$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/B53F95A3D803A1B080DA843093C6D8B3E4D3F376.cer File: B53F95A3D803A1B080DA843093C6D8B3E4D3F376.cer (raw, json) Hash identifier: rgR627MhVZeZZnPRdn9Z0+HiZXvBFs4Bh1rCTkrKUhQ= Subject key identifier: B5:3F:95:A3:D8:03:A1:B0:80:DA:84:30:93:C6:D8:B3:E4:D3:F3:76 Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0 Certificate issuer: /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9 Certificate serial: 7668C3F372AA2E9F52D879966A4F46E9572F487F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/2/B53F95A3D803A1B080DA843093C6D8B3E4D3F376.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 28 May 2024 06:42:53 +0000 Certificate not after: Tue 27 May 2025 06:47:53 +0000 Subordinate resources: IP: 2602:fcd3:130::/48 Validation: OK Signature path: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Jun 2024 00:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:68:c3:f3:72:aa:2e:9f:52:d8:79:96:6a:4f:46:e9:57:2f:48:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9 Validity Not Before: May 28 06:42:53 2024 GMT Not After : May 27 06:47:53 2025 GMT Subject: CN=B53F95A3D803A1B080DA843093C6D8B3E4D3F376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:d8:64:34:0c:52:cb:a3:96:40:01:1a:bb: d3:5a:6d:50:3c:73:a9:1c:30:95:7e:70:45:ea:1d: 29:61:cc:2a:5e:dd:e2:b9:28:b3:d6:06:13:a4:0a: c0:2c:eb:ce:5a:fe:67:3c:f0:32:3c:1f:e5:22:d9: be:d6:ee:15:f7:7b:3f:3a:e7:52:20:8f:55:5c:bc: f4:3c:5f:8e:6f:dd:b4:cf:cc:98:35:73:6e:22:e2: 8b:66:77:f4:cd:c1:c9:b1:3a:36:98:2f:01:c0:6d: 24:6a:e5:44:b4:08:4a:1d:ca:80:13:e4:5f:d2:1b: 5e:44:c7:50:10:e7:4a:ab:16:ff:2f:6d:1a:e3:b9: ae:fb:04:e1:56:02:8c:4d:7c:8b:67:aa:97:bc:cf: 47:03:f9:3e:e7:d2:e4:26:33:d6:d3:6e:64:74:61: 2a:ff:c7:0f:b9:f0:6c:b2:a0:3d:95:6f:d2:ad:7f: ee:05:86:db:e5:8e:ea:74:b4:75:49:5d:74:26:b8: 7b:26:d2:ff:e5:14:33:62:eb:fc:f5:0b:3d:67:ca: 92:33:d4:20:a5:58:2b:d8:df:e9:1a:ea:e8:e1:d7: e2:d8:c8:ec:fc:08:d5:1c:7f:53:64:cb:b3:dc:f6: 45:9a:ea:f9:43:e9:ae:73:8f:4e:12:17:97:d7:6d: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:3F:95:A3:D8:03:A1:B0:80:DA:84:30:93:C6:D8:B3:E4:D3:F3:76 X509v3 Authority Key Identifier: keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/2/B53F95A3D803A1B080DA843093C6D8B3E4D3F376.