$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer File: B46FBF1DD35487568FC708767F085FAD2881F56D.cer (raw, json) Hash identifier: ASUxtSVu+lKI8+YjlCiOwd6TBGh1n6s7iOxpMYtjz9g= Subject key identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5044B87463DC1A3EFAC20CCA1435ACFDD153434D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 03 Jul 2025 21:51:21 +0000 Certificate not after: Thu 02 Jul 2026 21:56:21 +0000 Subordinate resources: IP: 2a05:dfc3:fd40::/44 IP: 2a09:54c7:1000::/36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:44:b8:74:63:dc:1a:3e:fa:c2:0c:ca:14:35:ac:fd:d1:53:43:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 21:51:21 2025 GMT Not After : Jul 2 21:56:21 2026 GMT Subject: CN=B46FBF1DD35487568FC708767F085FAD2881F56D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:b9:32:a5:e6:f2:ec:cf:90:8e:5b:3f:53: 0e:10:29:ff:85:34:c8:a5:3d:37:50:a0:01:83:70: cf:b4:d3:09:f4:f3:fc:e1:76:0e:d4:be:57:9a:60: e5:1f:0e:cc:6d:32:28:4f:44:a6:0b:31:c7:b4:79: ef:2b:73:2c:5d:24:e1:2d:a5:47:77:86:c4:c3:33: 5e:84:82:6e:9c:9a:27:dd:56:fc:9a:36:1d:e9:8a: fe:29:0b:bb:45:ce:e2:60:f5:a5:65:30:ea:03:e6: 36:ad:eb:2c:72:29:2d:c6:d0:e0:ab:92:65:b3:da: f7:2a:6a:eb:a0:dc:49:b6:1f:0a:1e:ab:b9:b8:80: 4a:e5:b1:ff:23:09:8e:8a:e4:60:41:0d:a2:6a:df: c8:4d:f9:20:24:2c:95:3e:dd:28:df:b5:aa:73:c7: 2f:f1:dc:5f:22:59:cb:81:5e:81:09:c7:84:c4:6d: 4d:d7:a7:41:8c:a9:29:e8:19:b1:fc:b2:9f:6d:ad: 5c:94:f0:3f:58:a0:75:15:f6:60:0c:21:2c:70:a5: 21:1b:dd:05:5c:dd:5e:70:e8:11:73:7a:e8:a5:b4: 10:02:40:16:63:e2:20:c8:11:c7:cc:65:65:df:6b: 27:1c:aa:71:c3:5b:a4:a4:42:99:f9:8f:61:da:de: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd40::/44 2a09:54c7:1000::/36 Signature Algorithm: sha256WithRSAEncryption 28:4d:9c:c7:92:2e:7c:ff:f3:75:35:77:57:4d:f5:47:88:02: 18:e3:92:5b:02:36:cd:5c:2b:7f:d9:5d:8c:5e:7f:a4:37:5a: 18:ad:e3:5b:cc:41:f3:13:8f:93:13:1a:76:bd:18:1b:45:ef: d0:63:f4:b4:8b:7e:93:67:7f:f4:b2:a0:9d:a4:49:81:7f:0d: cb:c7:9a:2e:b9:cf:99:d5:da:7e:a3:a6:eb:d4:c7:4e:1b:2d: 2d:10:e1:7f:a2:5f:38:09:ca:f0:94:db:66:1d:a2:dd:69:99: b7:e3:33:e0:bc:be:3c:1e:2f:ef:26:70:da:40:98:8d:a7:eb: ea:b1:07:cc:18:61:17:d1:a9:99:b4:e3:d2:af:87:11:6f:13: 5a:25:c7:f2:8d:0e:2b:15:9d:1b:c8:eb:f3:fe:9d:73:a8:5d: bd:9b:2c:31:30:56:85:c6:a4:1b:be:46:43:b3:c8:99:84:a5: 2c:be:81:bb:19:1c:a9:42:67:e0:36:02:f6:62:2f:4a:78:d9: 1f:5a:b6:69:e7:fd:71:82:68:36:df:eb:45:f9:79:98:21:7b: 96:14:8c:ff:e0:c4:5e:53:5d:30:78:92:3a:9f:20:c6:f4:25: 6e:3f:d6:5f:d6:ee:f9:1e:f3:aa:54:9b:d7:87:86:c2:ef:aa: 1b:96:3a:cf -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUUES4dGPcGj76wgzKFDWs/dFTQ00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMyMTUxMjFaFw0yNjA3MDIyMTU2MjFaMDMxMTAvBgNV BAMTKEI0NkZCRjFERDM1NDg3NTY4RkM3MDg3NjdGMDg1RkFEMjg4MUY1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIs7kypeby7M+Qjls/Uw4QKf+F NMilPTdQoAGDcM+00wn08/zhdg7UvleaYOUfDsxtMihPRKYLMce0ee8rcyxdJOEt pUd3hsTDM16Egm6cmifdVvyaNh3piv4pC7tFzuJg9aVlMOoD5jat6yxyKS3G0OCr kmWz2vcqauug3Em2Hwoeq7m4gErlsf8jCY6K5GBBDaJq38hN+SAkLJU+3Sjftapz xy/x3F8iWcuBXoEJx4TEbU3Xp0GMqSnoGbH8sp9trVyU8D9YoHUV9mAMISxwpSEb 3QVc3V5w6BFzeuiltBACQBZj4iDIEcfMZWXfayccqnHDW6SkQpn5j2Ha3k3PAgMB AAGjggLqMIIC5jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0b78d01SHVo/H CHZ/CF+tKIH1bTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1N2EyLzIv QjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQyODgxRjU2RC5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEH AQH/BBswGTAXBAIAAjARAwcEKgXfw/1AAwYEKglUxxAwDQYJKoZIhvcNAQELBQAD ggEBAChNnMeSLnz/83U1d1dN9UeIAhjjklsCNs1cK3/ZXYxef6Q3Whit41vMQfMT j5MTGna9GBtF79Bj9LSLfpNnf/SyoJ2kSYF/DcvHmi65z5nV2n6jpuvUx04bLS0Q 4X+iXzgJyvCU22Ydot1pmbfjM+C8vjweL+8mcNpAmI2n6+qxB8wYYRfRqZm049Kv hxFvE1olx/KNDisVnRvI6/P+nXOoXb2bLDEwVoXGpBu+RkOzyJmEpSy+gbsZHKlC Z+A2AvZiL0p42R9atmnn/XGCaDbf60X5eZghe5YUjP/gxF5TXTB4kjqfIMb0JW4/ 1l/W7vke86pUm9eHhsLvqhuWOs8= -----END CERTIFICATE-----Generated at Sat Jul 5 02:45:34 2025 by rpki-client