$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.cer File: 9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.cer (raw, json) Hash identifier: 3otO5HJvX1DieLEArK3FSr6sImRjrYvFs3cQXeMl2p4= Subject key identifier: 9D:80:6A:3F:24:FD:00:B8:89:A8:26:9B:95:FA:AB:61:DF:3E:A3:CB Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 0A210F33CE06B22499A993833B0FAE4B9700A1F5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Manifest: rsync://rpki.ruinet.work/repo/CowGrassland/2/9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.mft caRepository: rsync://rpki.ruinet.work/repo/CowGrassland/2/ Notify URL: https://rpki.fengrui.link/rrdp/notification.xml Certificate not before: Tue 11 Aug 2026 12:34:30 +0000 Certificate not after: Tue 10 Aug 2027 12:39:30 +0000 Subordinate resources: IP: 2a0a:d685:500::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 09:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:21:0f:33:ce:06:b2:24:99:a9:93:83:3b:0f:ae:4b:97:00:a1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Aug 11 12:34:30 2026 GMT Not After : Aug 10 12:39:30 2027 GMT Subject: CN=9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:30:9b:ff:98:f8:97:53:8f:6e:03:c3:74: ff:ec:45:80:ae:b1:f9:45:50:0e:45:09:62:7c:ea: 40:65:e8:51:e4:f1:0c:4a:f2:68:f7:fd:21:f9:6c: 29:30:73:05:4e:d6:bc:4b:ae:a3:ab:3d:f6:e0:79: 9a:69:4a:7b:0c:16:21:28:f1:fe:85:e2:e0:1d:c3: c4:65:19:e0:47:d8:88:dc:7e:fa:dc:9a:4e:b8:0b: 1e:82:cc:7d:61:ae:0c:d8:34:06:10:6b:46:5d:14: 58:23:77:d2:9f:b8:11:b6:7f:42:bf:ea:ce:16:02: 51:d1:f8:17:a5:04:ad:f1:97:a9:d2:2a:f9:9b:b8: ff:c8:00:2f:2e:1e:66:ac:c9:3d:2c:ac:cf:d4:00: f8:4f:0d:40:98:33:79:d7:d4:68:f2:74:dc:b5:4d: 7e:f6:14:88:66:85:a5:84:a2:9f:27:e3:a3:31:9e: da:99:81:5d:97:f9:95:58:cf:b4:5e:be:84:83:36: a9:5b:42:dd:29:71:d4:e7:16:4f:b1:e1:38:33:df: f5:6e:fd:c1:3b:d7:8d:52:5c:87:14:26:b6:19:f9: de:9c:a6:19:f0:94:ef:c3:b4:12:8a:30:5b:f5:b8: bc:8f:ba:b0:4d:69:4c:1c:04:70:1e:d2:98:fe:2f: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:80:6A:3F:24:FD:00:B8:89:A8:26:9B:95:FA:AB:61:DF:3E:A3:CB X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: CA Repository - URI:rsync://rpki.ruinet.work/repo/CowGrassland/2/ RPKI Manifest - URI:rsync://rpki.ruinet.work/repo/CowGrassland/2/9D806A3F24FD00B889A8269B95FAAB61DF3EA3CB.mft RPKI Notify - URI:https://rpki.fengrui.link/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:500::/40 Signature Algorithm: sha256WithRSAEncryption 09:64:7b:d6:1d:c7:09:75:eb:db:4a:6e:d4:76:1e:4f:9c:26: 