$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer File: CE62AFC506F1860480AAF6A723393278644CFD7F.cer (raw, json) Hash identifier: eA8SK4Y66yQMXnqajhWVDRaCGko/wnXeUzA1PlRyXzo= Subject key identifier: CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4FB5DFAE3438F767BD61A2A7F6B28D4AAF5D01C3 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 08 Feb 2026 19:17:39 +0000 Certificate not after: Sun 07 Feb 2027 19:22:39 +0000 Subordinate resources: IP: 2a0f:6283:f000::/36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b5:df:ae:34:38:f7:67:bd:61:a2:a7:f6:b2:8d:4a:af:5d:01:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 8 19:17:39 2026 GMT Not After : Feb 7 19:22:39 2027 GMT Subject: CN=CE62AFC506F1860480AAF6A723393278644CFD7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:d0:9d:ad:72:a9:3f:1c:76:cb:ad:81:90: 61:b2:ac:7c:45:df:ba:97:8a:e0:2e:69:62:6e:d2: 7e:8c:77:1e:95:2c:a8:07:5a:b6:e0:f0:1f:e2:6c: c9:9a:9f:56:54:f9:98:c9:04:37:ac:df:8c:cb:3c: 1f:a7:79:86:a0:13:ba:2d:b5:8f:5a:71:a3:19:a7: 5e:5a:cd:70:02:d8:d2:2d:43:bb:4a:37:59:42:8b: c1:02:63:cc:c1:a7:04:72:52:01:eb:94:a3:ae:e3: ba:71:13:5d:ff:bd:eb:e4:cb:60:38:a7:d6:69:60: 43:aa:97:bd:70:04:cf:4e:40:a2:9d:b9:2d:94:12: 19:90:d7:fc:5a:84:02:c3:98:7d:ef:4e:9b:5a:e7: 96:78:ed:bf:3b:47:5e:1e:c6:88:6e:48:9b:01:31: ab:31:18:c2:af:9c:a1:f2:32:e2:e1:07:c7:fc:8a: 81:a4:cf:48:2f:5e:9b:b3:0d:72:76:93:50:75:1a: 06:65:44:16:38:1e:2b:dc:3c:6e:f4:b5:00:67:bd: d4:4c:94:bf:d6:e0:d0:4c:e7:52:33:96:da:8e:ac: cc:d4:53:bd:e4:34:a9:86:9b:82:c3:b9:61:e0:4a: ef:0a:bc:ce:50:48:58:ba:a4:19:1b:8c:b8:20:10: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:f000::/36 Signature Algorithm: sha256WithRSAEncryption 01:94:37:92:f3:07:41:2b:c5:02:83:93:79:e6:27:5d:09:72: 18:fe:c9:7c:aa:06:49:43:24:d5:ce:76:a5:1f:f2:2d:31:cc: ed:78:ed:c7:88:ea:bc:0b:85:0b:81:a0:11:29:fd:41:a9:f6: 17:54:94:32:14:95:3e:99:50:87:bf:cc:cb:c6:d4:07:86:7a: 34:4a:d2:70:bc:32:40:4e:2a:de:cd:2a:dd:77:31:bd:1c:a1: ed:15:a9:3f:b7:c5:a4:5e:b7:d7:cf:b1:de:d9:2d:0d:d0:95: b2:ec:88:5c:6d:4f:d5:0a:b5:4a:0b:4c:90:2d:b5:60:cd:26: 03:9f:87:8b:5b:81:70:03:c1:02:bf:04:f6:65:1e:dc:d3:46: 44:c2:ff:15:16:c9:d4:24:48:09:2c:59:83:d6:dc:fb:64:b6: 66:ff:2b:28:1f:97:16:0c:cd:58:60:3f:7a:88:8f:fc:08:55: 3f:e6:c7:bd:b8:a8:f2:68:35:f1:12:81:4f:cc:85:87:d3:5b: 12:44:03:e4:07:41:f6:a1:b2:24:26:94:39:81:09:c4:f1:f1: fe:9a:0b:26:f8:ba:ea:a8:0c:98:31:35:24:be:2b:26:c5:b6: d5:b1:f8:83:79:de:32:7e:6a:f8:75:f3:d3:2d:5b:89:67:a4: 09:6a:b9:c6 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUT7XfrjQ492e9YaKn9rKNSq9dAcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMDgxOTE3MzlaFw0yNzAyMDcxOTIyMzlaMDMxMTAvBgNV BAMTKENFNjJBRkM1MDZGMTg2MDQ4MEFBRjZBNzIzMzkzMjc4NjQ0Q0ZEN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8tCdrXKpPxx2y62BkGGyrHxF 37qXiuAuaWJu0n6Mdx6VLKgHWrbg8B/ibMman1ZU+ZjJBDes34zLPB+neYagE7ot tY9acaMZp15azXAC2NItQ7tKN1lCi8ECY8zBpwRyUgHrlKOu47pxE13/vevky2A4 p9ZpYEOql71wBM9OQKKduS2UEhmQ1/xahALDmH3vTpta55Z47b87R14exohuSJsB MasxGMKvnKHyMuLhB8f8ioGkz0gvXpuzDXJ2k1B1GgZlRBY4HivcPG70tQBnvdRM lL/W4NBM51IzltqOrMzUU73kNKmGm4LDuWHgSu8KvM5QSFi6pBkbjLggEAgTAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOYq/FBvGGBICq 9qcjOTJ4ZEz9fzAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzZlN2Y3NDdlLWZmNjgtNGZhMi1iMmUzLWY2ZWRlNTQ4YTMyMC8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhhMzIwLzIv Q0U2MkFGQzUwNkYxODYwNDgwQUFGNkE3MjMzOTMyNzg2NDRDRkQ3Ri5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYEKg9ig/AwDQYJKoZIhvcNAQELBQADggEBAAGUN5Lz B0ErxQKDk3nmJ10Jchj+yXyqBklDJNXOdqUf8i0xzO147ceI6rwLhQuBoBEp/UGp 9hdUlDIUlT6ZUIe/zMvG1AeGejRK0nC8MkBOKt7NKt13Mb0coe0VqT+3xaRet9fP sd7ZLQ3QlbLsiFxtT9UKtUoLTJAttWDNJgOfh4tbgXADwQK/BPZlHtzTRkTC/xUW ydQkSAksWYPW3Ptktmb/KygflxYMzVhgP3qIj/wIVT/mx724qPJoNfESgU/MhYfT WxJEA+QHQfahsiQmlDmBCcTx8f6aCyb4uuqoDJgxNSS+KybFttWx+IN53jJ+avh1 89MtW4lnpAlqucY= -----END CERTIFICATE-----Generated at Mon Feb 23 06:24:16 2026 by rpki-client