$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer (raw, json) Hash identifier: 3lLdS93xTwHACpDSfHZmfRqCJZmtUdK/Sm5og5ORXww= Subject key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 148FC7E490E266588F6A13DD8290B1A37C10691A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 23 Jul 2026 05:37:11 +0000 Certificate not after: Thu 22 Jul 2027 05:42:11 +0000 Subordinate resources: IP: 2a0a:6040:1300::/40 IP: 2a0a:6040:9f00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8f:c7:e4:90:e2:66:58:8f:6a:13:dd:82:90:b1:a3:7c:10:69:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 23 05:37:11 2026 GMT Not After : Jul 22 05:42:11 2027 GMT Subject: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:bd:8d:56:30:85:cc:5e:75:9f:ae:74:20: 14:93:77:e2:25:75:ff:a2:4a:1c:4d:f1:d7:86:9c: a2:c7:e9:e5:53:a2:cc:b0:0e:ca:92:88:88:f7:e7: 33:b4:3d:98:7d:7b:fb:6a:23:8d:fe:04:23:d3:9e: 51:8b:13:06:6e:b3:e7:16:46:c4:b2:25:c5:c0:51: f7:4f:b0:0c:0b:af:19:d0:18:7b:ac:9a:3c:52:f7: 47:e6:51:0e:4e:5f:0e:f4:ec:70:bc:fb:b2:28:3f: 9d:90:8b:18:eb:ef:06:9a:55:f9:e4:4e:fc:53:db: 04:03:db:31:9f:d5:64:5c:2f:67:b9:18:79:63:bf: 9e:8b:19:5f:37:0d:e2:56:f9:07:5b:f7:18:f4:80: 2d:f8:39:42:eb:32:f8:57:27:71:ad:4b:71:aa:d7: e2:b1:00:27:e4:f1:1b:e6:17:88:51:7f:34:56:30: c0:26:b8:5a:77:3f:27:f7:6e:ef:86:96:73:b7:6c: 6b:8f:0a:43:a2:35:41:1a:ff:12:a9:38:26:6f:46: 82:6e:5b:55:a0:65:1d:3f:65:81:8c:92:be:f9:cf: 4a:c6:23:36:50:c4:eb:8c:94:8c:51:09:b9:85:f2: 7a:38:67:ce:b4:10:9e:a1:36:92:89:a6:d6:48:60: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1300::/40 2a0a:6040:9f00::/40 Signature Algorithm: sha256WithRSAEncryption d1:85:20:9e:e3:9a:8b:99:a5:47:e8:0a:7d:80:77:d1:29:6b: 5b:c4:00:21:e3:30:17:7b:05:9f:ef:0c:d9:f2:ce:66:fd:d8: c5:7d:db:53:3c:14:e4:3f:9b:d6:6a:1b:b6:2c:f9:72:27:e4: ad:8e:f4:5b:85:f2:99:42:22:42:66:ee:71:9c:57:85:aa:c4: 15:e6:e4:1b:37:d0:de:ea:b7:ee:dd:98:2e:56:8a:d3:cd:39: 30:f8:15:e7:3b:59:38:8f:05:61:2a:2f:c7:ca:65:e4:12:1a: a8:7c:61:c9:a7:a5:37:27:fa:73:1b:09:b5:9a:81:dc:ef:ea: 8a:97:54:a0:5a:04:f2:0e:3b:50:ab:d3:88:2f:ee:3b:e1:47: 52:27:94:1b:8e:e5:c0:73:c1:b6:74:c1:3f:e2:4f:29:89:40: 41:9a:35:a4:58:08:84:10:f0:8b:b7:3e:4d:70:f2:0f:ce:ae: bf:2a:ae:24:f2:6c:e4:f6:e2:b1:97:06:33:91:5c:ee:45:c3: 85:dc:33:4b:36:de:30:9c:c0:c2:ee:67:3d:be:81:82:1e:c2: bd:75:ab:8f:5c:de:50:e9:d7:c6:12:65:ea:1d:c5:5d:60:34: 9a:80:66:64:13:ed:a3:8a:6a:71:cf:b5:d5:01:91:ae:3d:6f: 20:ff:e3:62 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUFI/H5JDiZliPahPdgpCxo3wQaRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA3MjMwNTM3MTFaFw0yNzA3MjIwNTQyMTFaMDMxMTAvBgNV BAMTKEIyMTcyODRFQTNENTM4NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpL2NVjCFzF51n650IBSTd+Il df+iShxN8deGnKLH6eVTosywDsqSiIj35zO0PZh9e/tqI43+BCPTnlGLEwZus+cW RsSyJcXAUfdPsAwLrxnQGHusmjxS90fmUQ5OXw707HC8+7IoP52Qixjr7waaVfnk TvxT2wQD2zGf1WRcL2e5GHljv56LGV83DeJW+Qdb9xj0gC34OULrMvhXJ3GtS3Gq 1+KxACfk8RvmF4hRfzRWMMAmuFp3Pyf3bu+GlnO3bGuPCkOiNUEa/xKpOCZvRoJu W1WgZR0/ZYGMkr75z0rGIzZQxOuMlIxRCbmF8no4Z860EJ6hNpKJptZIYAbbAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSyFyhOo9U4RLKv UnCruqMQW4s/RTAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYz M2NhZTNmLzUvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRkYjUtYmJkMy01Y2Nh NjMzY2FlM2YvNS9CMjE3Mjg0RUEzRDUzODQ0QjJBRjUyNzBBQkJBQTMxMDVCOEIz RjQ1Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAEwMGACoKYECfMA0GCSqG SIb3DQEBCwUAA4IBAQDRhSCe45qLmaVH6Ap9gHfRKWtbxAAh4zAXewWf7wzZ8s5m /djFfdtTPBTkP5vWahu2LPlyJ+StjvRbhfKZQiJCZu5xnFeFqsQV5uQbN9De6rfu 3ZguVorTzTkw+BXnO1k4jwVhKi/HymXkEhqofGHJp6U3J/pzGwm1moHc7+qKl1Sg WgTyDjtQq9OIL+474UdSJ5QbjuXAc8G2dME/4k8piUBBmjWkWAiEEPCLtz5NcPIP zq6/Kq4k8mzk9uKxlwYzkVzuRcOF3DNLNt4wnMDC7mc9voGCHsK9dauPXN5Q6dfG EmXqHcVdYDSagGZkE+2jimpxz7XVAZGuPW8g/+Ni -----END CERTIFICATE-----Generated at Fri Jul 24 01:31:12 2026 by rpki-client