$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer File: 6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer (raw, json) Hash identifier: glYh9GGOm/z99t/YgTeNvXdQNSVxSQrFdEiOfg7UFWg= Subject key identifier: 6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 6125AA968553D0604D339242B4562B407F5E0018 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Manifest: rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft caRepository: rsync://rpki.pudu.be/repo/pudu/2/ Notify URL: https://rpki.pudu.be/rrdp/notification.xml Certificate not before: Mon 13 Jan 2025 18:45:23 +0000 Certificate not after: Mon 12 Jan 2026 18:50:23 +0000 Subordinate resources: IP: 2a07:54c1:4100::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Jun 2025 01:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:25:aa:96:85:53:d0:60:4d:33:92:42:b4:56:2b:40:7f:5e:00:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Jan 13 18:45:23 2025 GMT Not After : Jan 12 18:50:23 2026 GMT Subject: CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:6f:89:e4:bf:9d:0b:72:5d:78:f8:2d:ce: 66:c3:86:5e:0b:48:71:92:4d:2f:d2:c7:21:86:b5: 02:88:28:d7:9b:b2:d5:a4:84:e3:7c:d2:90:21:f9: 3a:38:82:dd:40:72:e0:6b:af:bf:c8:f9:ee:52:47: 66:1b:62:b9:d9:11:78:57:d2:04:ac:d8:76:67:50: c5:ed:a5:15:8b:63:bb:b0:36:7b:dd:31:d0:5c:71: 92:e5:17:d9:90:03:e1:c1:a8:91:bd:38:18:44:47: f7:ef:48:ee:2a:54:09:15:cb:ac:5b:07:d9:7b:86: be:75:b5:3d:7c:af:0b:ba:31:05:9c:b5:13:75:fb: 83:df:3a:37:57:bc:4b:76:3f:a2:86:d3:fc:b3:5d: b7:7a:0c:75:2f:21:01:28:53:7a:50:ea:06:78:9d: a6:9a:d2:9b:e2:74:b3:07:6f:cd:2b:f4:5e:80:93: 89:dc:46:60:78:0c:e5:27:d4:8c:50:ac:92:18:53: 5a:3f:39:8f:55:c8:32:b9:ee:2f:80:57:c8:fb:64: 48:61:85:0e:39:81:6a:c6:50:cd:30:be:00:56:5d: b1:ae:fe:ec:47:74:97:30:b8:32:99:f9:70:5b:8c: db:dc:b1:86:7b:1f:c9:62:ce:fd:7d:b7:3d:dd:dd: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: CA Repository - URI:rsync://rpki.pudu.be/repo/pudu/2/ RPKI Manifest - URI:rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft RPKI Notify - URI:https://rpki.pudu.be/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4100::/40 Signature Algorithm: sha256WithRSAEncryption 6a:9e:02:09:e5:61:68:16:ec:fd:96:da:fa:39:77:50:9b:1a: bf:14:ea:2d:7e:26:aa:9d:2e:c4:7b:d4:ff:bc:ba:6f:dc:8a: bd:f8:92:a8:39:5c:85:7b:e2:e1:70:2c:0d:fb:28:54:bc:d1: ed:44:b8:6e:ff:cf:db:08:94:e0:cf:c1:2d:f9:81:ea:17:f9: