$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer File: 953F58832273DFD14187910ADCB3972B70B9BD3A.cer (raw, json) Hash identifier: EPUpDDqHGhJrKsudG1Yi4Ck1ZNryFUuoVK1Ptruo/IM= Subject key identifier: 95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A Authority key identifier: 42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93 Certificate issuer: /CN=421B765C540F139258E8C8E64499AC6317AE6F93 Certificate serial: 2ABA6B5ADB8FF8CB5779FF602AA723ACE6FE49C1 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer Manifest: rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft caRepository: rsync://krill.ipgua.com/repo/pongery/4/ Notify URL: https://krill.ipgua.com:3030/rrdp/notification.xml Certificate not before: Sat 07 Mar 2026 07:52:31 +0000 Certificate not after: Sat 06 Mar 2027 07:57:31 +0000 Subordinate resources: IP: 2a0a:6045:c000::/34 Validation: OK Signature path: rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ba:6b:5a:db:8f:f8:cb:57:79:ff:60:2a:a7:23:ac:e6:fe:49:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421B765C540F139258E8C8E64499AC6317AE6F93 Validity Not Before: Mar 7 07:52:31 2026 GMT Not After : Mar 6 07:57:31 2027 GMT Subject: CN=953F58832273DFD14187910ADCB3972B70B9BD3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:4f:2f:59:65:1f:58:38:d5:0e:3e:53:8e: c2:7a:d5:ca:0d:6b:00:5b:1e:cf:93:b6:fc:e6:a2: 17:ad:48:56:42:01:2d:c6:f3:a4:b0:78:77:30:3d: 34:b6:9b:f5:7e:53:24:05:1d:d5:ad:0a:d0:a3:28: 64:3e:c6:69:bf:c8:c9:e2:ad:6c:0d:7e:53:58:b4: 50:e5:da:b5:81:bf:0c:56:51:0f:08:ed:54:b4:06: ec:58:7a:5f:d3:f9:10:9c:ed:f2:10:b2:f5:71:0b: 9f:36:59:fc:37:4e:d5:d1:f0:15:c7:1f:41:f5:49: 1e:31:74:8b:04:ea:41:ca:cb:88:d1:ad:13:49:7f: 8e:5a:be:fd:e7:64:5c:75:59:c7:fd:ae:b4:9e:d6: 36:85:ef:ff:95:0b:69:8d:20:20:76:ce:7a:5c:63: 0a:ef:be:ab:f2:77:a4:03:93:a3:34:a8:b3:17:5b: 71:6a:00:9e:72:b2:78:d7:4f:39:3b:94:19:0a:87: d4:12:4d:03:95:7f:9b:eb:24:87:e2:0e:ce:d9:fd: 58:b9:f0:fb:45:43:ef:fa:3c:b8:82:2e:be:47:11: 9f:9c:6c:64:f4:fd:2b:a9:9a:2c:ac:6a:a4:b1:2e: 64:e4:f8:13:8a:c3:79:49:8f:9c:ab:1f:ee:7d:3d: ef:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A X509v3 Authority Key Identifier: keyid:42:1B:76:5C:54:0F:13:92:58:E8:C8:E6:44:99:AC:63:17:AE:6F:93 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer Subject Information Access: CA Repository - URI:rsync://krill.ipgua.com/repo/pongery/4/ RPKI Manifest - URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft RPKI Notify - URI:https://krill.ipgua.com:3030/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6045:c000::/34 Signature Algorithm: sha256WithRSAEncryption 13:f9:5d:d0:aa:ec:03:f8:54:c8:ce:80:0a:08:2e:e2:fe:69: 15:bc:61:9c:8e:5f:a5:46:4e:c7:98:79:fc:1f:30:d0:43:6e: 