$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.cer File: A5B9564158D3F545D38A5134082DABBC4CE4BBC0.cer (raw, json) Hash identifier: 1PG5rT+Ob45JsiEO8PM4Zg7lDhyHY1C2LC5zf8/r0Ao= Subject key identifier: A5:B9:56:41:58:D3:F5:45:D3:8A:51:34:08:2D:AB:BC:4C:E4:BB:C0 Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9 Certificate issuer: /CN=85560E86F645F1E903C8627A31BDB65C534860B9 Certificate serial: 7E4538EBDB9E898D6DB09EC6649B49ABE7703B93 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 10 May 2025 08:27:10 +0000 Certificate not after: Sat 09 May 2026 08:32:10 +0000 Subordinate resources: IP: 2a05:dfc1:1fe0::/44 Validation: OK Signature path: rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 11:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:45:38:eb:db:9e:89:8d:6d:b0:9e:c6:64:9b:49:ab:e7:70:3b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9 Validity Not Before: May 10 08:27:10 2025 GMT Not After : May 9 08:32:10 2026 GMT Subject: CN=A5B9564158D3F545D38A5134082DABBC4CE4BBC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:dd:9f:0a:d9:a4:5c:a0:73:8d:73:98:39: 96:5e:82:65:54:6f:33:52:92:b6:12:12:de:2c:ff: cf:b0:8c:95:61:9f:ba:69:67:8f:d3:e7:ea:f1:57: 4b:dd:d5:33:7d:c0:e3:68:4c:ce:b5:94:f0:37:7d: 83:0d:eb:dc:62:c7:0d:1f:5d:8d:2f:1a:1e:6d:9d: cd:5b:4a:00:97:1b:9f:75:47:6d:37:ac:ca:08:f5: 07:b9:9b:4f:36:80:7c:a4:6d:58:ab:c8:d5:71:51: 09:13:e9:ec:a1:b1:2c:1f:9c:31:ae:76:d1:87:b7: cd:95:c3:5e:54:80:a6:68:a3:59:d5:b9:be:47:b7: 5e:f0:e6:93:4c:05:9e:cc:42:1a:2d:74:4f:ae:3b: 45:66:63:eb:0d:5a:51:22:78:f6:7b:cb:6b:25:e8: e4:5d:14:2e:75:d9:b0:19:87:3b:dd:64:94:43:11: de:12:ca:eb:9d:da:03:e4:f8:a1:c0:25:55:b5:46: 6d:1c:70:51:30:3b:02:78:07:66:18:17:1c:74:15: 37:b9:a4:88:cc:62:7b:43:ff:06:d8:26:eb:55:e4: f6:5c:41:f9:53:08:89:22:5e:8c:b2:9f:48:20:c9: d7:15:c0:26:a5:60:1d:a3:54:cd:08:a8:f4:56:fc: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:B9:56:41:58:D3:F5:45:D3:8A:51:34:08:2D:AB:BC:4C:E4:BB:C0 X509v3 Authority Key Identifier: keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1fe0::/44 Signature Algorithm: sha256WithRSAEncryption 79:1f:be:0a:7f:f5:b3:89:b7:13:4e:51:29:ee:cd:eb:42:3f: a7:80:24:d8:8f:4f:e2:88:35:91:bc:9c:e4:ee:8f:bc:b8:93: 41:a2:7d:f6:81:cf:e8:ba:78:12:b2:93:e1:77:3b:41:29:92: 8f:51:1d:fa:eb:57:c6:64:79:60:f5:e6:3a:4c:42:12:b5:8e: 65:70:5e:e7:1a:71:a9:e5:6a:7a:2e:9e:f1:92:b3:c3:d9:be: fa:95:b7:ad:33:b3:06:9e:1c:98:a8:9e:1e:09:60:6b:bc:01: a4:fd:35:3a:ae:73:21:07:06:b9:a5:92:d5:c0:74:95:3d:1f: 