$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer File: E9EB50E364277CEB063DCA8C371364FE1CC98844.cer (raw, json) Hash identifier: vCsRl+7QxrluePZMNXZ95wttqo99m8EVJ3nVkIG4VX0= Subject key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6FB7714AB36237BD023171C160400AA6684FEB3C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 03 Jul 2025 21:53:43 +0000 Certificate not after: Thu 02 Jul 2026 21:58:43 +0000 Subordinate resources: IP: 2a0a:6044:a800::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b7:71:4a:b3:62:37:bd:02:31:71:c1:60:40:0a:a6:68:4f:eb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 21:53:43 2025 GMT Not After : Jul 2 21:58:43 2026 GMT Subject: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:03:a5:32:3d:fa:31:26:39:54:37:af:e9: 74:45:33:59:b8:40:5b:19:80:c6:bd:4c:fe:e2:91: 71:fe:18:ab:ec:27:06:c6:6b:37:c3:ff:7b:ec:e0: 42:90:14:26:33:45:35:c2:19:f4:76:87:7b:0d:b4: 45:71:02:67:8a:7e:c6:b8:66:c0:ad:cb:2d:55:3d: 61:21:e7:f5:53:31:bc:22:26:79:93:be:6f:91:a2: 6e:e2:8d:19:61:31:40:64:e8:65:a6:ad:be:82:fb: 3d:ab:c6:35:58:af:eb:d5:b2:de:c6:7b:2d:5a:44: 75:ee:cf:4f:23:9d:aa:f2:09:21:fc:c3:a7:29:5b: 44:fa:a7:08:5e:26:5d:27:90:04:b4:59:a5:40:8b: d7:1b:52:16:04:a6:74:5a:3b:e1:c0:08:35:5c:93: 86:83:0b:1b:c0:fa:ae:08:e7:09:87:07:a4:ec:eb: 8d:e7:db:10:12:4b:23:61:ee:88:b3:73:75:17:50: 2d:47:d8:32:76:bd:a4:43:87:dc:a1:3f:33:4c:7c: 58:86:85:82:f6:52:b0:16:27:ad:37:c3:da:e7:bf: 12:72:0a:09:a1:20:68:bb:71:47:ed:42:f0:09:4a: 9b:8f:96:fa:8f:2f:9a:07:7f:87:7c:51:1c:44:c0: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a800::/40 Signature Algorithm: sha256WithRSAEncryption 5b:58:9e:eb:02:8d:11:b5:e2:36:61:0f:d2:59:c8:41:c4:59: 18:87:f6:b0:c2:19:ed:52:84:b6:1f:6e:8a:a7:af:11:5f:8c: 9f:15:7e:90:1d:f6:34:a3:6c:40:71:94:66:eb:a3:56:5c:64: c8:cf:56:0e:bb:e1:9b:15:d6:47:ff:4d:dc:a5:34:01:d3:34: 17:92:51:ba:af:19:49:fc:61:35:ec:ad:5d:f3:f4:da:f4:58: 45:7a:42:08:9d:4b:f1:2d:78:b1:a4:d3:72:67:8f:f5:e5:c1: 81:f4:4a:84:fd:3a:1c:05:bb:8c:22:8c:40:2d:b3:46:8c:ba: 77:81:9b:7e:91:51:19:1e:cf:b6:f4:89:64:ab:e5:23:1c:ca: f9:45:6d:71:e9:32:49:a6:1d:c7:c4:e8:86:91:a6:e8:e5:c4: 6f:c0:d9:c8:30:53:18:22:6d:c4:48:d1:95:53:6c:d5:5b:bc: 81:99:33:de:24:74:bd:09:22:c0:74:40:86:8f:c2:a5:df:d1: ec:86:84:0d:64:17:e6:a5:ec:87:33:33:fc:f0:4d:28:8f:5f: fb:69:a8:e4:3f:79:88:1a:5e:58:c4:98:a9:f7:56:a0:dc:a7: 4d:c8:e9:31:5b:52:ee:1b:5f:6f:ae:de:12:f1:79:b7:5e:f0: 40:fe:84:24 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUb7dxSrNiN70CMXHBYEAKpmhP6zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMyMTUzNDNaFw0yNjA3MDIyMTU4NDNaMDMxMTAvBgNV BAMTKEU5RUI1MEUzNjQyNzdDRUIwNjNEQ0E4QzM3MTM2NEZFMUNDOTg4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6AOlMj36MSY5VDev6XRFM1m4 QFsZgMa9TP7ikXH+GKvsJwbGazfD/3vs4EKQFCYzRTXCGfR2h3sNtEVxAmeKfsa4 ZsCtyy1VPWEh5/VTMbwiJnmTvm+Rom7ijRlhMUBk6GWmrb6C+z2rxjVYr+vVst7G ey1aRHXuz08jnaryCSH8w6cpW0T6pwheJl0nkAS0WaVAi9cbUhYEpnRaO+HACDVc k4aDCxvA+q4I5wmHB6Ts643n2xASSyNh7oizc3UXUC1H2DJ2vaRDh9yhPzNMfFiG hYL2UrAWJ603w9rnvxJyCgmhIGi7cUftQvAJSpuPlvqPL5oHf4d8URxEwJONAgMB AAGjggLFMIICwTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTp61DjZCd86wY9 yow3E2T+HMmIRDAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMFQG CCsGAQUFBzAFhkhyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkv OGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC8wgYAGCCsGAQUFBzAK hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5 MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC9FOUVCNTBFMzY0Mjc3Q0VCMDYzRENB OEMzNzEzNjRGRTFDQzk4ODQ0Lm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRw LXJwcy5hcmluLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEqDANBgkq hkiG9w0BAQsFAAOCAQEAW1ie6wKNEbXiNmEP0lnIQcRZGIf2sMIZ7VKEth9uiqev EV+MnxV+kB32NKNsQHGUZuujVlxkyM9WDrvhmxXWR/9N3KU0AdM0F5JRuq8ZSfxh NeytXfP02vRYRXpCCJ1L8S14saTTcmeP9eXBgfRKhP06HAW7jCKMQC2zRoy6d4Gb fpFRGR7PtvSJZKvlIxzK+UVtcekySaYdx8TohpGm6OXEb8DZyDBTGCJtxEjRlVNs 1Vu8gZkz3iR0vQkiwHRAho/Cpd/R7IaEDWQX5qXshzMz/PBNKI9f+2mo5D95iBpe WMSYqfdWoNynTcjpMVtS7htfb67eEvF5t17wQP6EJA== -----END CERTIFICATE-----Generated at Sat Jul 5 02:27:22 2025 by rpki-client