$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.cer File: A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.cer (raw, json) Hash identifier: Z0rmboFgJc+d/ANV5HSuQ2TC43B2wJ/5SwhnyV1KZxI= Subject key identifier: A6:23:BB:FB:D1:2A:7C:18:57:10:E0:EB:73:C0:ED:A4:87:4C:2E:8A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1DF52E489B9304C18402383D8ACE0FDC71090E0E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.mft caRepository: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 03 Jul 2025 17:14:51 +0000 Certificate not after: Thu 02 Jul 2026 17:19:51 +0000 Subordinate resources: IP: 2a06:1281:9000::/36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f5:2e:48:9b:93:04:c1:84:02:38:3d:8a:ce:0f:dc:71:09:0e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 17:14:51 2025 GMT Not After : Jul 2 17:19:51 2026 GMT Subject: CN=A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:9a:6b:4e:a8:b8:dd:1f:29:5b:23:96:8f: e0:8e:9c:ce:3e:df:34:54:51:c8:84:8c:ef:f2:b6: 83:6d:45:26:a2:95:d9:37:d5:64:8c:7f:07:27:04: 6c:38:75:3b:d3:6b:c3:9f:87:be:95:36:0e:7a:30: 85:2f:29:65:8c:12:58:e3:03:74:02:64:6f:2e:f8: 91:01:20:1f:b3:4c:59:cb:77:fb:84:9e:d2:62:24: 0c:06:7d:85:11:2a:1a:63:44:00:9c:b7:1d:6e:da: 14:29:ce:38:4e:ee:0a:0b:ed:51:ab:2e:14:d1:b8: 57:e6:27:79:38:c5:8a:ff:b8:0f:0b:f2:84:c3:60: 97:c0:f1:0d:34:87:06:e9:83:70:1d:c2:c6:42:47: 83:44:30:bc:7d:8f:e5:e2:4b:5b:3f:25:48:cc:83: 94:58:3f:d4:23:a9:19:84:48:0a:95:80:76:af:83: 90:1d:f2:0c:8c:89:16:dd:5a:a7:65:cb:8f:ac:15: 6b:9e:f3:e0:a7:66:b9:0a:5e:a1:72:3e:78:dc:c4: c0:c1:c6:26:29:bc:ce:bc:c3:5f:38:f0:46:4f:79: ef:e8:6e:02:ac:95:7b:60:9c:56:bf:53:80:79:0a: 16:59:c2:1d:72:da:e4:3d:f4:24:6e:4a:07:f4:2e: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:23:BB:FB:D1:2A:7C:18:57:10:E0:EB:73:C0:ED:A4:87:4C:2E:8A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/3/A623BBFBD12A7C185710E0EB73C0EDA4874C2E8A.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:9000::/36 Signature Algorithm: sha256WithRSAEncryption 17:61:38:75:aa:4e:1f:3a:63:a4:28:7a:fb:43:62:df:ef:78: f1:d9:61:6f:99:8f:b6:6a:01:ba:c0:ad:6f:68:8e:5c:83:99: 26:3d:e4:3f:35:b2:30:65:7c:14:bd:96:32:57:81:55:74:84: 87:cc:ed:d6:c2:05:a8:b5:e5:0d:14:9d:5f:9f:6a:ff:51:b0: cf:b9:0f:55:ad:96:70:9d:5c:3d:2d:a7:25:f1:90:16:81:90: e6:d7:a6:30:d8:97:d6:b6:69:82:b1:8a:28:0a:15:15:5c:8d: 0e:3b:d3:ba:4b:32:91:0b:4b:64:80:92:4c:a4:d0:cb:48:8c: 27:bf:d3:a9:d9:5c:33:48:90:33:00:d6:b0:9c:cf:b2:05:28: a2:04:50:6b:63:21:01:ca:a9:cc:ea:9e:bf:0d:3b:cc:38:38: d5:27:e8:2e:7c:b7:a4:2f:f9:8a:3f:bc:d7:a8:6d:48:0a:3f: b6:df:b1:d7:f7:89:eb:03:e7:46:5b:93:f2:4a:a3:ff:d9:86: b5:57:a7:6f:6d:49:7d:5c:55:6d:28:7f:cf:73:bb:36:cc:26: 1a:e0:03:2b:c7:91:4d:d0:fa:2e:a0:45:ee:62:b1:9a:35:2c: 46:89:33:da:5a:05:d1:57:a0:a4:2c:65:24:8e:77:21:45:d3: 10:64:16:a5 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUHfUuSJuTBMGEAjg9is4P3HEJDg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNzE0NTFaFw0yNjA3MDIxNzE5NTFaMDMxMTAvBgNV BAMTKEE2MjNCQkZCRDEyQTdDMTg1NzEwRTBFQjczQzBFREE0ODc0QzJFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFZprTqi43R8pWyOWj+COnM4+ 3zRUUciEjO/ytoNtRSaildk31WSMfwcnBGw4dTvTa8Ofh76VNg56MIUvKWWMEljj A3QCZG8u+JEBIB+zTFnLd/uEntJiJAwGfYURKhpjRACctx1u2hQpzjhO7goL7VGr LhTRuFfmJ3k4xYr/uA8L8oTDYJfA8Q00hwbpg3AdwsZCR4NEMLx9j+XiS1s/JUjM g5RYP9QjqRmESAqVgHavg5Ad8gyMiRbdWqdly4+sFWue8+CnZrkKXqFyPnjcxMDB xiYpvM68w1848EZPee/obgKslXtgnFa/U4B5ChZZwh1y2uQ99CRuSgf0LvlpAgMB AAGjggLFMIICwTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSmI7v70Sp8GFcQ 4OtzwO2kh0wuijAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMFQG CCsGAQUFBzAFhkhyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkv ODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMy8wgYAGCCsGAQUFBzAK hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0 NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMy9BNjIzQkJGQkQxMkE3QzE4NTcxMEUw RUI3M0MwRURBNDg3NEMyRThBLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRw LXJwcy5hcmluLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqBhKBkDANBgkq hkiG9w0BAQsFAAOCAQEAF2E4dapOHzpjpCh6+0Ni3+948dlhb5mPtmoBusCtb2iO XIOZJj3kPzWyMGV8FL2WMleBVXSEh8zt1sIFqLXlDRSdX59q/1Gwz7kPVa2WcJ1c PS2nJfGQFoGQ5temMNiX1rZpgrGKKAoVFVyNDjvTuksykQtLZICSTKTQy0iMJ7/T qdlcM0iQMwDWsJzPsgUoogRQa2MhAcqpzOqevw07zDg41SfoLny3pC/5ij+816ht SAo/tt+x1/eJ6wPnRluT8kqj/9mGtVenb21JfVxVbSh/z3O7NswmGuADK8eRTdD6 LqBF7mKxmjUsRokz2loF0VegpCxlJI53IUXTEGQWpQ== -----END CERTIFICATE-----Generated at Sat Jul 5 03:14:53 2025 by rpki-client