$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/B46FBF1DD35487568FC708767F085FAD2881F56D.cer File: B46FBF1DD35487568FC708767F085FAD2881F56D.cer (raw, json) Hash identifier: WeHPf3kmprtiQZhF/kzPcwFHnNN29Pz1zu0i2/z1eAY= Subject key identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 39DA11311714A3045D9ADDAFB99F081DF5BC0225 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 31 Aug 2025 14:33:47 +0000 Certificate not after: Sun 30 Aug 2026 14:38:47 +0000 Subordinate resources: IP: 2a05:dfc3:fd40::/44 IP: 2a09:54c7:1000::/36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 03:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:da:11:31:17:14:a3:04:5d:9a:dd:af:b9:9f:08:1d:f5:bc:02:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 31 14:33:47 2025 GMT Not After : Aug 30 14:38:47 2026 GMT Subject: CN=B46FBF1DD35487568FC708767F085FAD2881F56D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:b9:32:a5:e6:f2:ec:cf:90:8e:5b:3f:53: 0e:10:29:ff:85:34:c8:a5:3d:37:50:a0:01:83:70: cf:b4:d3:09:f4:f3:fc:e1:76:0e:d4:be:57:9a:60: e5:1f:0e:cc:6d:32:28:4f:44:a6:0b:31:c7:b4:79: ef:2b:73:2c:5d:24:e1:2d:a5:47:77:86:c4:c3:33: 5e:84:82:6e:9c:9a:27:dd:56:fc:9a:36:1d:e9:8a: fe:29:0b:bb:45:ce:e2:60:f5:a5:65:30:ea:03:e6: 36:ad:eb:2c:72:29:2d:c6:d0:e0:ab:92:65:b3:da: f7:2a:6a:eb:a0:dc:49:b6:1f:0a:1e:ab:b9:b8:80: 4a:e5:b1:ff:23:09:8e:8a:e4:60:41:0d:a2:6a:df: c8:4d:f9:20:24:2c:95:3e:dd:28:df:b5:aa:73:c7: 2f:f1:dc:5f:22:59:cb:81:5e:81:09:c7:84:c4:6d: 4d:d7:a7:41:8c:a9:29:e8:19:b1:fc:b2:9f:6d:ad: 5c:94:f0:3f:58:a0:75:15:f6:60:0c:21:2c:70:a5: 21:1b:dd:05:5c:dd:5e:70:e8:11:73:7a:e8:a5:b4: 10:02:40:16:63:e2:20:c8:11:c7:cc:65:65:df:6b: 27:1c:aa:71:c3:5b:a4:a4:42:99:f9:8f:61:da:de: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:6F:BF:1D:D3:54:87:56:8F:C7:08:76:7F:08:5F:AD:28:81:F5:6D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/2/B46FBF1DD35487568FC708767F085FAD2881F56D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd40::/44 2a09:54c7:1000::/36 Signature Algorithm: sha256WithRSAEncryption 85:52:5f:e5:f4:f2:ca:5d:57:88:3b:ed:1b:5b:37:db:2f:b0: 6f:49:69:59:65:9d:d1:fa:15:b8:75:47:0b:40:0c:a2:52:f1: f9:12:9a:19:f5:31:9e:69:5f:67:cb:94:03:5b:93:55:fb:38: 76:01:20:78:0f:ad:62:5d:e2:c8:4a:76:90:4f:29:a4:47:27: d4:28:44:c1:2b:16:6b:91:e7:a5:5b:d8:a0:fc:3b:67:0e:16: 84:4f:0a:a2:e0:00:50:e4:78:a5:97:1b:8a:03:93:fe:0f:30: 82:ef:7c:cd:89:1b:15:5c:fb:64:fa:1e:4e:00:bb:74:2b:b6: e4:ab:1a:47:37:56:94:01:60:60:8b:da:63:c3:42:b4:03:63: c6:d4:19:8a:0c:a7:35:18:85:09:81:85:dc:e9:ad:90:46:af: 23:3c:e3:1c:d8:b4:c6:a9:28:5b:e8:a4:63:31:c3:f6:3a:4e: 0a:fc:ab:30:18:28:ff:cd:29:f1:8b:73:ff:88:5e:a8:bd:74: 48:1c:1f:e2:33:76:93:97:1e:5f:54:bb:5c:01:47:dd:fe:5e: b9:22:e3:4b:f6:26:9d:13:3b:fd:a6:2c:bf:c4:15:65:32:0a: 24:5b:5c:ff:0b:2c:45:70:34:c6:ae:cb:9d:f6:65:45:9e:45: a5:30:cd:9c -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUOdoRMRcUowRdmt2vuZ8IHfW8AiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA4MzExNDMzNDdaFw0yNjA4MzAxNDM4NDdaMDMxMTAvBgNV BAMTKEI0NkZCRjFERDM1NDg3NTY4RkM3MDg3NjdGMDg1RkFEMjg4MUY1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIs7kypeby7M+Qjls/Uw4QKf+F NMilPTdQoAGDcM+00wn08/zhdg7UvleaYOUfDsxtMihPRKYLMce0ee8rcyxdJOEt pUd3hsTDM16Egm6cmifdVvyaNh3piv4pC7tFzuJg9aVlMOoD5jat6yxyKS3G0OCr kmWz2vcqauug3Em2Hwoeq7m4gErlsf8jCY6K5GBBDaJq38hN+SAkLJU+3Sjftapz xy/x3F8iWcuBXoEJx4TEbU3Xp0GMqSnoGbH8sp9trVyU8D9YoHUV9mAMISxwpSEb 3QVc3V5w6BFzeuiltBACQBZj4iDIEcfMZWXfayccqnHDW6SkQpn5j2Ha3k3PAgMB AAGjggLqMIIC5jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0b78d01SHVo/H CHZ/CF+tKIH1bTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1N2EyLzIv QjQ2RkJGMUREMzU0ODc1NjhGQzcwODc2N0YwODVGQUQyODgxRjU2RC5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEH AQH/BBswGTAXBAIAAjARAwcEKgXfw/1AAwYEKglUxxAwDQYJKoZIhvcNAQELBQAD ggEBAIVSX+X08spdV4g77RtbN9svsG9JaVllndH6Fbh1RwtADKJS8fkSmhn1MZ5p X2fLlANbk1X7OHYBIHgPrWJd4shKdpBPKaRHJ9QoRMErFmuR56Vb2KD8O2cOFoRP CqLgAFDkeKWXG4oDk/4PMILvfM2JGxVc+2T6Hk4Au3QrtuSrGkc3VpQBYGCL2mPD QrQDY8bUGYoMpzUYhQmBhdzprZBGryM84xzYtMapKFvopGMxw/Y6Tgr8qzAYKP/N KfGLc/+IXqi9dEgcH+IzdpOXHl9Uu1wBR93+Xrki40v2Jp0TO/2mLL/EFWUyCiRb XP8LLEVwNMauy532ZUWeRaUwzZw= -----END CERTIFICATE-----Generated at Wed Oct 8 17:35:49 2025 by rpki-client