$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (raw, json) Hash identifier: Mz7Wk1LZLJpci8SZQIcW5tT1NyJsd+UeXXiGdTRV9J8= Subject key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 7BF9C52CF65A4AD3068469122077BFD737A9CD98 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Manifest: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft caRepository: rsync://krill.cxy.hk/repo/Xinyu/2/ Notify URL: https://krill.cxy.hk/rrdp/notification.xml Certificate not before: Sat 31 Oct 2026 02:43:23 +0000 Certificate not after: Sat 30 Oct 2027 02:48:23 +0000 Subordinate resources: IP: 2a14:7586:6000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f9:c5:2c:f6:5a:4a:d3:06:84:69:12:20:77:bf:d7:37:a9:cd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Oct 31 02:43:23 2026 GMT Not After : Oct 30 02:48:23 2027 GMT Subject: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:d1:cd:0f:db:b0:b1:c5:a4:f3:6f:ed:1e: fa:23:a4:d1:ba:32:dd:02:dc:d5:24:f3:6d:29:ef: 2e:74:8c:ca:c1:cb:84:a0:ea:34:d6:4f:39:b6:a6: fd:fd:77:6f:1b:45:b4:f3:06:5f:19:e1:db:90:2e: 22:60:cc:88:80:5c:75:db:7c:64:c7:5a:39:53:5f: 1e:33:81:46:eb:36:6f:fa:9c:ec:5c:23:00:71:ba: ef:9c:96:36:bd:fa:f1:c6:76:46:f4:14:83:50:ea: d4:8b:b0:bf:b4:61:da:47:27:78:48:b4:61:2b:bb: f3:22:be:94:b6:ae:e7:e9:2c:58:90:5c:69:7a:ca: 35:49:15:ed:25:8f:c9:e9:57:17:b7:78:1e:59:ce: b6:42:7b:89:41:30:1a:11:c2:6f:0d:fc:c4:89:cf: 47:6c:b1:f9:4f:6e:79:99:af:59:c8:27:dd:83:6d: fa:a1:dc:3e:ac:66:3b:e5:f5:79:41:56:13:77:05: 99:d9:b0:56:07:07:ad:0f:7f:94:65:da:72:51:97: 1a:46:c8:57:91:7a:2c:e4:ad:b7:dc:7f:03:7a:6f: e9:d0:d0:48:e5:8a:7b:03:a6:be:4a:e6:1a:60:5d: c4:12:ab:6a:ee:c8:7f:08:32:98:54:ef:d4:bb:14: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: CA Repository - URI:rsync://krill.cxy.hk/repo/Xinyu/2/ RPKI Manifest - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft RPKI Notify - URI:https://krill.cxy.hk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:8c:aa:fd:ff:e9:0e:07:97:29:db:a4:b4:5e:1d:74:14:e0: f4:a3:98:7c:4c:47:20:50:7d:7f:1a:74:d3:32:b8:65:fa:c7: 94:3c:be:26:b7:f0:40:06:92:40:4f:04:c8:c4:70:3e:ed:a2: ab:86:38:00:31:b1:dc:35:ee:29:74:89:53:5e:a5:2b:70:58: c1:0a:11:49:dc:e5:8e:0d:97:86:44:f1:d2:dc:70:59:3d:cf: a7:f9:0c:06:f6:11:e0:1a:e4:e2:0a:73:44:3f:3b:0b:c6:d1: 2c:7b:44:51:4b:c4:a9:9b:a6:02:bd:c0:cf:36:66:74:0c:d0: a7:0b:83:d5:ae:57:55:8c:f4:93:73:e3:68:bf:ff:da:4d:f2: 72:42:a7:a9:b1:40:31:28:a3:c3:dd:da:c8:76:66:42:11:31: 0f:32:b3:27:c8:e3:35:6a:91:1f:e3:16:7b:0c:42:8d:bd:85: f9:18:7f:30:a5:03:56:4f:70:ea:a4:3f:9b:24:8c:54:54:e4: 86:af:bd:ad:9a:f2:f2:26:0f:0c:1e:cc:19:f9:fc:43:a1:c8: 2f:92:73:79:05:31:85:9d:3e:c2:d7:2e:4f:16:61:b9:88:ad: e8:98:00:10:20:0c:dd:77:b5:e4:3e:f1:a5:4b:c4:6f:56:0a: 37:86:50:2e -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUe/nFLPZaStMGhGkSIHe/1zepzZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjEwMzEwMjQzMjNaFw0yNzEwMzAwMjQ4MjNaMDMxMTAvBgNV BAMTKDk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgNHND9uwscWk82/tHvojpNG6 Mt0C3NUk820p7y50jMrBy4Sg6jTWTzm2pv39d28bRbTzBl8Z4duQLiJgzIiAXHXb fGTHWjlTXx4zgUbrNm/6nOxcIwBxuu+clja9+vHGdkb0FINQ6tSLsL+0YdpHJ3hI tGEru/MivpS2rufpLFiQXGl6yjVJFe0lj8npVxe3eB5ZzrZCe4lBMBoRwm8N/MSJ z0dssflPbnmZr1nIJ92Dbfqh3D6sZjvl9XlBVhN3BZnZsFYHB60Pf5Rl2nJRlxpG yFeReizkrbfcfwN6b+nQ0EjlinsDpr5K5hpgXcQSq2ruyH8IMphU79S7FAT7AgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYaLigGNQenUGN k7UsCjEXT0DxHjAfBgNVHSMEGDAWgBSD3nA3uOIFZtL+ibqJF4g7a5ZOPjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzgzREU3MDM3 QjhFMjA1NjZEMkZFODlCQTg5MTc4ODNCNkI5NjRFM0UuY2VyMIHUBggrBgEFBQcB CwSBxzCBxDAuBggrBgEFBQcwBYYicnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUu bWZ0MDYGCCsGAQUFBzANhipodHRwczovL2tyaWxsLmN4eS5oay9ycmRwL25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYZgMA0GCSqGSIb3DQEBCwUAA4IBAQALjKr9 /+kOB5cp26S0Xh10FOD0o5h8TEcgUH1/GnTTMrhl+seUPL4mt/BABpJATwTIxHA+ 7aKrhjgAMbHcNe4pdIlTXqUrcFjBChFJ3OWODZeGRPHS3HBZPc+n+QwG9hHgGuTi CnNEPzsLxtEse0RRS8Spm6YCvcDPNmZ0DNCnC4PVrldVjPSTc+Nov//aTfJyQqep sUAxKKPD3drIdmZCETEPMrMnyOM1apEf4xZ7DEKNvYX5GH8wpQNWT3DqpD+bJIxU VOSGr72tmvLyJg8MHswZ+fxDocgvknN5BTGFnT7C1y5PFmG5iK3omAAQIAzdd7Xk PvGlS8RvVgo3hlAu -----END CERTIFICATE-----Generated at Sun Nov 1 01:52:39 2026 by rpki-client