e7:54:50:c2:d9:74:85:0b:88:ba:97:92:fe:cc:f2:9f:25:35: 23:4f:5a:57:f0:21:10:d4:50:cd:36:78:54:d3:8a:36:3e:98: b3:fc:dc:a1:17:ab:07:aa:a7:a9:5c:90:1d:85:56:2f:06:21: 57:b0:bd:5a:9b:b2:6c:f5:b0:b6:1f:00:fc:40:15:09:27:57: 26:a6:77:4e:ae:ae:03:00:c2:9a:5c:b3:83:74:27:17:70:e1: 0e:36:18:f3:1c:d9:90:0f:98:fd:fb:ce:a5:c6:2b:87:7c:23: 08:be:89:a8:75:cb:e1:3d:4a:42:b3:c4:b2:20:78:51:43:46: a0:dd:c9:10:6d:de:84:0d:c6:ae:00:23:67:bd:56:a6:65:f9: 72:d5:bc:49:52:0c:6e:81:0e:7b:48:4a:3b:ff:e9:15:7a:d0: cc:0d:51:3a:79:81:6d:75:04:55:ef:7d:c8:ac:11:a0:7b:c9: d7:57:62:57 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUYSWqloVT0GBNM5JCtFYrQH9eABgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNTAxMTMxODQ1MjNaFw0yNjAxMTIxODUwMjNaMDMxMTAvBgNV BAMTKDZENkRBQzQyRjA5MjZCODJDRUM0N0Q3RDkyMkFCNEUxNTcwRUFGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbq2+J5L+dC3JdePgtzmbDhl4L SHGSTS/SxyGGtQKIKNebstWkhON80pAh+To4gt1AcuBrr7/I+e5SR2YbYrnZEXhX 0gSs2HZnUMXtpRWLY7uwNnvdMdBccZLlF9mQA+HBqJG9OBhER/fvSO4qVAkVy6xb B9l7hr51tT18rwu6MQWctRN1+4PfOjdXvEt2P6KG0/yzXbd6DHUvIQEoU3pQ6gZ4 naaa0pvidLMHb80r9F6Ak4ncRmB4DOUn1IxQrJIYU1o/OY9VyDK57i+AV8j7ZEhh hQ45gWrGUM0wvgBWXbGu/uxHdJcwuDKZ+XBbjNvcsYZ7H8lizv19tz3d3Q5FAgMB AAGjggKlMIICoTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRtbaxC8JJrgs7E fX2SKrThVw6vFzAfBgNVHSMEGDAWgBRB9lfPNWTyM7l39ArKXkvRDh4vjjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUY2NTdDRjM1NjRGMjMzQjk3N0Y0MEFD QTVFNEJEMTBFMUUyRjhFLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi80MUY2NTdDRjM1NjRGMjMzQjk3 N0Y0MEFDQTVFNEJEMTBFMUUyRjhFLmNlcjCB0gYIKwYBBQUHAQsEgcUwgcIwLQYI KwYBBQUHMAWGIXJzeW5jOi8vcnBraS5wdWR1LmJlL3JlcG8vcHVkdS8yLzBZBggr BgEFBQcwCoZNcnN5bmM6Ly9ycGtpLnB1ZHUuYmUvcmVwby9wdWR1LzIvNkQ2REFD NDJGMDkyNkI4MkNFQzQ3RDdEOTIyQUI0RTE1NzBFQUYxNy5tZnQwNgYIKwYBBQUH MA2GKmh0dHBzOi8vcnBraS5wdWR1LmJlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA AjAIAwYAKgdUwUEwDQYJKoZIhvcNAQELBQADggEBAGqeAgnlYWgW7P2W2vo5d1Cb Gr8U6i1+JqqdLsR71P+8um/cir34kqg5XIV74uFwLA37KFS80e1EuG7/z9sIlODP wS35geoX+edUUMLZdIULiLqXkv7M8p8lNSNPWlfwIRDUUM02eFTTijY+mLP83KEX qweqp6lckB2FVi8GIVewvVqbsmz1sLYfAPxAFQknVyamd06urgMAwppcs4N0Jxdw 4Q42GPMc2ZAPmP37zqXGK4d8Iwi+iah1y+E9SkKzxLIgeFFDRqDdyRBt3oQNxq4A I2e9VqZl+XLVvElSDG6BDntISjv/6RV60MwNUTp5gW11BFXvfcisEaB7yddXYlc= -----END CERTIFICATE-----Generated at Sun Jun 1 10:38:17 2025 by rpki-client