$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer File: 3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer (raw, json) Hash identifier: Q7BJ01tr/6JHLPGP911ghDsrU5buibZF5gNXX6+52rQ= Subject key identifier: 38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 0983BCABB5E508EEF8028E171AAF7B9C38BAB120 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 07 Sep 2026 13:03:03 +0000 Certificate not after: Mon 06 Sep 2027 13:08:03 +0000 Subordinate resources: IP: 2a14:7581:3090::/44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:83:bc:ab:b5:e5:08:ee:f8:02:8e:17:1a:af:7b:9c:38:ba:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Sep 7 13:03:03 2026 GMT Not After : Sep 6 13:08:03 2027 GMT Subject: CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:a9:c7:80:39:70:15:54:f9:d8:bc:74:7a: 4b:5e:6b:06:6b:65:50:c0:83:ed:d8:5c:59:04:c7: 8f:e5:c3:a9:36:b5:34:f5:24:2f:49:1a:6f:c2:b9: 02:05:5f:c7:bf:3a:45:cf:a2:c0:2a:23:ff:c3:b6: 8f:55:d1:e8:67:2b:06:2c:25:84:b0:63:e5:a2:c7: 8e:ea:0c:44:6d:b2:b4:b4:9f:02:fb:f0:bf:a8:4d: 42:58:dc:86:df:6d:08:5b:f4:a1:d7:ae:ca:0b:8a: 4a:9d:ee:75:c8:5b:ba:d7:2d:58:2f:08:55:5d:6e: 82:00:8d:26:3e:50:4a:ef:45:80:f8:55:4d:fd:64: 5e:6b:e0:be:3b:4a:ef:e4:e8:91:eb:26:e5:ac:76: 76:e3:99:8a:c1:8a:73:9f:3b:a6:b4:00:48:9d:8d: 0f:3b:e6:da:86:f8:0a:07:57:a0:f3:e3:d9:e8:b3: 7b:3e:fc:db:4e:f1:c9:22:45:bf:44:6d:59:e7:07: d7:05:57:4d:6d:05:57:df:e7:88:a0:ac:ac:67:1c: f2:d3:80:48:86:07:0d:ab:96:a3:43:f9:ff:dc:b5: 6c:41:97:d6:d6:39:f8:7e:1c:03:4c:7a:0a:3e:76: a5:03:45:87:2e:8c:da:f2:85:8e:fb:1e:de:43:79: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3090::/44 Signature Algorithm: sha256WithRSAEncryption 46:f8:dc:03:4f:b4:e2:7f:53:30:34:54:32:74:c6:4f:db:42: 68:46:e3:a8:c5:0c:eb:cf:43:dc:dd:7e:40:46:92:ce:d4:b4: 4a:99:0f:6b:e1:fc:d6:08:ca:2b:f9:71:f3:09:b2:bd:39:30: 4e:d6:cc:0e:70:0b:72:f3:ce:77:f6:eb:b9:53:74:32:a2:26: 6d:98:18:9a:c1:b5:c4:29:05:ce:e1:51:d3:87:7f:ce:78:67: 1e:be:35:09:8c:b8:ac:37:cd:57:44:1c:c5:78:5b:a7:28:d1: 2c:f5:56:ea:dc:9a:a2:ae:ac:f4:b5:2e:1a:a1:18:89:c9:9b: 31:bd:e8:9a:c2:3a:e3:1e:d5:c1:8b:ce:6d:9c:ff:72:7d:c6: ca:0d:aa:25:aa:f8:2b:4a:6c:8d:2a:12:fe:1a:aa:9a:5a:c7: db:18:db:d8:83:e7:2d:9c:af:39:60:f0:26:09:f3:64:bb:2e: 1d:2a:e6:2f:80:44:14:5a:db:93:23:b0:72:2b:f9:46:42:47: 7a:f6:c1:6b:2f:8c:31:9f:d4:fd:89:63:92:05:05:80:bc:52: eb:30:17:61:12:76:4d:5d:50:c4:c9:5e:9b:4d:70:d6:e1:45: 31:bf:54:65:7d:80:40:ba:22:f4:ae:d3:2f:2c:dd:dd:e7:08: 55:77:c1:7a -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUCYO8q7XlCO74Ao4XGq97nDi6sSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA5MDcxMzAzMDNaFw0yNzA5MDYxMzA4MDNaMDMxMTAvBgNV BAMTKDM4OTREOTNEODdCQUI5RDBBRDk4RjJBNkZGNDNGMTQ2NUJCMzYwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZg6nHgDlwFVT52Lx0ekteawZr ZVDAg+3YXFkEx4/lw6k2tTT1JC9JGm/CuQIFX8e/OkXPosAqI//Dto9V0ehnKwYs JYSwY+Wix47qDERtsrS0nwL78L+oTUJY3IbfbQhb9KHXrsoLikqd7nXIW7rXLVgv CFVdboIAjSY+UErvRYD4VU39ZF5r4L47Su/k6JHrJuWsdnbjmYrBinOfO6a0AEid jQ875tqG+AoHV6Dz49nos3s+/NtO8ckiRb9EbVnnB9cFV01tBVff54igrKxnHPLT gEiGBw2rlqND+f/ctWxBl9bWOfh+HANMego+dqUDRYcujNryhY77Ht5DeRxFAgMB AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4lNk9h7q50K2Y 8qb/Q/FGW7Ng6TAfBgNVHSMEGDAWgBQgKoLabnPOQmLhi67WCj+myIkj8DAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3 Y2NkZDZlZmUvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U4MDVlYTVjLWQ3YTMtNDg0OC04MzdiLTQ2 OTdjY2RkNmVmZS8yLzM4OTREOTNEODdCQUI5RDBBRDk4RjJBNkZGNDNGMTQ2NUJC MzYwRTkubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoUdYEwkDANBgkqhkiG9w0B AQsFAAOCAQEARvjcA0+04n9TMDRUMnTGT9tCaEbjqMUM689D3N1+QEaSztS0SpkP a+H81gjKK/lx8wmyvTkwTtbMDnALcvPOd/bruVN0MqImbZgYmsG1xCkFzuFR04d/ znhnHr41CYy4rDfNV0QcxXhbpyjRLPVW6tyaoq6s9LUuGqEYicmbMb3omsI64x7V wYvObZz/cn3Gyg2qJar4K0psjSoS/hqqmlrH2xjb2IPnLZyvOWDwJgnzZLsuHSrm L4BEFFrbkyOwciv5RkJHevbBay+MMZ/U/YljkgUFgLxS6zAXYRJ2TV1QxMlem01w 1uFFMb9UZX2AQLoi9K7TLyzd3ecIVXfBeg== -----END CERTIFICATE-----Generated at Thu Sep 10 11:39:26 2026 by rpki-client