$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (raw, json) Hash identifier: 23+dwQKC9EhxR8/c837o7SVJ7wuGJrKYeRXm+DcGamE= Subject key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 2D98D48A279A660F918EE6AA8B7192A3D4765C6E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Manifest: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft caRepository: rsync://krill.cxy.hk/repo/Xinyu/2/ Notify URL: https://krill.cxy.hk/rrdp/notification.xml Certificate not before: Sun 31 May 2026 17:29:18 +0000 Certificate not after: Sun 30 May 2027 17:34:18 +0000 Subordinate resources: IP: 2a14:7586:6000::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:98:d4:8a:27:9a:66:0f:91:8e:e6:aa:8b:71:92:a3:d4:76:5c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: May 31 17:29:18 2026 GMT Not After : May 30 17:34:18 2027 GMT Subject: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:d1:cd:0f:db:b0:b1:c5:a4:f3:6f:ed:1e: fa:23:a4:d1:ba:32:dd:02:dc:d5:24:f3:6d:29:ef: 2e:74:8c:ca:c1:cb:84:a0:ea:34:d6:4f:39:b6:a6: fd:fd:77:6f:1b:45:b4:f3:06:5f:19:e1:db:90:2e: 22:60:cc:88:80:5c:75:db:7c:64:c7:5a:39:53:5f: 1e:33:81:46:eb:36:6f:fa:9c:ec:5c:23:00:71:ba: ef:9c:96:36:bd:fa:f1:c6:76:46:f4:14:83:50:ea: d4:8b:b0:bf:b4:61:da:47:27:78:48:b4:61:2b:bb: f3:22:be:94:b6:ae:e7:e9:2c:58:90:5c:69:7a:ca: 35:49:15:ed:25:8f:c9:e9:57:17:b7:78:1e:59:ce: b6:42:7b:89:41:30:1a:11:c2:6f:0d:fc:c4:89:cf: 47:6c:b1:f9:4f:6e:79:99:af:59:c8:27:dd:83:6d: fa:a1:dc:3e:ac:66:3b:e5:f5:79:41:56:13:77:05: 99:d9:b0:56:07:07:ad:0f:7f:94:65:da:72:51:97: 1a:46:c8:57:91:7a:2c:e4:ad:b7:dc:7f:03:7a:6f: e9:d0:d0:48:e5:8a:7b:03:a6:be:4a:e6:1a:60:5d: c4:12:ab:6a:ee:c8:7f:08:32:98:54:ef:d4:bb:14: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: CA Repository - URI:rsync://krill.cxy.hk/repo/Xinyu/2/ RPKI Manifest - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft RPKI Notify - URI:https://krill.cxy.hk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6000::/40 Signature Algorithm: sha256WithRSAEncryption 87:e3:a8:d3:33:5d:c5:d8:0d:03:8d:d1:3a:93:a2:6c:3b:f2: 9c:0a:5a:76:f8:52:48:45:00:07:eb:ec:e0:64:8d:04:4e:bf: b6:d2:de:b5:6e:12:ba:4f:be:65:95:ee:58:6d:45:cd:47:21: e5:06:77:e0:8b:97:6d:c9:3f:0e:a7:6d:7f:7e:4e:29:b5:ed: c7:2d:0c:99:c5:cf:d8:d4:e8:f1:2c:74:93:da:e5:eb:2c:d9: d3:e2:ff:5e:cf:01:06:96:1d:da:15:6b:23:02:b3:37:19:5c: 23:e2:76:4e:9e:9e:d4:63:79:21:f2:15:d5:42:a4:2f:0a:39: 41:f0:69:d1:42:1b:c0:3a:db:c3:f5:ca:c8:8c:39:6d:3b:98: 2e:17:c2:18:99:97:3a:58:86:99:ed:3a:da:ed:ab:e5:e2:57: a1:6d:42:0d:82:3d:71:d3:0a:a2:bf:9e:84:2c:4e:5e:f8:9c: b7:d8:ff:4d:2c:fd:05:b3:c6:19:34:84:20:ee:c2:cc:87:23: b9:f4:ba:29:bf:5d:6e:3c:98:62:46:40:74:8d:4e:93:f4:53: e2:25:36:99:13:e5:bc:8f:75:46:57:a2:e8:3b:77:fc:b7:ff: 5f:7c:38:c0:0c:da:f3:06:a3:84:fa:ab:df:6a:65:ae:f8:95: 20:10:f3:96 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIULZjUiieaZg+Rjuaqi3GSo9R2XG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA1MzExNzI5MThaFw0yNzA1MzAxNzM0MThaMDMxMTAvBgNV BAMTKDk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgNHND9uwscWk82/tHvojpNG6 Mt0C3NUk820p7y50jMrBy4Sg6jTWTzm2pv39d28bRbTzBl8Z4duQLiJgzIiAXHXb fGTHWjlTXx4zgUbrNm/6nOxcIwBxuu+clja9+vHGdkb0FINQ6tSLsL+0YdpHJ3hI tGEru/MivpS2rufpLFiQXGl6yjVJFe0lj8npVxe3eB5ZzrZCe4lBMBoRwm8N/MSJ z0dssflPbnmZr1nIJ92Dbfqh3D6sZjvl9XlBVhN3BZnZsFYHB60Pf5Rl2nJRlxpG yFeReizkrbfcfwN6b+nQ0EjlinsDpr5K5hpgXcQSq2ruyH8IMphU79S7FAT7AgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYaLigGNQenUGN k7UsCjEXT0DxHjAfBgNVHSMEGDAWgBQgkUcgOCofUrlQISwTjl4egbpptzAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcuY2VyMIHUBggrBgEFBQcB CwSBxzCBxDAuBggrBgEFBQcwBYYicnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9Y aW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3NEY0MEYxMUUu bWZ0MDYGCCsGAQUFBzANhipodHRwczovL2tyaWxsLmN4eS5oay9ycmRwL25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYZgMA0GCSqGSIb3DQEBCwUAA4IBAQCH46jT M13F2A0DjdE6k6JsO/KcClp2+FJIRQAH6+zgZI0ETr+20t61bhK6T75lle5YbUXN RyHlBnfgi5dtyT8Op21/fk4pte3HLQyZxc/Y1OjxLHST2uXrLNnT4v9ezwEGlh3a FWsjArM3GVwj4nZOnp7UY3kh8hXVQqQvCjlB8GnRQhvAOtvD9crIjDltO5guF8IY mZc6WIaZ7Tra7avl4lehbUINgj1x0wqiv56ELE5e+Jy32P9NLP0Fs8YZNIQg7sLM hyO59Lopv11uPJhiRkB0jU6T9FPiJTaZE+W8j3VGV6LoO3f8t/9ffDjADNrzBqOE +qvfamWu+JUgEPOW -----END CERTIFICATE-----Generated at Sat Jun 6 05:40:01 2026 by rpki-client