$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer (raw, json) Hash identifier: 2ZJOF1FjPWg/MGwVVeUHeZ2HTnjo7rxzXamdwU2aRCo= Subject key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0C1A90D85CD20AFBC72EBF7BB053F3E6E78F4EAA Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 11 Feb 2026 15:32:26 +0000 Certificate not after: Wed 10 Feb 2027 15:37:26 +0000 Subordinate resources: IP: 2a0a:6044:7d00::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1a:90:d8:5c:d2:0a:fb:c7:2e:bf:7b:b0:53:f3:e6:e7:8f:4e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 11 15:32:26 2026 GMT Not After : Feb 10 15:37:26 2027 GMT Subject: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:76:ff:b7:0f:89:01:ee:13:3f:d6:0d:41:69: 09:64:19:86:80:08:cd:2a:5e:36:99:25:b0:c8:ec: 55:87:0a:e8:61:05:fa:a4:48:1c:70:73:9e:40:46: 3e:dc:68:a8:4f:de:5e:2a:7e:c1:d2:fb:5a:ab:75: 9b:4f:67:6f:ac:d2:74:ea:85:73:26:cb:bc:be:9d: 50:aa:db:08:e7:32:c6:ac:87:94:f2:07:16:b5:69: 18:c4:96:f0:b2:02:59:8b:35:df:c3:71:86:7d:af: ba:f4:0d:8c:3d:6b:bd:40:dd:2e:b9:19:bf:f9:03: c4:9c:2b:a6:f0:76:12:bf:4f:93:49:b5:b6:7a:e3: 8f:05:6f:65:74:0c:20:90:25:83:40:09:da:b2:fe: e0:6c:f0:07:4f:48:2b:fd:49:69:62:3d:17:84:9a: c4:46:c8:cd:11:20:78:7c:f8:9c:fa:ad:f8:cd:c3: b8:38:78:8f:0b:44:f1:12:b6:03:ad:5b:a4:1f:a1: 0a:bb:5d:07:d2:0b:9a:c2:66:8e:70:4d:ee:36:d5: 2e:61:5e:cc:d6:fa:0d:ab:0e:4c:28:e7:f5:c5:e3: f0:44:7b:b7:da:32:21:4c:56:1c:a3:03:7c:11:d2: e8:3d:ea:17:4d:da:7b:0a:6a:45:5d:99:94:05:17: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7d00::/40 Signature Algorithm: sha256WithRSAEncryption 47:03:34:fd:2b:33:bb:39:13:29:b0:e9:0b:eb:3c:09:f8:c3: da:d1:4d:01:b6:48:c6:1c:7b:e6:8e:b1:93:a9:9e:b8:ae:bf: 5f:9a:05:45:60:b4:b7:01:15:1f:d2:6f:94:d2:34:1b:f8:c8: 82:97:d8:e0:73:c5:22:46:99:14:c1:40:9b:1a:ee:c3:b6:6d: 82:52:85:a7:4c:03:5f:ed:ac:43:75:55:df:a3:63:c6:5d:a9: ab:6d:5e:97:a2:d1:4e:fc:2c:2a:e2:33:98:45:2e:34:96:1c: c3:58:23:a4:c4:ab:d7:a5:0d:0e:ea:b5:ee:f2:02:0c:6e:42: 4c:16:a4:3a:fd:24:e2:bc:e9:b4:14:05:90:2e:ee:2a:b1:a4: fb:cb:ff:e2:96:eb:a5:ab:dc:a4:5e:01:4e:aa:70:37:3a:a6: f7:69:59:37:d8:3e:dd:75:e2:72:70:65:05:a3:d0:99:c9:fa: 54:8f:59:62:b2:fd:8d:aa:3e:5d:75:3d:01:80:8a:64:d4:e7: 51:b9:c5:e0:5b:f8:42:d8:d2:79:9a:54:f7:28:07:ed:66:9d: 6b:b8:38:7b:14:90:20:6b:ca:64:a3:89:2f:71:28:7c:92:1f: bc:56:d3:9b:b0:ff:65:fd:fe:98:e4:6c:f1:a4:1b:59:0e:dd: c2:6a:71:ab -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUDBqQ2FzSCvvHLr97sFPz5uePTqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMTExNTMyMjZaFw0yNzAyMTAxNTM3MjZaMDMxMTAvBgNV BAMTKDYyN0IzODc2MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdv+3D4kB7hM/1g1BaQlkGYaA CM0qXjaZJbDI7FWHCuhhBfqkSBxwc55ARj7caKhP3l4qfsHS+1qrdZtPZ2+s0nTq hXMmy7y+nVCq2wjnMsash5TyBxa1aRjElvCyAlmLNd/DcYZ9r7r0DYw9a71A3S65 Gb/5A8ScK6bwdhK/T5NJtbZ6448Fb2V0DCCQJYNACdqy/uBs8AdPSCv9SWliPReE msRGyM0RIHh8+Jz6rfjNw7g4eI8LRPEStgOtW6QfoQq7XQfSC5rCZo5wTe421S5h XszW+g2rDkwo5/XF4/BEe7faMiFMVhyjA3wR0ug96hdN2nsKakVdmZQFFxNLAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiezh2BN5E1gBv DnVn4tB+6Cz2vTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNhZWFlLzIv NjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRH0wDQYJKoZIhvcNAQELBQADggEBAEcDNP0r M7s5Eymw6QvrPAn4w9rRTQG2SMYce+aOsZOpnriuv1+aBUVgtLcBFR/Sb5TSNBv4 yIKX2OBzxSJGmRTBQJsa7sO2bYJShadMA1/trEN1Vd+jY8ZdqattXpei0U78LCri M5hFLjSWHMNYI6TEq9elDQ7qte7yAgxuQkwWpDr9JOK86bQUBZAu7iqxpPvL/+KW 66Wr3KReAU6qcDc6pvdpWTfYPt114nJwZQWj0JnJ+lSPWWKy/Y2qPl11PQGAimTU 51G5xeBb+ELY0nmaVPcoB+1mnWu4OHsUkCBrymSjiS9xKHySH7xW05uw/2X9/pjk bPGkG1kO3cJqcas= -----END CERTIFICATE-----Generated at Mon Feb 23 06:24:32 2026 by rpki-client