$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer File: B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer (raw, json) Hash identifier: DIlm6uTWdpKqx9+qrdKfp/5ptJfTD1BPsCD1OJCsAH8= Subject key identifier: B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 4463686A6B62174E6F89A31D96C3E715D620F054 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Manifest: rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft caRepository: rsync://rpki.fengrui.link/repo/CowGrassland/0/ Notify URL: https://rpki.fengrui.link/rrdp/notification.xml Certificate not before: Fri 29 Aug 2025 13:07:47 +0000 Certificate not after: Fri 28 Aug 2026 13:12:47 +0000 Subordinate resources: IP: 2a14:7583:f4f0::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 14:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:63:68:6a:6b:62:17:4e:6f:89:a3:1d:96:c3:e7:15:d6:20:f0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Aug 29 13:07:47 2025 GMT Not After : Aug 28 13:12:47 2026 GMT Subject: CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:87:3c:03:3c:91:22:18:5a:ce:0d:98:3a:04: f7:16:ce:90:e4:85:79:f7:3c:b0:ae:9f:07:9b:8f: 0c:7e:03:bb:6f:11:41:c9:f5:00:8d:64:5f:79:bb: 5c:c2:88:33:29:91:6e:bf:46:3b:25:9d:fd:33:09: e8:0b:eb:fa:ac:8b:2d:7a:22:07:88:98:6d:36:d7: b8:2d:af:3f:be:85:c3:3c:b0:44:bd:9f:ec:ed:b6: 62:d1:ab:1a:b3:5e:d6:2d:9e:57:6f:86:5f:c9:79: 7b:12:75:dd:85:e8:1d:71:59:31:25:2a:be:fc:f5: 9e:81:fd:80:9c:0a:8d:2e:aa:7b:4b:5a:d7:0c:02: 92:e6:45:42:46:7c:57:4d:96:d2:0e:fa:9f:d8:ef: e3:8e:31:10:5f:bd:93:97:c9:ad:76:16:e5:1c:18: 13:3c:65:9c:f4:18:22:8d:fe:0c:9c:32:52:26:01: 97:59:49:c3:b6:6c:64:a6:8f:02:61:4d:a1:67:e9: fd:04:40:8b:01:3b:e7:fa:f0:40:5f:86:0b:ab:9d: 50:88:e8:cd:ed:ab:53:bf:00:b3:e5:32:75:1b:c0: 97:dd:bf:ed:e7:44:26:a7:c0:59:d9:ab:f0:33:0a: 7a:0e:03:48:0a:bc:06:63:27:7c:2b:90:36:00:69: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: CA Repository - URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/ RPKI Manifest - URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft RPKI Notify - URI:https://rpki.fengrui.link/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f4f0::/44 Signature Algorithm: sha256WithRSAEncryption 30:90:f7:0e:2d:5e:20:3c:92:9f:9c:fe:dc:a4:0d:8f:01:eb: 30:4d:e1:ff:bc:9b:44:8f:80:83:14:ba:2c:92:0e:88:f5:31: 3f:ca:36:5c:84:62:e9:8f:3c:e8:da:b6:ff:66:74:63:47:82: 46:4e:58:bd:11:fa:d7:a5:d3:11:e4:81:84:9c:d8:62:de:3b: d9:f0:c8:b0:ec:68:8c:11:f6:7d:49:38:31:34:a9:63:af:64: 95:b8:b5:e4:8d:99:59:08:e5:49:71:d4:44:a9:4f:3c:97:41: 8e:15:51:69:75:b2:61:05:36:3f:2a:ff:94:9d:46:ca:23:d7: 20:1e:a0:d2:52:1e:70:66:13:10:1c:01:d7:47:3b:9f:da:f3: 6b:6e:56:18:c8:e7:e5:2d:05:28:97:d6:67:b3:2d:71:de:48: e4:69:82:e5:2c:02:0f:d0:9f:9e:69:09:e4:71:cf:e3:96:9b: 2e:e9:05:3d:42:21:08:3e:b5:e9:11:a3:11:66:ef:f4:48:14: f7:16:2e:6d:de:9e:ba:cf:5a:ed:4f:cb:51:62:05:7e:0c:75: 8e:46:3f:0d:43:f6:5d:9e:df:d0:97:c6:23:51:97:0f:12:22: 1c:d3:1f:4c:a3:94:9d:48:ea:11:a1:f5:30:e1:d5:72:c1:c5: e2:60:43:9b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURGNoamtiF05viaMdlsPnFdYg8FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTA4MjkxMzA3NDdaFw0yNjA4MjgxMzEyNDdaMDMxMTAvBgNV BAMTKEI3Q0I1QjA0MjEwMjBFQjY0MTI5NEFCQUE4RjNGQjQzQzNBMDU0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmhzwDPJEiGFrODZg6BPcWzpDk hXn3PLCunwebjwx+A7tvEUHJ9QCNZF95u1zCiDMpkW6/Rjslnf0zCegL6/qsiy16 IgeImG0217gtrz++hcM8sES9n+zttmLRqxqzXtYtnldvhl/JeXsSdd2F6B1xWTEl Kr789Z6B/YCcCo0uqntLWtcMApLmRUJGfFdNltIO+p/Y7+OOMRBfvZOXya12FuUc GBM8ZZz0GCKN/gycMlImAZdZScO2bGSmjwJhTaFn6f0EQIsBO+f68EBfhgurnVCI 6M3tq1O/ALPlMnUbwJfdv+3nRCanwFnZq/AzCnoOA0gKvAZjJ3wrkDYAaSL3AgMB AAGjggLQMIICzDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3y1sEIQIOtkEp Srqo8/tDw6BUczAfBgNVHSMEGDAWgBSxSfI6PpnEdgKX3XEEtADINdhtGTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkuY2VyMIHxBggrBgEFBQcB CwSB5DCB4TA6BggrBgEFBQcwBYYucnN5bmM6Ly9ycGtpLmZlbmdydWkubGluay9y ZXBvL0Nvd0dyYXNzbGFuZC8wLzBmBggrBgEFBQcwCoZacnN5bmM6Ly9ycGtpLmZl bmdydWkubGluay9yZXBvL0Nvd0dyYXNzbGFuZC8wL0I3Q0I1QjA0MjEwMjBFQjY0 MTI5NEFCQUE4RjNGQjQzQzNBMDU0NzMubWZ0MDsGCCsGAQUFBzANhi9odHRwczov L3Jwa2kuZmVuZ3J1aS5saW5rL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcE KhR1g/TwMA0GCSqGSIb3DQEBCwUAA4IBAQAwkPcOLV4gPJKfnP7cpA2PAeswTeH/ vJtEj4CDFLoskg6I9TE/yjZchGLpjzzo2rb/ZnRjR4JGTli9EfrXpdMR5IGEnNhi 3jvZ8Miw7GiMEfZ9STgxNKljr2SVuLXkjZlZCOVJcdREqU88l0GOFVFpdbJhBTY/ Kv+UnUbKI9cgHqDSUh5wZhMQHAHXRzuf2vNrblYYyOflLQUol9Znsy1x3kjkaYLl LAIP0J+eaQnkcc/jlpsu6QU9QiEIPrXpEaMRZu/0SBT3Fi5t3p66z1rtT8tRYgV+ DHWORj8NQ/Zdnt/Ql8YjUZcPEiIc0x9Mo5SdSOoRofUw4dVywcXiYEOb -----END CERTIFICATE-----Generated at Mon Sep 8 16:54:51 2025 by rpki-client