9c:f5:ed:2e:c3:d1:3e:70:8b:78:ac:b1:51:0b:da:3b:97:c1: ac:f0:40:e8:bf:f7:35:fb:13:27:df:cc:b0:a1:b1:a1:9c:6a: 1b:18:bd:80:7e:c9:26:c1:86:48:16:44:8e:8d:09:b5:be:cd: b4:4b:40:93:29:06:f2:fa:1b:22:0e:6c:c5:89:48:c6:e3:f0: a1:e2:23:78:38:65:30:c1:ec:a2:b2:6d:31:6d:39:5f:9e:20: 83:d6:11:98:6a:44:92:28:57:5e:0a:35:f7:a8:fd:21:4a:fe: 3e:60:82:65:ab:29:ef:5b:c8:4b:19:cb:c9:1c:2b:9a:27:e4: 32:77:20:a3 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUfkU469ueiY1tsJ7GZJtJq+dwO5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1 MzQ4NjBCOTAeFw0yNTA1MTAwODI3MTBaFw0yNjA1MDkwODMyMTBaMDMxMTAvBgNV BAMTKEE1Qjk1NjQxNThEM0Y1NDVEMzhBNTEzNDA4MkRBQkJDNENFNEJCQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcd2fCtmkXKBzjXOYOZZegmVU bzNSkrYSEt4s/8+wjJVhn7ppZ4/T5+rxV0vd1TN9wONoTM61lPA3fYMN69xixw0f XY0vGh5tnc1bSgCXG591R203rMoI9Qe5m082gHykbViryNVxUQkT6eyhsSwfnDGu dtGHt82Vw15UgKZoo1nVub5Ht17w5pNMBZ7MQhotdE+uO0VmY+sNWlEiePZ7y2sl 6ORdFC512bAZhzvdZJRDEd4Syuud2gPk+KHAJVW1Rm0ccFEwOwJ4B2YYFxx0FTe5 pIjMYntD/wbYJutV5PZcQflTCIkiXoyyn0ggydcVwCalYB2jVM0IqPRW/JT/AgMB AAGjggLHMIICwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSluVZBWNP1RdOK UTQILau8TOS7wDAfBgNVHSMEGDAWgBSFVg6G9kXx6QPIYnoxvbZcU0hguTAOBgNV HQ8BAf8EBAMCAQYwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtpLmNjL3Jl cG8vTXl0aGljYWxLaXR0ZW4vMS84NTU2MEU4NkY2NDVGMUU5MDNDODYyN0EzMUJE QjY1QzUzNDg2MEI5LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJz eW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAv ODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jZXIwggE/ BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBh YXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU5MTgzYmYzLTFhY2YtNGEyMC04 ZmE0LWI0NjdjMmMyMjYwYi8yLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMu cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTkxODNiZjMtMWFjZi00YTIw LThmYTQtYjQ2N2MyYzIyNjBiLzIvQTVCOTU2NDE1OEQzRjU0NUQzOEE1MTM0MDgy REFCQkM0Q0U0QkJDMC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFz LnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwR/gMA0G CSqGSIb3DQEBCwUAA4IBAQB5H74Kf/WzibcTTlEp7s3rQj+ngCTYj0/iiDWRvJzk 7o+8uJNBon32gc/oungSspPhdztBKZKPUR3661fGZHlg9eY6TEIStY5lcF7nGnGp 5Wp6Lp7xkrPD2b76lbetM7MGnhyYqJ4eCWBrvAGk/TU6rnMhBwa5pZLVwHSVPR+c 9e0uw9E+cIt4rLFRC9o7l8Gs8EDov/c1+xMn38ywobGhnGobGL2AfskmwYZIFkSO jQm1vs20S0CTKQby+hsiDmzFiUjG4/Ch4iN4OGUwweyism0xbTlfniCD1hGYakSS KFdeCjX3qP0hSv4+YIJlqynvW8hLGcvJHCuaJ+QydyCj -----END CERTIFICATE-----Generated at Fri Jun 6 23:14:54 2025 by rpki-client