
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
File: BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer (raw, json)
Hash identifier: 5IhwnrTSHX1a6DSUCckekZS5pOxAZ1qCdB6Zvl94Rwk=
Subject key identifier: BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 45E9A0FE0AE4D4237C63A7136ED1C2FCEC4EEA11
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest: rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
caRepository: rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/
Notify URL: https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before: Thu 23 Jul 2026 01:47:41 +0000
Certificate not after: Thu 22 Jul 2027 01:52:41 +0000
Subordinate resources: IP: 2a06:9f80::/29
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e9:a0:fe:0a:e4:d4:23:7c:63:a7:13:6e:d1:c2:fc:ec:4e:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jul 23 01:47:41 2026 GMT
Not After : Jul 22 01:52:41 2027 GMT
Subject: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:53:7e:f7:2b:00:c3:46:48:0f:d5:47:dd:
13:ae:f9:c9:8e:79:a3:ff:51:34:d4:f0:c8:cb:01:
d7:df:d0:04:6d:0c:9f:ba:c9:c0:7a:cb:58:73:44:
f5:9f:37:65:5e:ff:59:1f:d7:1a:71:f1:a2:d9:37:
30:da:0b:bf:10:35:ac:7b:b0:8c:0a:27:7e:06:3f:
06:3b:e2:78:6d:63:4f:55:9e:f4:d6:0d:a3:bb:58:
2c:5a:af:77:54:8f:10:d6:57:9c:a9:b7:c4:5e:29:
11:b4:bc:a4:5d:29:89:11:c2:b1:a2:0d:fb:fe:2e:
9d:b0:14:3a:94:ee:eb:bc:a4:78:cd:e0:6a:1b:fd:
83:31:ee:5a:90:ad:dd:b8:49:7f:f3:14:1f:c5:b0:
25:fa:d4:ab:1f:3c:25:ae:52:bd:8a:ae:61:64:a0:
c9:05:e6:22:01:52:a8:c1:cd:fd:84:ec:18:ec:5f:
44:c1:a4:57:f4:e3:19:d9:02:9d:86:73:71:eb:4a:
66:c3:90:c7:b0:46:b4:a6:ce:5d:cc:00:14:07:b1:
42:b2:76:8c:d8:d8:5a:d4:17:06:40:2a:51:73:d0:
34:ca:bf:e9:6f:27:a7:b6:ad:4a:07:49:94:95:98:
40:47:eb:28:07:11:7f:e0:ec:7f:c8:6c:ed:50:7c:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/
RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
83:ef:e4:93:b9:e3:a9:72:e7:ed:54:f8:d5:da:7f:9f:da:51:
49:69:0b:9d:d7:c8:f8:b9:13:ae:9e:e7:f9:29:d7:2e:d4:41:
a6:a3:7a:ff:bb:e8:07:fb:79:3b:30:ce:d8:fb:ff:41:02:b7:
31:b9:44:10:a4:02:a8:4e:83:a6:0c:b6:bf:ac:dc:3f:7b:4f:
21:5b:8f:55:52:63:02:86:23:96:4d:d5:e9:14:2f:64:87:6f:
8d:39:ef:fb:af:cf:1c:55:7c:c5:73:d7:88:28:66:eb:83:c7:
86:15:35:2b:cc:e0:a5:1b:63:de:dc:2a:61:26:20:52:2b:79:
c2:f4:79:b9:41:95:6e:ab:db:b7:30:2c:5a:0b:c6:80:1c:fb:
f5:14:47:be:67:c7:10:90:af:4b:b1:d9:73:87:0e:89:5a:f4:
2b:0f:ff:28:9e:25:3c:5c:71:75:6d:53:e6:72:a9:20:27:0a:
27:b8:b1:f6:f0:56:36:1b:aa:35:13:9c:cb:44:28:22:45:b7:
8e:3d:41:d3:32:74:87:2b:1c:b4:59:ab:1c:bd:c3:58:69:64:
7a:e2:88:ec:68:3a:ea:fc:59:81:2b:28:e7:b0:3d:1b:91:69:
6d:e1:cd:93:70:d7:af:fa:eb:90:8d:f3:41:74:fa:1c:24:07:
f2:16:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:12 2026 by rpki-client