$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer File: D36546790928F44FF74C564231471FA1D8D2A97B.cer (raw, json) Hash identifier: kVpdjHlqUkpecVHLJ38vw6Xmz09jsbiEcldhdU/zcpw= Subject key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 3CF96AC26A2FC285E4DFC85607365961CCD8DC87 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 10 Oct 2026 21:26:54 +0000 Certificate not after: Sat 09 Oct 2027 21:31:54 +0000 Subordinate resources: IP: 2a06:1283:bd40::/42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 17:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f9:6a:c2:6a:2f:c2:85:e4:df:c8:56:07:36:59:61:cc:d8:dc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Oct 10 21:26:54 2026 GMT Not After : Oct 9 21:31:54 2027 GMT Subject: CN=D36546790928F44FF74C564231471FA1D8D2A97B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:29:84:83:7a:3b:bc:87:72:99:69:00:e0: fc:fb:4f:f2:62:00:14:1a:be:36:03:f7:fb:da:9e: ae:48:99:70:31:e0:b4:27:94:d5:73:70:8e:6e:56: 78:16:bd:6a:c6:3d:7f:ef:fe:55:18:05:7a:07:72: 67:f9:55:27:65:a2:18:32:7e:aa:f0:f1:38:6f:89: 0c:fa:36:0c:e4:c8:71:4c:d6:4d:83:78:67:aa:e2: d4:25:05:94:f7:fc:3c:92:89:f7:bf:97:60:39:07: 94:e9:82:62:56:32:3e:74:51:3e:79:e6:de:c6:93: 4f:9a:c5:cc:61:1f:16:35:6c:7f:71:1e:6f:86:2d: 2e:6b:e0:3d:da:d2:46:67:c5:a4:ed:86:a2:a9:66: 38:08:80:95:60:34:37:89:c1:7e:4f:5b:7e:72:af: 6e:b3:f8:c7:97:fe:52:1d:b5:8b:89:a1:d1:a7:20: d8:b2:57:f7:22:e1:68:1e:72:f0:61:a6:98:7c:bc: be:24:ed:d2:dc:e1:6a:be:77:02:32:9e:1e:2d:1f: 51:01:24:57:ec:97:4b:7f:7a:af:62:87:8e:fd:e8: ff:c6:4d:ad:0f:4a:b0:13:b2:5f:e4:73:d1:df:54: 62:63:68:0d:45:bc:be:73:bb:7b:12:a8:63:07:b6: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:bd40::/42 Signature Algorithm: sha256WithRSAEncryption 6f:aa:28:74:e4:55:ce:f3:28:68:a8:8d:9a:3a:8c:b2:2b:43: fd:a8:ff:61:21:6e:27:5e:a5:be:83:83:c8:43:76:82:31:19: e1:9c:7d:2d:b1:d1:5a:ad:f6:e1:d7:55:13:21:de:b1:05:bd: 00:64:f6:e9:e7:6a:8a:1c:34:85:65:cf:37:bc:2b:e5:ee:a3: 31:76:0d:db:5a:58:4f:5a:06:bd:0d:ca:d7:62:8c:42:5e:30: 9c:ed:de:fb:45:cf:0f:59:02:1e:f9:5a:77:ae:99:67:20:dc: 6b:ff:2d:1c:f0:c0:6b:c4:fc:3d:f4:8f:1c:0d:c1:0d:6a:2f: 3b:fb:5b:67:36:51:a4:28:dd:5f:a7:5c:c6:02:75:1a:aa:3b: e2:45:f4:92:d0:f0:bd:ff:4c:0c:73:b9:04:c4:31:30:13:c4: 29:88:eb:14:ce:93:ea:c0:7b:e4:d1:9b:fc:65:0f:8c:91:f7: 37:6f:f6:e4:80:92:f2:8c:1d:d7:2f:76:d6:e2:0a:54:8b:9e: 21:f7:28:ea:38:23:c4:32:71:ee:11:17:db:5a:c5:f4:ca:ed: e0:f2:06:36:ac:4f:6b:70:d8:49:8d:18:88:28:82:a1:fd:52: 9e:c0:5d:69:a1:f8:d3:14:54:50:f6:9f:05:f9:fa:22:77:f1: 9e:db:ce:63 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUPPlqwmovwoXk38hWBzZZYczY3IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjEwMTAyMTI2NTRaFw0yNzEwMDkyMTMxNTRaMDMxMTAvBgNV BAMTKEQzNjU0Njc5MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXvCmEg3o7vIdymWkA4Pz7T/Ji ABQavjYD9/vanq5ImXAx4LQnlNVzcI5uVngWvWrGPX/v/lUYBXoHcmf5VSdlohgy fqrw8ThviQz6NgzkyHFM1k2DeGeq4tQlBZT3/DySife/l2A5B5TpgmJWMj50UT55 5t7Gk0+axcxhHxY1bH9xHm+GLS5r4D3a0kZnxaTthqKpZjgIgJVgNDeJwX5PW35y r26z+MeX/lIdtYuJodGnINiyV/ci4WgecvBhpph8vL4k7dLc4Wq+dwIynh4tH1EB JFfsl0t/eq9ih4796P/GTa0PSrATsl/kc9HfVGJjaA1FvL5zu3sSqGMHtn7VAgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTZUZ5CSj0T/dM VkIxRx+h2NKpezAfBgNVHSMEGDAWgBTVTUQ7Z8HMXqG1RG6gZDysOnqLLDAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS80L0Q1NEQ0NDNC NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9iODg0NDMxOC0zNWQ3LTQ4MmUtYmJkNS1iNjI0 Y2YwYjIwNDEvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2 MjRjZjBiMjA0MS8xL0QzNjU0Njc5MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhE MkE5N0IubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBioGEoO9QDANBgkqhkiG9w0B AQsFAAOCAQEAb6oodORVzvMoaKiNmjqMsitD/aj/YSFuJ16lvoODyEN2gjEZ4Zx9 LbHRWq324ddVEyHesQW9AGT26edqihw0hWXPN7wr5e6jMXYN21pYT1oGvQ3K12KM Ql4wnO3e+0XPD1kCHvlad66ZZyDca/8tHPDAa8T8PfSPHA3BDWovO/tbZzZRpCjd X6dcxgJ1Gqo74kX0ktDwvf9MDHO5BMQxMBPEKYjrFM6T6sB75NGb/GUPjJH3N2/2 5ICS8owd1y921uIKVIueIfco6jgjxDJx7hEX21rF9Mrt4PIGNqxPa3DYSY0YiCiC of1SnsBdaaH40xRUUPafBfn6InfxntvOYw== -----END CERTIFICATE-----Generated at Sat Oct 24 10:41:16 2026 by rpki-client