$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (raw, json) Hash identifier: 4KBRiqpbfzMxNtKxapzftoYGyWwxn63j8/x6y95lvCY= Subject key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 7033839C433A3773D156F903737A90945A16D253 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Manifest: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft caRepository: rsync://krill.cxy.hk/repo/Xinyu/2/ Notify URL: https://krill.cxy.hk/rrdp/notification.xml Certificate not before: Tue 08 Sep 2026 23:04:05 +0000 Certificate not after: Tue 07 Sep 2027 23:09:05 +0000 Subordinate resources: IP: 2a14:7586:6000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:33:83:9c:43:3a:37:73:d1:56:f9:03:73:7a:90:94:5a:16:d2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 8 23:04:05 2026 GMT Not After : Sep 7 23:09:05 2027 GMT Subject: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:d1:cd:0f:db:b0:b1:c5:a4:f3:6f:ed:1e: fa:23:a4:d1:ba:32:dd:02:dc:d5:24:f3:6d:29:ef: 2e:74:8c:ca:c1:cb:84:a0:ea:34:d6:4f:39:b6:a6: fd:fd:77:6f:1b:45:b4:f3:06:5f:19:e1:db:90:2e: 22:60:cc:88:80:5c:75:db:7c:64:c7:5a:39:53:5f: 1e:33:81:46:eb:36:6f:fa:9c:ec:5c:23:00:71:ba: ef:9c:96:36:bd:fa:f1:c6:76:46:f4:14:83:50:ea: d4:8b:b0:bf:b4:61:da:47:27:78:48:b4:61:2b:bb: f3:22:be:94:b6:ae:e7:e9:2c:58:90:5c:69:7a:ca: 35:49:15:ed:25:8f:c9:e9:57:17:b7:78:1e:59:ce: b6:42:7b:89:41:30:1a:11:c2:6f:0d:fc:c4:89:cf: 47:6c:b1:f9:4f:6e:79:99:af:59:c8:27:dd:83:6d: fa:a1:dc:3e:ac:66:3b:e5:f5:79:41:56:13:77:05: 99:d9:b0:56:07:07:ad:0f:7f:94:65:da:72:51:97: 1a:46:c8:57:91:7a:2c:e4:ad:b7:dc:7f:03:7a:6f: e9:d0:d0:48:e5:8a:7b:03:a6:be:4a:e6:1a:60:5d: c4:12:ab:6a:ee:c8:7f:08:32:98:54:ef:d4:bb:14: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: CA Repository - URI:rsync://krill.cxy.hk/repo/Xinyu/2/ RPKI Manifest - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft RPKI Notify - URI:https://krill.cxy.hk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6000::/40 Signature Algorithm: sha256WithRSAEncryption 12:e2:c5:0f:4f:87:36:45:cd:8d:5c:ee:8e:68:04:d2:18:33: b8:23:ae:1c:73:6c:60:33:9e:cb:ab:31:ee:25:d4:aa:90:2d: 86:79:48:ca:9e:ff:b9:27:ef:02:fc:71:74:93:db:3f:e7:7b: 94:ca:dc:04:27:c5:99:64:f8:05:34:95:91:9f:87:6c:c7:f0: 82:88:7f:09:7c:e3:2c:be:f4:92:b5:b0:5b:42:0c:b3:6f:d1: 22:9b:79:a9:ba:25:2b:1f:2c:11:3c:f0:9a:11:5c:e6:b0:b2: 07:1f:74:57:d6:ac:c5:71:48:5d:64:d8:7d:7c:8e:84:f7:8b: 5a:a4:98:09:a9:e0:71:c6:96:2a:e4:15:64:da:6f:bb:43:d0: ae:f9:21:6c:b4:fe:2c:b7:c1:8c:a5:f7:b5:5a:cb:82:d0:f1: 38:97:aa:38:05:65:25:dd:d7:e4:ee:d7:2f:dc:f3:51:53:4e: 80:1f:bd:3c:8b:9b:32:b6:d4:70:01:ad:e6:d8:24:6e:d1:f2: 7a:eb:8c:58:4c:5d:b0:50:a9:e1:fa:be:98:97:81:53:cf:b2: ed:02:55:f3:5d:54:13:6b:5e:4d:4f:c2:1f:6b:30:9c:c1:3f: d5:30:d3:02:4e:15:7d:58:67:5c:6e:c2:30:13:bf:b3:03:16: 35:c2:86:38 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUcDODnEM6N3PRVvkDc3qQlFoW0lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDgyMzA0MDVaFw0yNzA5MDcyMzA5MDVaMDMxMTAvBgNV BAMTKDk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgNHND9uwscWk82/tHvojpNG6 Mt0C3NUk820p7y50jMrBy4Sg6jTWTzm2pv39d28bRbTzBl8Z4duQLiJgzIiAXHXb fGTHWjlTXx4zgUbrNm/6nOxcIwBxuu+clja9+vHGdkb0FINQ6tSLsL+0YdpHJ3hI tGEru/MivpS2rufpLFiQXGl6yjVJFe0lj8npVxe3eB5ZzrZCe4lBMBoRwm8N/MSJ z0dssflPbnmZr1nIJ92Dbfqh3D6sZjvl9XlBVhN3BZnZsFYHB60Pf5Rl2nJRlxpG yFeReizkrbfcfwN6b+nQ0EjlinsDpr5K5hpgXcQSq2ruyH8IMphU79S7FAT7AgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYaLigGNQenUGN k7UsCjEXT0DxHjAfBgNVHSMEGDAWgBSD3nA3uOIFZtL+ibqJF4g7a5ZOPjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzgzREU3MDM3 QjhFMjA1NjZEMkZFODlCQTg5MTc4ODNCNkI5NjRFM0UuY2VyMIHUBggrBgEFBQcB CwSBxzCBxDAuBggrBgEFBQcwBYYicnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUu bWZ0MDYGCCsGAQUFBzANhipodHRwczovL2tyaWxsLmN4eS5oay9ycmRwL25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYZgMA0GCSqGSIb3DQEBCwUAA4IBAQAS4sUP T4c2Rc2NXO6OaATSGDO4I64cc2xgM57LqzHuJdSqkC2GeUjKnv+5J+8C/HF0k9s/ 53uUytwEJ8WZZPgFNJWRn4dsx/CCiH8JfOMsvvSStbBbQgyzb9Eim3mpuiUrHywR PPCaEVzmsLIHH3RX1qzFcUhdZNh9fI6E94tapJgJqeBxxpYq5BVk2m+7Q9Cu+SFs tP4st8GMpfe1WsuC0PE4l6o4BWUl3dfk7tcv3PNRU06AH708i5syttRwAa3m2CRu 0fJ664xYTF2wUKnh+r6Yl4FTz7LtAlXzXVQTa15NT8IfazCcwT/VMNMCThV9WGdc bsIwE7+zAxY1woY4 -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:26 2026 by rpki-client