06:bd:54:42:9f:01:b2:ff:f9:03:5d:b5:63:bd:5b:b9:b1:84: 4c:54:03:ec:5c:89:9a:38:33:55:aa:b6:e5:41:00:a3:29:a9: 07:43:63:f6:5c:54:07:63:5b:68:fa:a8:7b:c7:35:4d:79:3c: 52:98:80:e2:70:05:17:b8:a3:45:90:c6:a7:c7:b8:83:11:22: a2:c6:55:cf:75:81:4c:86:de:59:f4:41:34:d1:7e:55:8e:97: 88:32:34:1a:0d:73:23:55:38:a2:2c:b3:a8:9a:22:75:ff:09: 45:ee:e2:d5:95:50:87:f1:9e:74:44:d5:4e:47:83:45:cf:3e: d6:85:d4:ce:89:c6:28:c1:8e:6e:87:5c:bb:4a:5a:76:e3:28: cb:e4:d4:05:62:de:c4:6f:1d:5d:67:73:3b:e4:f3:d0:a5:06: 37:f7:87:a7:b2:4f:92:a9:8d:dc:a4:ea:26:48:27:06:36:3b: 61:28:e4:d6:7d:43:4a:c6:71:58:95:32:eb:79:50:54:06:da: da:32:44:00:12:a9:3d:4a:04:0a:1b:c9:fd:58:b0:a3:d2:f4: 42:8e:d8:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUKrprWtuP+MtXef9gKqcjrOb+ScEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxQjc2NUM1NDBGMTM5MjU4RThDOEU2NDQ5OUFDNjMx N0FFNkY5MzAeFw0yNjAzMDcwNzUyMzFaFw0yNzAzMDYwNzU3MzFaMDMxMTAvBgNV BAMTKDk1M0Y1ODgzMjI3M0RGRDE0MTg3OTEwQURDQjM5NzJCNzBCOUJEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfHE8vWWUfWDjVDj5TjsJ61coN awBbHs+TtvzmohetSFZCAS3G86SweHcwPTS2m/V+UyQFHdWtCtCjKGQ+xmm/yMni rWwNflNYtFDl2rWBvwxWUQ8I7VS0BuxYel/T+RCc7fIQsvVxC582Wfw3TtXR8BXH H0H1SR4xdIsE6kHKy4jRrRNJf45avv3nZFx1Wcf9rrSe1jaF7/+VC2mNICB2znpc Ywrvvqvyd6QDk6M0qLMXW3FqAJ5ysnjXTzk7lBkKh9QSTQOVf5vrJIfiDs7Z/Vi5 8PtFQ+/6PLiCLr5HEZ+cbGT0/SupmiysaqSxLmTk+BOKw3lJj5yrH+59Pe9fAgMB AAGjggKOMIICijAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVP1iDInPf0UGH kQrcs5crcLm9OjAfBgNVHSMEGDAWgBRCG3ZcVA8TkljoyOZEmaxjF65vkzAOBgNV HQ8BAf8EBAMCAQYwawYDVR0fBGQwYjBgoF6gXIZacnN5bmM6Ly9ycGtpLmtvbW9y ZWJpLm5ldHdvcmsvcmVwby9rb21vcmViaS81LzQyMUI3NjVDNTQwRjEzOTI1OEU4 QzhFNjQ0OTlBQzYzMTdBRTZGOTMuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYI KwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84 YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83LzQyMUI3NjVDNTQwRjEz OTI1OEU4QzhFNjQ0OTlBQzYzMTdBRTZGOTMuY2VyMIHmBggrBgEFBQcBCwSB2TCB 1jAzBggrBgEFBQcwBYYncnN5bmM6Ly9rcmlsbC5pcGd1YS5jb20vcmVwby9wb25n ZXJ5LzQvMF8GCCsGAQUFBzAKhlNyc3luYzovL2tyaWxsLmlwZ3VhLmNvbS9yZXBv L3BvbmdlcnkvNC85NTNGNTg4MzIyNzNERkQxNDE4NzkxMEFEQ0IzOTcyQjcwQjlC RDNBLm1mdDA+BggrBgEFBQcwDYYyaHR0cHM6Ly9rcmlsbC5pcGd1YS5jb206MzAz MC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBioKYEXAMA0GCSqGSIb3DQEB CwUAA4IBAQAT+V3QquwD+FTIzoAKCC7i/mkVvGGcjl+lRk7HmHn8HzDQQ24GvVRC nwGy//kDXbVjvVu5sYRMVAPsXImaODNVqrblQQCjKakHQ2P2XFQHY1to+qh7xzVN eTxSmIDicAUXuKNFkManx7iDESKixlXPdYFMht5Z9EE00X5VjpeIMjQaDXMjVTii LLOomiJ1/wlF7uLVlVCH8Z50RNVOR4NFzz7WhdTOicYowY5uh1y7Slp24yjL5NQF Yt7Ebx1dZ3M75PPQpQY394ensk+SqY3cpOomSCcGNjthKOTWfUNKxnFYlTLreVBU BtraMkQAEqk9SgQKG8n9WLCj0vRCjtiV -----END CERTIFICATE-----Generated at Sat Mar 21 05:24:52 2026 by rpki-client