50:a2:9d:2c:c5:4c:02:8d:75:6b:6a:12:d9:56:78:3e:f4:36: f5:aa:f5:25:c0:97:04:95:64:5d:f1:f4:08:5b:31:bd:0e:42: af:e6:e8:46:fb:a0:9d:35:97:55:0f:f6:77:72:c0:65:22:ef: 6d:55:9e:06:a3:30:61:fc:84:72:35:4a:96:30:c8:7b:94:e2: ea:49:12:74:33:9a:98:c1:2e:73:a0:b8:fc:02:0c:d7:fe:5c: cb:e1:a9:b1:4d:59:82:e3:79:f8:50:e8:d9:70:ef:e3:1f:cf: 4b:c9:b0:f5:37:6c:ec:c2:c5:0c:08:06:1a:45:0c:6d:8d:cd: b9:f4:69:dd:7f:7b:48:88:c7:5d:3a:8d:09:d2:9f:75:b8:1a: 77:fb:fc:d0:dc:06:2d:1e:39:89:14:fc:4f:58:94:bc:7b:15: b0:b8:50:c6:f2:ce:42:09:2d:23:46:85:4a:72:ac:c2:9e:0b: bf:2e:54:f4:41:66:dd:55:1a:54:fe:b5:72:30:cf:a7:30:5e: 8a:c3:0a:fb:93:b7:98:be:32:24:87:2c:09:4b:58:82:99:d8: 79:1d:ef:d5:c4:60:68:1f:63:d8:ba:02:4e:07:41:a4:52:f0: 55:4d:3d:b8 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUCiEPM84GsiSZqZODOw+uS5cAofUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA4MTExMjM0MzBaFw0yNzA4MTAxMjM5MzBaMDMxMTAvBgNV BAMTKDlEODA2QTNGMjRGRDAwQjg4OUE4MjY5Qjk1RkFBQjYxREYzRUEzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4jCb/5j4l1OPbgPDdP/sRYCu sflFUA5FCWJ86kBl6FHk8QxK8mj3/SH5bCkwcwVO1rxLrqOrPfbgeZppSnsMFiEo 8f6F4uAdw8RlGeBH2Ijcfvrcmk64Cx6CzH1hrgzYNAYQa0ZdFFgjd9KfuBG2f0K/ 6s4WAlHR+BelBK3xl6nSKvmbuP/IAC8uHmasyT0srM/UAPhPDUCYM3nX1GjydNy1 TX72FIhmhaWEop8n46MxntqZgV2X+ZVYz7RevoSDNqlbQt0pcdTnFk+x4Tgz3/Vu /cE7141SXIcUJrYZ+d6cphnwlO/DtBKKMFv1uLyPurBNaUwcBHAe0pj+L9jDAgMB AAGjggLNMIICyTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdgGo/JP0AuImo JpuV+qth3z6jyzAfBgNVHSMEGDAWgBSAg4Zz7Skdwaz64Dfoj5x6eLcSfjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzgwODM4Njcz RUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UuY2VyMIHvBggrBgEFBQcB CwSB4jCB3zA5BggrBgEFBQcwBYYtcnN5bmM6Ly9ycGtpLnJ1aW5ldC53b3JrL3Jl cG8vQ293R3Jhc3NsYW5kLzIvMGUGCCsGAQUFBzAKhllyc3luYzovL3Jwa2kucnVp bmV0LndvcmsvcmVwby9Db3dHcmFzc2xhbmQvMi85RDgwNkEzRjI0RkQwMEI4ODlB ODI2OUI5NUZBQUI2MURGM0VBM0NCLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9y cGtpLmZlbmdydWkubGluay9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoK 1oUFMA0GCSqGSIb3DQEBCwUAA4IBAQAJZHvWHccJdevbSm7Udh5PnCZQop0sxUwC jXVrahLZVng+9Db1qvUlwJcElWRd8fQIWzG9DkKv5uhG+6CdNZdVD/Z3csBlIu9t VZ4GozBh/IRyNUqWMMh7lOLqSRJ0M5qYwS5zoLj8AgzX/lzL4amxTVmC43n4UOjZ cO/jH89LybD1N2zswsUMCAYaRQxtjc259Gndf3tIiMddOo0J0p91uBp3+/zQ3AYt HjmJFPxPWJS8exWwuFDG8s5CCS0jRoVKcqzCngu/LlT0QWbdVRpU/rVyMM+nMF6K wwr7k7eYvjIkhywJS1iCmdh5He/VxGBoH2PYugJOB0GkUvBVTT24 -----END CERTIFICATE-----Generated at Sat Sep 5 00:56:16 2026 by rpki-client