$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/FFB9FAC4BDB43B678D9F44B25872940C64AF76B8.cer File: FFB9FAC4BDB43B678D9F44B25872940C64AF76B8.cer (raw, json) Hash identifier: fTPXJU6QWl0BXe5Gg9aK1jhQ/YDwdZjaxccN3tfRrIA= Subject key identifier: FF:B9:FA:C4:BD:B4:3B:67:8D:9F:44:B2:58:72:94:0C:64:AF:76:B8 Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78 Certificate issuer: /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378 Certificate serial: 7F830D4F29DA5EC45269ADB005EA6590EAD79625 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer Manifest: rsync://rpki.fengrui.link/repo/CowGrassland/1/FFB9FAC4BDB43B678D9F44B25872940C64AF76B8.mft caRepository: rsync://rpki.fengrui.link/repo/CowGrassland/1/ Notify URL: https://rpki.fengrui.link/rrdp/notification.xml Certificate not before: Sat 30 Aug 2025 10:26:56 +0000 Certificate not after: Sat 29 Aug 2026 10:31:56 +0000 Subordinate resources: IP: 2a14:7580:7f0::/44 Validation: OK Signature path: rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:83:0d:4f:29:da:5e:c4:52:69:ad:b0:05:ea:65:90:ea:d7:96:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378 Validity Not Before: Aug 30 10:26:56 2025 GMT Not After : Aug 29 10:31:56 2026 GMT Subject: CN=FFB9FAC4BDB43B678D9F44B25872940C64AF76B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:77:e7:d9:0e:65:ec:a6:d4:87:d6:d8:20:58: 58:ac:3e:de:87:a5:4e:eb:cb:82:81:0f:7e:26:7d: bc:e0:06:5c:94:25:05:44:79:0e:f2:bd:5e:13:b3: 5b:51:58:9c:d3:63:f9:d0:37:d5:66:2f:fa:76:ea: cf:5b:e8:63:37:2b:b1:81:45:0f:69:50:c1:3d:2c: 98:ab:fe:66:02:58:d2:ab:59:79:80:4f:28:a8:57: 36:15:fe:12:f7:bd:b0:a3:a0:d2:80:04:85:a3:fc: 3e:23:8f:d8:82:f4:51:1d:ad:a6:30:4d:68:94:8f: e0:fc:40:6f:ef:ea:93:0a:db:e0:cd:bf:b8:be:d3: 78:24:e8:b4:60:40:82:e1:15:73:55:5d:fb:1a:ee: e8:af:d4:12:be:22:65:5f:64:00:e1:d1:98:cd:4f: eb:b0:60:e5:d7:7c:e8:03:66:ec:58:d2:3c:8d:07: 5e:42:12:80:12:ad:5a:82:36:8b:b4:75:a2:ed:66: 40:6f:2a:7a:24:63:c6:2d:99:4e:ef:d5:9e:df:f8: 7e:14:70:98:89:6c:fb:d5:41:94:6f:bb:9d:9b:05: c7:32:f6:b7:ca:14:32:c6:79:2d:78:79:ef:91:7f: 84:ba:3d:dc:31:6f:d8:75:c2:0e:20:6e:2b:67:68: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:B9:FA:C4:BD:B4:3B:67:8D:9F:44:B2:58:72:94:0C:64:AF:76:B8 X509v3 Authority Key Identifier: keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer Subject Information Access: CA Repository - URI:rsync://rpki.fengrui.link/repo/CowGrassland/1/ RPKI Manifest - URI:rsync://rpki.fengrui.link/repo/CowGrassland/1/FFB9FAC4BDB43B678D9F44B25872940C64AF76B8.mft RPKI Notify - URI:https://rpki.fengrui.link/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:7f0::/44 Signature Algorithm: sha256WithRSAEncryption 72:40:f5:7d:82:f3:c6:c3:ea:17:bf:24:36:01:2f:35:cb:4c: 