
$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
File: BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer (raw, json)
Hash identifier: triBL+Y3jX/zu52CuEsPy3+21mhJyI+gWvGnb5AvF4c=
Subject key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 3D810AAD84B712518D98137C90B8E79A69ADDF83
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest: rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
caRepository: rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/
Notify URL: https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before: Thu 24 Sep 2026 01:26:34 +0000
Certificate not after: Thu 23 Sep 2027 01:31:34 +0000
Subordinate resources: IP: 2a06:9f80::/29
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:81:0a:ad:84:b7:12:51:8d:98:13:7c:90:b8:e7:9a:69:ad:df:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Sep 24 01:26:34 2026 GMT
Not After : Sep 23 01:31:34 2027 GMT
Subject: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:53:7e:f7:2b:00:c3:46:48:0f:d5:47:dd:
13:ae:f9:c9:8e:79:a3:ff:51:34:d4:f0:c8:cb:01:
d7:df:d0:04:6d:0c:9f:ba:c9:c0:7a:cb:58:73:44:
f5:9f:37:65:5e:ff:59:1f:d7:1a:71:f1:a2:d9:37:
30:da:0b:bf:10:35:ac:7b:b0:8c:0a:27:7e:06:3f:
06:3b:e2:78:6d:63:4f:55:9e:f4:d6:0d:a3:bb:58:
2c:5a:af:77:54:8f:10:d6:57:9c:a9:b7:c4:5e:29:
11:b4:bc:a4:5d:29:89:11:c2:b1:a2:0d:fb:fe:2e:
9d:b0:14:3a:94:ee:eb:bc:a4:78:cd:e0:6a:1b:fd:
83:31:ee:5a:90:ad:dd:b8:49:7f:f3:14:1f:c5:b0:
25:fa:d4:ab:1f:3c:25:ae:52:bd:8a:ae:61:64:a0:
c9:05:e6:22:01:52:a8:c1:cd:fd:84:ec:18:ec:5f:
44:c1:a4:57:f4:e3:19:d9:02:9d:86:73:71:eb:4a:
66:c3:90:c7:b0:46:b4:a6:ce:5d:cc:00:14:07:b1:
42:b2:76:8c:d8:d8:5a:d4:17:06:40:2a:51:73:d0:
34:ca:bf:e9:6f:27:a7:b6:ad:4a:07:49:94:95:98:
40:47:eb:28:07:11:7f:e0:ec:7f:c8:6c:ed:50:7c:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/
RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
e0:79:7e:c0:e5:84:3a:6e:40:09:ee:45:83:20:17:61:a5:a1:
a1:09:e2:1d:c0:91:02:24:f0:4c:84:b2:2f:c9:e0:0e:ac:a2:
81:dc:14:f3:43:aa:d7:58:9b:72:e3:be:95:51:92:0f:ec:4a:
29:b3:0c:d4:76:97:d0:72:47:c6:26:3f:34:17:2b:4e:88:67:
26:85:7f:ed:6e:ef:90:ca:7c:5f:e1:fc:94:48:75:ce:b0:db:
8c:a8:7a:f5:08:c4:60:e2:95:a0:52:0d:c9:b1:e3:92:5a:7c:
3f:d5:0b:87:71:f8:79:0f:b0:c4:28:2b:47:55:76:7a:fe:1d:
77:a4:4e:27:df:0c:d4:88:a0:ea:bb:05:51:dc:c9:70:a7:58:
cb:19:c0:72:2d:fc:1a:82:5c:6d:c9:0d:e9:f2:7d:c4:c2:37:
e6:78:9a:3d:35:c7:df:29:88:d6:e4:8b:73:04:3d:e5:ea:da:
63:66:28:1c:ba:0e:6b:7c:1d:d5:8d:14:c8:70:63:5f:08:de:
be:98:5e:50:f5:4d:4d:fd:37:4f:7e:12:34:3d:f6:cf:8b:66:
8f:cc:f7:fe:1b:08:ed:c2:62:ea:b8:73:04:b8:9b:92:98:6d:
27:be:c2:e9:ca:05:53:21:86:94:62:1b:b6:dd:35:65:17:78:
0f:61:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:53:50 2026 by rpki-client