7:10:1a:07:b3:c1:59:4f:e2:ca:73: 3f:24:f7:06:bd:b5:cf:33:8a:53:cf:86:90:0b:1e: 5c:11:6b:77:c4:f9:17:b4:0f:44:33:46:8b:82:59: 79:6a:17:ee:84:c3:16:5b:95:c4:0e:08:28:1b:0d: e2:86:c1:76:20:8e:ae:8c:61:32:1e:71:b8:b6:47: 37:0f:23:db:09:58:b7:e9:0d:e9:9b:70:59:2b:48: 06:09:7f:cf:4c:ec:61:1b:43:72:9c:3f:34:e1:19: 50:34:21:00:c8:76:7a:d1:7b:bf:66:67:88:da:24: ab:db:d7:7e:a8:7d:2f:ba:4e:04:10:b7:27:aa:6d: 03:9b:f5:c8:72:86:e3:36:bf:2b:e6:c2:30:3b:73: 42:40:74:87:73:7f:03:4d:07:c6:30:6d:d8:86:a5: a9:20:19:22:1f:4d:4b:33:10:5e:d5:a8:1c:14:7e: 99:cd:7a:c6:9f:dd:31:69:f9:de:b5:52:b6:b2:36: a3:fe:cc:d3:64:f0:71:5a:01:11:fd:dc:86:01:12: f1:f3:40:60:dd:7c:60:14:46:b9:07:2b:d5:c3:33: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b300::/40 Signature Algorithm: sha256WithRSAEncryption 73:29:7e:ed:53:62:2d:f2:90:ba:8b:ff:3a:b2:1a:c5:a9:31: e4:64:f6:e5:69:8c:f9:98:ea:b4:b5:ea:83:cc:13:b1:24:c5: 03:2a:0b:dc:80:ed:47:20:db:14:bd:5f:2d:f3:56:ba:a9:29: 98:9f:e5:ce:04:e7:2f:d2:e8:eb:b6:c9:d0:89:47:4d:1b:26: d6:02:fd:7a:d4:1a:31:6b:b2:4c:91:75:f3:80:03:5b:54:06: ab:7f:3b:92:5d:02:5c:c0:f2:16:d7:e2:59:ad:16:09:5f:6e: 5c:7c:5f:bc:14:c2:fc:54:ea:33:fb:60:8e:e6:3a:af:b8:0c: 5b:c0:66:a3:73:1d:2d:cf:b6:db:e3:2b:1d:bd:e1:12:79:ca: d0:84:91:e4:ba:63:61:f6:65:61:1f:11:58:bc:2c:59:61:5a: 3a:60:9c:47:e8:c2:47:46:c7:ea:72:25:a7:af:9f:9d:35:9d: ff:14:ee:f4:ee:6e:4f:84:fa:4a:d3:8d:c6:96:9c:98:90:d8: 70:c5:51:d6:87:cd:91:61:b2:b8:11:e2:27:bd:dc:a0:cc:30: 93:db:7f:e4:f0:83:23:5a:58:42:87:25:a2:1e:67:cf:9c:e8: 51:7a:1d:f1:70:a9:6c:a0:b7:44:73:07:b3:b6:3c:29:e2:ec: 9e:55:e6:7f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUKuPDsjNRoCrM+w3BWllDa0f66UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMjEyMjU4MDRaFw0yNzAyMjAyMzAzMDRaMDMxMTAvBgNV BAMTKDU3NTA1MUREOUE5QkZBNTdCQ0MzQTJCOTgyRjI0RTExRDlCQUQ2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9F04wSud7cQi+aLQhh8TRbjvy t+Q2mfCZXIB3DATvrzLnEBoHs8FZT+LKcz8k9wa9tc8zilPPhpALHlwRa3fE+Re0 D0QzRouCWXlqF+6EwxZblcQOCCgbDeKGwXYgjq6MYTIecbi2RzcPI9sJWLfpDemb cFkrSAYJf89M7GEbQ3KcPzThGVA0IQDIdnrRe79mZ4jaJKvb136ofS+6TgQQtyeq bQOb9chyhuM2vyvmwjA7c0JAdIdzfwNNB8YwbdiGpakgGSIfTUszEF7VqBwUfpnN esaf3TFp+d61UrayNqP+zNNk8HFaARH93IYBEvHzQGDdfGAURrkHK9XDMzwVAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXUFHdmpv6V7zD ormC8k4R2brWPDAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRlYTA5LzIv NTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFEOUJBRDYzQy5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRLMwDQYJKoZIhvcNAQELBQADggEBAHMpfu1T Yi3ykLqL/zqyGsWpMeRk9uVpjPmY6rS16oPME7EkxQMqC9yA7Ucg2xS9Xy3zVrqp KZif5c4E5y/S6Ou2ydCJR00bJtYC/XrUGjFrskyRdfOAA1tUBqt/O5JdAlzA8hbX 4lmtFglfblx8X7wUwvxU6jP7YI7mOq+4DFvAZqNzHS3PttvjKx294RJ5ytCEkeS6 Y2H2ZWEfEVi8LFlhWjpgnEfowkdGx+pyJaevn501nf8U7vTubk+E+krTjcaWnJiQ 2HDFUdaHzZFhsrgR4ie93KDMMJPbf+TwgyNaWEKHJaIeZ8+c6FF6HfFwqWygt0Rz B7O2PCni7J5V5n8= -----END CERTIFICATE-----Generated at Mon Feb 23 06:24:14 2026 by rpki-client