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fcd3:130::/48 Signature Algorithm: sha256WithRSAEncryption 3e:c2:aa:d4:28:0b:89:4d:5e:3c:7f:b7:b9:d0:12:f6:9c:9c: 74:79:5f:63:f4:17:8c:a2:52:81:30:4b:c8:b1:ef:95:8c:66: 7d:66:e2:3e:3a:29:14:ff:b6:cf:31:de:a6:f5:f4:e9:6e:75: ce:15:05:66:46:e6:c6:77:e5:f7:2f:b7:dc:59:e7:cc:80:d8: 10:9d:f8:de:9f:5c:89:e5:3f:02:c2:04:cc:51:a9:9e:24:bb: a0:f8:92:a2:6b:a8:71:43:84:7c:1d:73:73:d9:3c:2e:9a:8f: e0:f8:24:da:c6:69:de:26:9b:00:d9:a5:ad:3b:88:7d:78:99: de:fa:31:5a:a9:93:91:71:a2:bc:bd:57:47:c0:f6:f1:33:33: c9:d5:80:17:c7:51:eb:d5:bf:d1:e2:a5:62:bc:bc:61:75:65: 39:8d:f4:27:f8:a3:f1:a5:ad:28:8f:8c:fb:5d:86:b4:f8:a6: ed:1d:30:ef:99:a1:50:f1:af:1c:13:d3:5f:dd:43:a2:6c:92: ed:cc:81:ff:b9:51:c7:fc:04:9b:eb:a6:dc:0a:ae:4d:9e:ac: 91:6b:10:98:3b:03:9a:77:84:ae:f9:93:9e:ec:f5:ae:3e:8b: 7a:ec:74:b3:8f:4d:c5:8d:e7:0f:e2:ae:64:4b:e9:b5:fb:01: 41:4e:22:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUdmjD83KqLp9S2HmWak9G6VcvSH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5 YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjQwNTI4MDY0MjUzWhcNMjUwNTI3MDY0NzUz WjAzMTEwLwYDVQQDEyhCNTNGOTVBM0Q4MDNBMUIwODBEQTg0MzA5M0M2RDhCM0U0 RDNGMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrXYZDQMUsuj lkABGrvTWm1QPHOpHDCVfnBF6h0pYcwqXt3iuSiz1gYTpArALOvOWv5nPPAyPB/l Itm+1u4V93s/OudSII9VXLz0PF+Ob920z8yYNXNuIuKLZnf0zcHJsTo2mC8BwG0k auVEtAhKHcqAE+Rf0hteRMdQEOdKqxb/L20a47mu+wThVgKMTXyLZ6qXvM9HA/k+ 59LkJjPW025kdGEq/8cPufBssqA9lW/SrX/uBYbb5Y7qdLR1SV10Jrh7JtL/5RQz Yuv89Qs9Z8qSM9QgpVgr2N/pGuro4dfi2Mjs/AjVHH9TZMuz3PZFmur5Q+muc49O EheX123j5wIDAQABo4IDXDCCA1gwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU tT+Vo9gDobCA2oQwk8bYs+TT83YwHwYDVR0jBBgwFoAUi4PF2gOzzAKdlSFaATIF l4FLOPAwDgYDVR0PAQH/BAQDAgEGMH4GA1UdHwR3MHUwc6BxoG+GbXJzeW5jOi8v a3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5v bG9naWVzLzAvOEI4M0M1REEwM0IzQ0MwMjlEOTUyMTVBMDEzMjA1OTc4MTRCMzhG MC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNj NDc5Ny83YWZhZjFjMWI3N2VlZGExYTNhMmViYWRhNGI0ZGFjODlhY2JmMzhiM2Rm NzVkM2NlOS5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2YwZjVh Y2E5LWRjMjgtNDU5Mi05NzEyLTQwODRkZTljOTQyMS8yLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjBm NWFjYTktZGMyOC00NTkyLTk3MTItNDA4NGRlOWM5NDIxLzIvQjUzRjk1QTNEODAz QTFCMDgwREE4NDMwOTNDNkQ4QjNFNEQzRjM3Ni5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL80wEwMA0GCSqGSIb3DQEBCwUAA4IBAQA+wqrUKAuJTV48f7e50BL2 nJx0eV9j9BeMolKBMEvIse+VjGZ9ZuI+OikU/7bPMd6m9fTpbnXOFQVmRubGd+X3 L7fcWefMgNgQnfjen1yJ5T8CwgTMUameJLug+JKia6hxQ4R8HXNz2Twumo/g+CTa xmneJpsA2aWtO4h9eJne+jFaqZORcaK8vVdHwPbxMzPJ1YAXx1Hr1b/R4qVivLxh dWU5jfQn+KPxpa0oj4z7XYa0+KbtHTDvmaFQ8a8cE9Nf3UOibJLtzIH/uVHH/ASb 66bcCq5NnqyRaxCYOwOad4Su+ZOe7PWuPot67HSzj03FjecP4q5kS+m1+wFBTiLi -----END CERTIFICATE-----Generated at Fri Jun 21 21:58:06 2024 by rpki-client on console.sobornost.net