$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer File: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer (raw, json) Hash identifier: Vkt9bjNmsNQwYmRnlP5zC/UzHK0AgbP2QivTXCUzfXs= Subject key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 508812697818DA0492E4EC517FE73EB1A2392F99 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Jul 2025 19:45:12 +0000 Certificate not after: Fri 03 Jul 2026 19:50:12 +0000 Subordinate resources: IP: 2a05:dfc1:c400::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:88:12:69:78:18:da:04:92:e4:ec:51:7f:e7:3e:b1:a2:39:2f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 19:45:12 2025 GMT Not After : Jul 3 19:50:12 2026 GMT Subject: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:d4:1f:55:a2:57:5a:57:6e:56:8b:e5:c4: b4:0b:21:cd:f6:c2:31:8c:96:ec:ae:30:e6:61:7a: 93:e2:4f:d7:2a:3a:fb:aa:9f:73:6c:04:83:f9:2c: b7:92:75:99:57:e1:70:1f:1e:cc:5c:7a:16:39:13: 65:23:75:6e:e0:60:fd:12:28:e7:c6:b0:01:93:3d: 81:e4:cf:14:3f:c7:4a:3a:48:f6:bb:b8:cf:1f:c3: 7c:9c:dd:81:1a:a7:99:ee:3b:03:ca:db:33:69:41: 9a:f1:fc:71:9d:22:1e:cd:07:1e:6c:1c:67:de:98: 9b:7c:4d:77:1c:b7:2b:b2:e3:06:4e:f5:c8:f6:c9: bb:bf:f2:9e:0b:34:1e:88:ed:40:60:27:e0:2a:0e: 1e:f9:b9:e8:f0:c0:2e:08:c2:11:cc:5b:17:4f:86: 9c:23:71:2a:e8:25:52:64:f9:d2:89:67:71:4c:cf: 57:af:f2:fe:ed:ee:c7:eb:77:29:ec:cf:06:ed:4a: 4e:a6:57:19:00:cb:f8:60:41:f9:bb:27:ea:11:da: 76:de:c1:e8:ea:3d:fe:d5:e7:9f:fa:16:c8:40:6f: c0:00:b1:4a:4c:cc:81:04:42:f6:05:b4:7d:7c:07: 61:a1:9f:3c:92:ba:26:60:95:84:e7:8a:a8:43:5c: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c400::/40 Signature Algorithm: sha256WithRSAEncryption 96:15:61:09:31:11:ea:d9:7b:8d:aa:65:d4:22:17:e7:9a:b0: bd:9e:a7:fe:5f:9e:ef:ea:91:51:66:5c:fa:46:e4:d7:c0:93: c1:ea:b5:97:bd:2f:d8:a9:5c:6e:ba:38:ea:06:b8:5a:e6:e8: be:0a:ad:e1:a4:cd:9f:06:99:ee:fb:9c:0e:14:aa:82:82:41: 74:b0:de:1d:19:4a:74:bb:11:c8:bb:8c:1e:78:ce:9e:a6:2c: 71:3a:ec:8e:be:37:c8:e6:d2:65:76:fa:00:d5:72:65:07:8f: 18:2c:6d:74:11:84:77:7a:f7:15:a8:41:3d:0e:43:f1:5e:f8: 26:94:44:b0:12:2d:bf:58:61:d4:23:99:6c:4a:9d:c7:03:0a: 6a:c2:d9:56:31:e9:d8:8b:54:a8:89:09:4f:1c:80:13:23:e4: 10:2d:6f:42:ca:b2:41:54:f2:fc:65:7a:ac:55:ea:98:5d:e3: 84:86:38:24:af:68:4c:51:6d:55:9b:a6:6b:03:1b:62:14:35: e5:6a:c5:ea:1a:15:94:28:4c:73:ba:18:19:c9:c6:a2:71:7e: d0:79:e6:41:f0:d7:6b:e7:c0:2a:e9:92:91:da:93:55:96:47: 1f:f9:07:3e:7d:62:a6:66:62:bd:a9:41:11:a0:08:f7:c0:b3: 4e:c3:97:3a -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUUIgSaXgY2gSS5OxRf+c+saI5L5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQxOTQ1MTJaFw0yNjA3MDMxOTUwMTJaMDMxMTAvBgNV BAMTKEQ3QUMwQkZCREExNUE3RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKtQfVaJXWlduVovlxLQLIc32 wjGMluyuMOZhepPiT9cqOvuqn3NsBIP5LLeSdZlX4XAfHsxcehY5E2UjdW7gYP0S KOfGsAGTPYHkzxQ/x0o6SPa7uM8fw3yc3YEap5nuOwPK2zNpQZrx/HGdIh7NBx5s HGfemJt8TXcctyuy4wZO9cj2ybu/8p4LNB6I7UBgJ+AqDh75uejwwC4IwhHMWxdP hpwjcSroJVJk+dKJZ3FMz1ev8v7t7sfrdynszwbtSk6mVxkAy/hgQfm7J+oR2nbe wejqPf7V55/6FshAb8AAsUpMzIEEQvYFtH18B2GhnzySuiZglYTniqhDXOHLAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXrAv72hWn8kCh KD9WSRlM6Lu4ATAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQw OTgyMzUyLzQvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8zZGE0ZDhiNC1hMTU3LTQ2MzQtYWIxOC0zZWY5 ZDA5ODIzNTIvNC9EN0FDMEJGQkRBMTVBN0YyNDBBMTI4M0Y1NjQ5MTk0Q0U4QkJC ODAxLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BxDANBgkqhkiG9w0BAQsF AAOCAQEAlhVhCTER6tl7japl1CIX55qwvZ6n/l+e7+qRUWZc+kbk18CTweq1l70v 2Klcbro46ga4Wubovgqt4aTNnwaZ7vucDhSqgoJBdLDeHRlKdLsRyLuMHnjOnqYs cTrsjr43yObSZXb6ANVyZQePGCxtdBGEd3r3FahBPQ5D8V74JpREsBItv1hh1COZ bEqdxwMKasLZVjHp2ItUqIkJTxyAEyPkEC1vQsqyQVTy/GV6rFXqmF3jhIY4JK9o TFFtVZumawMbYhQ15WrF6hoVlChMc7oYGcnGonF+0HnmQfDXa+fAKumSkdqTVZZH H/kHPn1ipmZivalBEaAI98CzTsOXOg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:21:20 2025 by rpki-client