$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer (raw, json) Hash identifier: BGLGj5jbX3/N0Rujpvnp5ouh9GvyX5gy4YirTqfR/sI= Subject key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 25E4BCC450398333C3DA3E300CF51670D25BB712 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 23 Jul 2026 06:45:26 +0000 Certificate not after: Thu 22 Jul 2027 06:50:26 +0000 Subordinate resources: IP: 2a0a:6040:4400::/40 IP: 2a0a:6040:c200::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e4:bc:c4:50:39:83:33:c3:da:3e:30:0c:f5:16:70:d2:5b:b7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 23 06:45:26 2026 GMT Not After : Jul 22 06:50:26 2027 GMT Subject: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:20:f3:bc:61:a8:c8:92:21:ca:a6:2c:bf: 77:9e:0a:6e:ed:e1:0a:49:41:34:3b:6b:cc:75:72: 13:d2:77:bc:7a:8a:2c:22:a2:41:eb:dc:18:e9:90: a4:4c:9d:b8:fd:a1:20:3a:80:58:d2:73:8f:c4:4f: 90:75:ea:9b:f9:38:75:ff:b0:e0:db:19:5b:05:32: ea:b2:9a:86:57:4e:dd:cf:26:ea:cd:c1:12:e7:dc: 25:d5:85:fa:7f:db:22:2b:56:f5:02:96:76:69:23: 10:a5:6b:dc:76:37:01:64:e9:dc:c3:26:9a:32:3a: 9b:f5:e1:0a:75:53:08:d3:e3:51:30:90:54:dc:fd: 7d:31:59:77:e2:66:1f:ac:1d:f6:22:39:bd:fc:62: 9f:50:78:f7:93:ab:a2:0f:fc:de:b1:43:e8:05:35: f2:5f:e3:3f:a5:07:7f:71:38:94:86:7b:fd:df:b4: 1f:9b:32:04:4e:46:76:8a:b1:d1:13:8d:c3:8b:47: 25:1d:1b:7d:a5:68:6e:d7:74:86:15:c4:3c:47:7a: 55:7e:7a:e0:8a:44:25:a0:a1:9b:ee:76:55:01:01: 3e:4e:1d:8a:64:78:36:cf:64:cf:0e:c0:e5:e9:42: 38:92:38:d7:e2:40:6f:7b:dd:37:dd:9f:d0:f4:b8: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4400::/40 2a0a:6040:c200::/40 Signature Algorithm: sha256WithRSAEncryption 71:b6:35:45:46:dc:d0:8e:88:e7:e9:f5:35:d8:9c:25:e4:1c: c0:8c:5c:25:5a:3e:66:96:70:d9:b3:40:71:e1:96:5f:14:f8: 00:40:bc:89:97:c5:49:3e:54:c5:65:92:74:01:dc:7c:f7:42: 6a:1d:57:3b:fa:f8:7b:f0:21:be:67:4a:09:79:c6:bd:76:7d: a1:4e:d9:2d:e9:6f:33:50:3f:8b:84:e2:35:a5:d2:f4:a4:5d: f3:70:c0:04:85:74:18:72:d1:07:f9:79:e7:20:ff:94:ba:57: b9:e5:26:94:48:6c:75:dc:15:15:fe:d8:1f:84:d3:e2:24:eb: b4:26:ab:28:49:ca:76:1a:76:d0:36:63:1c:90:10:77:cf:41: fe:cb:9a:cf:73:cd:cc:35:65:51:91:21:4a:39:a3:81:32:04: c9:0b:b9:f7:49:2c:88:fe:dd:67:3b:d7:97:7f:82:f3:5d:e7: 7d:5d:55:9f:84:16:42:05:a2:27:6c:9b:d6:bf:b6:9a:c9:19: aa:5e:51:4b:e2:fe:9c:6c:d9:ed:f1:16:24:0d:1a:7f:07:24: 8e:3f:ec:be:0f:ce:e4:ba:c2:df:e5:cb:79:9c:a0:a0:f9:2d: 21:ad:bd:54:d5:7e:1b:36:e2:ff:94:60:8a:a6:de:7a:f4:6d: 8f:de:a3:ab -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUJeS8xFA5gzPD2j4wDPUWcNJbtxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA3MjMwNjQ1MjZaFw0yNzA3MjIwNjUwMjZaMDMxMTAvBgNV BAMTKDY5ODZEQzgyODEyQzQ3REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3CDzvGGoyJIhyqYsv3eeCm7t 4QpJQTQ7a8x1chPSd7x6iiwiokHr3BjpkKRMnbj9oSA6gFjSc4/ET5B16pv5OHX/ sODbGVsFMuqymoZXTt3PJurNwRLn3CXVhfp/2yIrVvUClnZpIxCla9x2NwFk6dzD JpoyOpv14Qp1UwjT41EwkFTc/X0xWXfiZh+sHfYiOb38Yp9QePeTq6IP/N6xQ+gF NfJf4z+lB39xOJSGe/3ftB+bMgRORnaKsdETjcOLRyUdG32laG7XdIYVxDxHelV+ euCKRCWgoZvudlUBAT5OHYpkeDbPZM8OwOXpQjiSONfiQG973Tfdn9D0uGa1AgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRphtyCgSxH2hSZ S45ucnty4LL42DAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJk ZGVkOGM0LzkvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1lNWMzLTQ4ZjktYjJlZS0zNmE5 YmRkZWQ4YzQvOS82OTg2REM4MjgxMkM0N0RBMTQ5OTRCOEU2RTcyN0I3MkUwQjJG OEQ4Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBARAMGACoKYEDCMA0GCSqG SIb3DQEBCwUAA4IBAQBxtjVFRtzQjojn6fU12Jwl5BzAjFwlWj5mlnDZs0Bx4ZZf FPgAQLyJl8VJPlTFZZJ0Adx890JqHVc7+vh78CG+Z0oJeca9dn2hTtkt6W8zUD+L hOI1pdL0pF3zcMAEhXQYctEH+XnnIP+Uule55SaUSGx13BUV/tgfhNPiJOu0Jqso Scp2GnbQNmMckBB3z0H+y5rPc83MNWVRkSFKOaOBMgTJC7n3SSyI/t1nO9eXf4Lz Xed9XVWfhBZCBaInbJvWv7aayRmqXlFL4v6cbNnt8RYkDRp/BySOP+y+D87kusLf 5ct5nKCg+S0hrb1U1X4bNuL/lGCKpt569G2P3qOr -----END CERTIFICATE-----Generated at Thu Jul 23 22:56:08 2026 by rpki-client