$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer File: 281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer (raw, json) Hash identifier: ynXwUJN5JMWLP0eeAHCJKATWObgf6l2CFVROKgpYj7U= Subject key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C Certificate issuer: /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Certificate serial: 55FC44911A077EA7CC388FA8456DC92FC86BEF6B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/ Notify URL: https://rpki.as207960.net/rrdp/notification.xml Certificate not before: Sun 01 Mar 2026 11:27:21 +0000 Certificate not after: Sun 28 Feb 2027 11:32:21 +0000 Subordinate resources: IP: 2a11:f2c0:ffe0::/48 Validation: OK Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 18:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fc:44:91:1a:07:7e:a7:cc:38:8f:a8:45:6d:c9:2f:c8:6b:ef:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C Validity Not Before: Mar 1 11:27:21 2026 GMT Not After : Feb 28 11:32:21 2027 GMT Subject: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:2f:c6:a0:09:73:2b:b4:b9:ac:63:fd:02: c8:be:42:eb:64:da:ee:9c:da:d1:25:a4:34:d0:aa: 34:75:ef:25:05:d4:a6:4a:89:2c:11:19:0d:ab:82: 99:8a:3e:70:12:98:63:33:e8:0d:4f:48:bd:3e:7b: 77:f0:fe:59:2e:f6:c4:81:54:31:79:37:74:91:08: 9f:81:ce:2c:be:bc:b5:1e:ff:23:86:68:13:0f:d9: 07:2b:3f:d6:5a:85:10:c3:f5:31:39:11:cf:7b:12: f0:d6:31:10:13:71:55:b5:e0:8b:b3:c1:8a:89:5a: fa:f1:42:a5:bc:e4:f4:68:3d:bf:be:20:0b:04:b7: 69:9a:a1:a9:59:b2:a6:3b:e6:bd:7c:6e:4d:3a:82: 77:25:e3:9f:20:35:aa:47:f3:ab:f0:ce:eb:fc:d4: f7:55:c4:90:59:14:c5:1f:74:5e:f8:bc:9b:32:82: 79:88:47:4e:32:26:a9:e0:70:94:59:ae:72:15:8c: 7e:d6:76:42:f7:c4:38:70:9b:3c:e7:16:2b:6b:20: 36:a2:a6:f6:9f:bf:37:5a:b4:91:db:1a:ed:9e:8a: db:5a:b0:9c:2c:14:17:61:0b:2c:bc:26:a3:0d:82: 31:ea:33:93:b6:5f:bd:d5:9f:b9:8a:5f:58:83:35: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Authority Key Identifier: keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/ RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffe0::/48 Signature Algorithm: sha256WithRSAEncryption 7a:95:56:a3:d9:f0:7e:ed:e6:4e:79:e2:00:fa:dc:33:2d:b4: ca:ba:83:90:dd:30:63:f9:3b:f5:7f:aa:d2:c4:b2:3e:76:bb: 68:f4:d1:87:ee:e4:bd:c4:db:a1:dc:f7:5d:37:20:f1:2c:fb: c4:f5:bb:9d:c3:39:75:b9:82:56:bd:c7:3a:20:e0:69:44:55: de:4a:f2:91:92:7f:f9:45:b3:f7:85:e7:05:74:ba:71:20:a1: 12:d4:26:b2:e7:68:71:ca:5b:8c:85:bc:e3:1c:6e:e8:31:e1: e2:97:ba:71:8a:75:89:87:ef:b3:32:24:a4:d6:8a:9b:f6:6f: 9d:e5:7a:21:8f:81:6d:69:2e:95:0c:c6:12:4b:40:fa:5c:fb: 32:a4:d7:eb:6b:c1:69:e4:f9:72:07:43:9c:3c:11:cf:34:0a: 4e:f6:22:d4:d4:c2:87:67:48:97:3e:94:62:1e:8d:a8:d1:57: ba:de:25:58:83:04:87:bd:25:c5:43:b1:a5:0f:e8:27:1d:cc: cd:27:ea:dd:b9:83:10:bf:87:70:fe:a2:a7:d4:66:80:ed:a9: 47:7f:ae:78:c9:a1:d8:a7:44:ca:fa:25:b9:bc:c3:0e:00:c9: 2e:c2:8d:8d:e8:bc:8e:eb:b4:a9:52:6d:68:16:33:90:fd:a4: 03:37:56:ab -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUVfxEkRoHfqfMOI+oRW3JL8hr72swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1 OEY5RjUxQzAeFw0yNjAzMDExMTI3MjFaFw0yNzAyMjgxMTMyMjFaMDMxMTAvBgNV BAMTKDI4MUY1RDM5M0M5MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xS/GoAlzK7S5rGP9Asi+Qutk 2u6c2tElpDTQqjR17yUF1KZKiSwRGQ2rgpmKPnASmGMz6A1PSL0+e3fw/lku9sSB VDF5N3SRCJ+Bziy+vLUe/yOGaBMP2QcrP9ZahRDD9TE5Ec97EvDWMRATcVW14Iuz wYqJWvrxQqW85PRoPb++IAsEt2maoalZsqY75r18bk06gncl458gNapH86vwzuv8 1PdVxJBZFMUfdF74vJsygnmIR04yJqngcJRZrnIVjH7WdkL3xDhwmzznFitrIDai pvafvzdatJHbGu2eittasJwsFBdhCyy8JqMNgjHqM5O2X73Vn7mKX1iDNS2vAgMB AAGjggLrMIIC5zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQoH105PJEjEdAP acpCzG0/0R19UjAfBgNVHSMEGDAWgBRmvQwQE15dv0kT4u4/LdnTWPn1HDAOBgNV HQ8BAf8EBAMCAQYwawYDVR0fBGQwYjBgoF6gXIZacnN5bmM6Ly9ycmRwLmFzMjE0 NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5LXBhdy8xLzY2QkQwQzEwMTM1RTVEQkY0OTEz RTJFRTNGMkREOUQzNThGOUY1MUMuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYI KwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvNjZC RDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1OEY5RjUxQy5jZXIwggE2Bggr BgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9yc3luYzovL3Jwa2ktcmVwby5h czIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4 NTRlYTgzNTlkLzIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9ycGtpLXJlcG8uYXMy MDc5NjAubmV0L3JlcG8vcnBraV9jYV9mMTE0YzFlYTc3ODg0NTJjYmYzOGJlODU0 ZWE4MzU5ZC8yLzI4MUY1RDM5M0M5MTIzMTFEMDBGNjlDQTQyQ0M2RDNGRDExRDdE NTIubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jwa2kuYXMyMDc5NjAubmV0L3Jy ZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhHywP/gMA0GCSqGSIb3DQEBCwUA A4IBAQB6lVaj2fB+7eZOeeIA+twzLbTKuoOQ3TBj+Tv1f6rSxLI+drto9NGH7uS9 xNuh3PddNyDxLPvE9budwzl1uYJWvcc6IOBpRFXeSvKRkn/5RbP3hecFdLpxIKES 1Cay52hxyluMhbzjHG7oMeHil7pxinWJh++zMiSk1oqb9m+d5Xohj4FtaS6VDMYS S0D6XPsypNfra8Fp5PlyB0OcPBHPNApO9iLU1MKHZ0iXPpRiHo2o0Ve63iVYgwSH vSXFQ7GlD+gnHczNJ+rduYMQv4dw/qKn1GaA7alHf654yaHYp0TK+iW5vMMOAMku wo2N6LyO67SpUm1oFjOQ/aQDN1ar -----END CERTIFICATE-----Generated at Sat Mar 14 06:43:20 2026 by rpki-client