7c:35:f3:04:08:77:3a:fa:3a:07:53:e7:b4:92:61:b4:a5:68: cf:60:68:2a:81:a3:74:ce:c6:e2:41:6a:69:fe:22:81:51:8a: 38:87:d5:7b:a7:6f:ae:a6:f1:61:ce:c9:8a:61:a2:b0:d9:4b: 81:a3:ca:1e:6b:b0:aa:9e:26:69:02:cb:a9:8f:f1:9f:a2:34: 2d:fa:99:0a:89:c7:f7:d5:17:bf:17:48:31:15:a3:6b:4f:3c: 28:1f:d3:73:4a:8c:d3:63:06:85:5b:4c:85:2a:10:03:82:b2: 67:34:e9:47:3b:f7:62:fd:bf:cd:d7:46:c8:87:a6:6a:3c:da: 1c:66:f7:8c:ad:b5:4c:0b:62:ee:78:e8:01:21:94:6e:82:cf: ac:19:19:a5:75:c4:79:7c:0a:79:25:e8:46:40:ae:75:57:66: 9e:6a:69:07:d4:a2:90:dc:f2:0f:69:25:0f:98:f3:85:ce:ec: 07:73:11:29:cb:c8:7e:61:aa:8c:90:b8:65:6b:4d:92:d5:9a: 2a:86:af:03:54:47:e5:6a:7e:3c:8b:ac:2f:6f:74:8f:2d:8f: 40:a1:80:5e:7f:62:7d:86:5c:5f:c0:6a:ed:a7:d3:8f:11:77: 66:eb:2a:79 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIUf4MNTynaXsRSaa2wBeplkOrXliUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJG RkZENzM3ODAeFw0yNTA4MzAxMDI2NTZaFw0yNjA4MjkxMDMxNTZaMDMxMTAvBgNV BAMTKEZGQjlGQUM0QkRCNDNCNjc4RDlGNDRCMjU4NzI5NDBDNjRBRjc2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYd+fZDmXsptSH1tggWFisPt6H pU7ry4KBD34mfbzgBlyUJQVEeQ7yvV4Ts1tRWJzTY/nQN9VmL/p26s9b6GM3K7GB RQ9pUME9LJir/mYCWNKrWXmATyioVzYV/hL3vbCjoNKABIWj/D4jj9iC9FEdraYw TWiUj+D8QG/v6pMK2+DNv7i+03gk6LRgQILhFXNVXfsa7uiv1BK+ImVfZADh0ZjN T+uwYOXXfOgDZuxY0jyNB15CEoASrVqCNou0daLtZkBvKnokY8YtmU7v1Z7f+H4U cJiJbPvVQZRvu52bBccy9rfKFDLGeS14ee+Rf4S6Pdwxb9h1wg4gbitnaL+BAgMB AAGjggKjMIICnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/ufrEvbQ7Z42f RLJYcpQMZK92uDAfBgNVHSMEGDAWgBT23m/HrEZ/ELVwXmC4/doC//1zeDAOBgNV HQ8BAf8EBAMCAQYwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9ycGtpLmF4aXZv cmEubmV0L3JlcG8vQXhpdm9yYS1OZXQvMi9GNkRFNkZDN0FDNDY3RjEwQjU3MDVF NjBCOEZEREEwMkZGRkQ3Mzc4LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsG AQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0Y2REU2 RkM3QUM0NjdGMTBCNTcwNUU2MEI4RkREQTAyRkZGRDczNzguY2VyMIHxBggrBgEF BQcBCwSB5DCB4TA6BggrBgEFBQcwBYYucnN5bmM6Ly9ycGtpLmZlbmdydWkubGlu ay9yZXBvL0Nvd0dyYXNzbGFuZC8xLzBmBggrBgEFBQcwCoZacnN5bmM6Ly9ycGtp LmZlbmdydWkubGluay9yZXBvL0Nvd0dyYXNzbGFuZC8xL0ZGQjlGQUM0QkRCNDNC Njc4RDlGNDRCMjU4NzI5NDBDNjRBRjc2QjgubWZ0MDsGCCsGAQUFBzANhi9odHRw czovL3Jwa2kuZmVuZ3J1aS5saW5rL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEKhR1gAfwMA0GCSqGSIb3DQEBCwUAA4IBAQByQPV9gvPGw+oXvyQ2AS81y0x8 NfMECHc6+joHU+e0kmG0pWjPYGgqgaN0zsbiQWpp/iKBUYo4h9V7p2+upvFhzsmK YaKw2UuBo8oea7CqniZpAsupj/GfojQt+pkKicf31Re/F0gxFaNrTzwoH9NzSozT YwaFW0yFKhADgrJnNOlHO/di/b/N10bIh6ZqPNocZveMrbVMC2LueOgBIZRugs+s GRmldcR5fAp5JehGQK51V2aeamkH1KKQ3PIPaSUPmPOFzuwHcxEpy8h+YaqMkLhl a02S1Zoqhq8DVEflan48i6wvb3SPLY9AoYBef2J9hlxfwGrtp9OPEXdm6yp5 -----END CERTIFICATE-----Generated at Mon Sep 8 17:05:22 2025 by rpki-client