Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
File: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer (raw, json)
Hash identifier: RLBrSvajJR46TEPk/Xg4utd0wVfWi1PeaFMIY74up+U=
Subject key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 06DB89030EE437074C89FE1DECA5634FC399FCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
caRepository: rsync://krill.cxy.hk/repo/Xinyu/4/
Notify URL: https://krill.cxy.hk/rrdp/notification.xml
Certificate not before: Tue 02 Jun 2026 12:13:29 +0000
Certificate not after: Tue 01 Jun 2027 12:18:29 +0000
Subordinate resources: IP: 2a0f:1cc5:2400::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:db:89:03:0e:e4:37:07:4c:89:fe:1d:ec:a5:63:4f:c3:99:fc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:29 2026 GMT
Not After : Jun 1 12:18:29 2027 GMT
Subject: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:e2:1f:f1:24:7c:da:d2:04:ba:74:75:58:
a2:b5:ba:4b:d7:40:59:5d:70:3c:52:f7:49:87:95:
c2:67:0c:1c:cb:67:34:e3:40:a4:83:99:99:d0:12:
bd:a8:94:52:df:61:b4:4a:7e:83:bb:04:f9:29:c8:
07:6b:47:39:15:54:a4:a5:d1:3c:e3:73:11:08:7b:
c0:0f:81:c0:d6:61:7f:60:27:89:11:e6:3c:14:24:
d1:1d:56:1b:78:e3:aa:52:53:76:47:ef:43:69:2d:
58:8e:b5:a8:d5:98:b1:f8:bf:49:c1:cf:d5:77:bf:
22:60:ec:cb:66:d3:dc:59:47:77:36:51:9d:4c:37:
f6:e5:72:c6:02:4f:cb:a9:4d:49:28:2b:66:2e:32:
e0:8d:6c:ec:1e:c0:aa:b4:c0:a7:65:0e:81:3b:a5:
28:07:c0:19:4a:45:61:fe:df:69:ac:8b:c1:e0:2a:
3e:f8:a6:7b:2c:16:90:4a:e5:18:72:8d:2e:28:16:
da:87:14:ba:69:d8:94:a3:41:a9:8e:8d:ab:a4:c3:
f6:70:3f:60:8c:3d:8e:71:b7:a5:70:76:2b:15:c9:
f2:0d:2e:ab:5b:e7:11:eb:cb:de:38:07:72:c4:7c:
29:4f:f1:27:7f:57:e1:52:55:1c:8c:3e:bf:3c:d2:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://krill.cxy.hk/repo/Xinyu/4/
RPKI Manifest - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
RPKI Notify - URI:https://krill.cxy.hk/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2400::/40
Signature Algorithm: sha256WithRSAEncryption
11:4e:84:1f:45:c3:fc:3c:7f:29:27:67:5a:96:53:c1:b4:40:
b1:eb:f6:43:32:d1:b6:f3:08:b4:c8:90:75:af:b5:9f:92:f8:
77:f4:69:37:9b:aa:85:fc:0e:98:1e:ba:58:a8:30:f7:a9:ab:
eb:f6:ad:1b:1f:e4:34:18:d6:84:b5:63:7a:7e:e0:56:c1:70:
da:57:27:c4:91:20:18:7a:f1:32:c7:39:cc:19:09:22:33:27:
d0:5b:61:ee:26:a5:3a:d1:0d:c3:9b:35:6d:76:b6:27:e9:6a:
87:e4:c2:a4:a8:54:ca:29:fd:7c:ba:a3:f7:03:57:17:3b:7c:
2c:7c:5e:a6:d9:59:ae:95:76:90:90:82:9c:33:45:e6:a0:4e:
8c:c0:46:a6:83:7b:77:33:2f:1a:0c:53:e1:7a:37:46:fd:ff:
4c:ae:d5:31:62:27:e6:33:d7:0a:b2:5b:41:f1:09:ce:95:13:
1b:73:e2:cb:df:fd:95:45:5b:ff:4d:09:4c:9b:09:c2:ef:60:
33:49:2f:da:11:9d:29:20:ad:04:dc:f1:3d:d6:a5:08:bc:16:
60:73:87:c2:f1:2e:f5:f0:51:d3:df:d8:58:18:d6:47:cb:29:
8e:34:8c:14:36:65:d8:08:14:27:c0:50:44:86:a2:19:51:23:
f3:9d:fe:b4
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUBtuJAw7kNwdMif4d7KVjT8OZ/KIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA2MDIxMjEzMjlaFw0yNzA2MDExMjE4MjlaMDMxMTAvBgNV
BAMTKDMyMUZCRkU1RkIyMDQyRkYyQkIyRUU4RjVFMzI1RDk2M0MxN0M5OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZOIf8SR82tIEunR1WKK1ukvX
QFldcDxS90mHlcJnDBzLZzTjQKSDmZnQEr2olFLfYbRKfoO7BPkpyAdrRzkVVKSl
0TzjcxEIe8APgcDWYX9gJ4kR5jwUJNEdVht446pSU3ZH70NpLViOtajVmLH4v0nB
z9V3vyJg7Mtm09xZR3c2UZ1MN/blcsYCT8upTUkoK2YuMuCNbOwewKq0wKdlDoE7
pSgHwBlKRWH+32msi8HgKj74pnssFpBK5RhyjS4oFtqHFLpp2JSjQamOjaukw/Zw
P2CMPY5xt6VwdisVyfINLqtb5xHry944B3LEfClP8Sd/V+FSVRyMPr880qLFAgMB
AAGjggJ3MIICczAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyH7/l+yBC/yuy
7o9eMl2WPBfJlzAfBgNVHSMEGDAWgBQb4kACGih/KYlz2eoo38gHNf1YADAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5
MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8xQkUyNDAwMjFBMjg3RjI5ODk3M0Q5RUEy
OERGQzgwNzM1RkQ1ODAwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRy1KQUFo
b29meW1KYzlucUtOX0lCelg5V0FBLmNlcjCB1AYIKwYBBQUHAQsEgccwgcQwLgYI
KwYBBQUHMAWGInJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNC8wWgYI
KwYBBQUHMAqGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNC8zMjFG
QkZFNUZCMjA0MkZGMkJCMkVFOEY1RTMyNUQ5NjNDMTdDOTk3Lm1mdDA2BggrBgEF
BQcwDYYqaHR0cHM6Ly9rcmlsbC5jeHkuaGsvcnJkcC9ub3RpZmljYXRpb24ueG1s
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqDxzFJDANBgkqhkiG9w0BAQsFAAOCAQEAEU6EH0XD/Dx/KSdnWpZT
wbRAsev2QzLRtvMItMiQda+1n5L4d/RpN5uqhfwOmB66WKgw96mr6/atGx/kNBjW
hLVjen7gVsFw2lcnxJEgGHrxMsc5zBkJIjMn0Fth7ialOtENw5s1bXa2J+lqh+TC
pKhUyin9fLqj9wNXFzt8LHxeptlZrpV2kJCCnDNF5qBOjMBGpoN7dzMvGgxT4Xo3
Rv3/TK7VMWIn5jPXCrJbQfEJzpUTG3Piy9/9lUVb/00JTJsJwu9gM0kv2hGdKSCt
BNzxPdalCLwWYHOHwvEu9fBR09/YWBjWR8spjjSMFDZl2AgUJ8BQRIaiGVEj853+
tA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:17 2026 by rpki-client