$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer File: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer (raw, json) Hash identifier: WUexCqCUAvgyF/Iv7z1a1aWJ8dcJnS0fgUUz16Pzr18= Subject key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 2198B6FC6394ACCBA3145076BC4F329880A949CB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 28 Jun 2026 17:56:17 +0000 Certificate not after: Sun 27 Jun 2027 18:01:17 +0000 Subordinate resources: IP: 2a13:c8c4:2000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 21:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:98:b6:fc:63:94:ac:cb:a3:14:50:76:bc:4f:32:98:80:a9:49:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Jun 28 17:56:17 2026 GMT Not After : Jun 27 18:01:17 2027 GMT Subject: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:e6:b3:26:12:df:0d:20:f3:bd:6e:3f:03: 4e:75:d1:80:b8:d5:41:b5:7d:57:68:18:e2:d5:c5: 9d:85:e1:17:d0:2e:c1:92:f5:1c:df:21:6f:3c:20: 39:d0:fe:60:ec:74:63:26:94:91:d7:14:3c:aa:b3: df:3f:95:86:83:95:db:a1:3a:86:04:e5:66:97:02: 4a:5e:3a:2b:89:ef:30:22:62:b4:c1:f9:1d:ed:63: 60:19:b3:d7:ec:fd:d6:92:b6:0e:17:4a:eb:cb:14: f9:2e:64:cd:a4:5f:24:d9:fd:12:08:32:61:4d:06: e6:f7:36:4d:03:4d:bf:9b:65:b9:bb:c0:0c:e6:a2: bc:c9:13:91:bf:25:23:2b:55:51:45:5b:15:36:31: 25:bd:20:3b:33:c6:aa:08:90:47:84:0b:da:4e:e1: 09:cf:47:c1:de:c6:76:a6:3c:38:1e:f3:d5:13:4f: 65:1f:d8:46:40:fd:9d:d6:e5:85:18:7e:25:7c:98: 29:15:5b:65:d7:5b:a3:12:41:cf:26:e5:10:f0:ce: ec:8a:90:6a:d1:c9:a8:c3:26:dd:7f:ae:e1:00:e2: f5:34:91:d6:b0:14:57:33:91:32:30:a8:86:12:32: a1:68:a7:c7:00:20:83:00:8a:eb:69:9a:b5:fa:71: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:2000::/36 Signature Algorithm: sha256WithRSAEncryption d5:ca:47:83:33:81:22:04:d2:19:39:01:f7:9e:57:8b:2d:a1: 5d:96:a0:06:bd:32:42:33:0b:b1:d1:15:88:ce:95:3e:95:01: 6e:23:cf:d4:32:1b:22:b8:be:1e:eb:92:cf:4f:b5:d7:85:0a: bc:74:3d:9d:0c:97:87:2d:df:cf:e7:39:eb:5b:8e:13:ef:bb: 50:1f:b7:3b:fc:96:fc:ec:72:22:5b:0a:2d:a4:90:24:ba:7d: 42:bf:bd:6e:27:7d:6e:a1:0a:0e:cf:92:7f:6e:ad:af:11:9e: ac:fa:33:0f:47:39:c3:08:b4:bf:3b:e9:25:bd:24:e2:ff:a2: 66:72:7b:21:b0:5d:26:86:53:53:63:60:d8:d1:6b:2c:19:26: 9c:25:05:59:e8:87:56:2e:d9:1c:a2:8e:92:72:7b:38:19:15: ee:a4:e0:54:c8:84:a9:35:ba:dd:84:2c:44:e8:7e:a2:89:eb: 23:57:5a:a0:74:5a:b3:ee:81:d8:99:b1:a8:43:ff:ad:23:9b: ab:7e:3c:cb:8b:65:cb:ce:fe:78:05:bd:13:7e:f2:79:17:d0: dc:6f:e2:7d:86:14:ac:fc:b0:dd:ff:17:4e:9d:11:f6:27:ef: fc:1a:7a:80:bb:b7:7f:3d:98:e1:a4:88:51:01:ff:4a:92:6e: 0d:c2:7c:0c -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUIZi2/GOUrMujFFB2vE8ymICpScswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA2MjgxNzU2MTdaFw0yNzA2MjcxODAxMTdaMDMxMTAvBgNV BAMTKDMwMEY4N0U0NEUyNEMyRkVFRDk3ODBFMkEwQUJGMDIyRENCNTZDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKeazJhLfDSDzvW4/A0510YC4 1UG1fVdoGOLVxZ2F4RfQLsGS9RzfIW88IDnQ/mDsdGMmlJHXFDyqs98/lYaDlduh OoYE5WaXAkpeOiuJ7zAiYrTB+R3tY2AZs9fs/daStg4XSuvLFPkuZM2kXyTZ/RII MmFNBub3Nk0DTb+bZbm7wAzmorzJE5G/JSMrVVFFWxU2MSW9IDszxqoIkEeEC9pO 4QnPR8HexnamPDge89UTT2Uf2EZA/Z3W5YUYfiV8mCkVW2XXW6MSQc8m5RDwzuyK kGrRyajDJt1/ruEA4vU0kdawFFczkTIwqIYSMqFop8cAIIMAiutpmrX6cQcfAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwD4fkTiTC/u2X gOKgq/Ai3LVsWDAfBgNVHSMEGDAWgBQedElGg9jSpOApqtRXOSjSpV+kETAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi80LzFFNzQ0OTQ2 ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS82NzgyZDM4Yi00MDE2LTQ5NmEtODI5OC1lM2U5 N2JlZTk3YmQvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY3ODJkMzhiLTQwMTYtNDk2YS04Mjk4LWUz ZTk3YmVlOTdiZC8xLzMwMEY4N0U0NEUyNEMyRkVFRDk3ODBFMkEwQUJGMDIyRENC NTZDNTgubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoTyMQgMA0GCSqGSIb3DQEB CwUAA4IBAQDVykeDM4EiBNIZOQH3nleLLaFdlqAGvTJCMwux0RWIzpU+lQFuI8/U MhsiuL4e65LPT7XXhQq8dD2dDJeHLd/P5znrW44T77tQH7c7/Jb87HIiWwotpJAk un1Cv71uJ31uoQoOz5J/bq2vEZ6s+jMPRznDCLS/O+klvSTi/6JmcnshsF0mhlNT Y2DY0WssGSacJQVZ6IdWLtkcoo6Scns4GRXupOBUyISpNbrdhCxE6H6iiesjV1qg dFqz7oHYmbGoQ/+tI5urfjzLi2XLzv54Bb0TfvJ5F9Dcb+J9hhSs/LDd/xdOnRH2 J+/8GnqAu7d/PZjhpIhRAf9Kkm4NwnwM -----END CERTIFICATE-----Generated at Mon Jun 29 11:31:44 2026 by rpki-client