$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer File: 0F728B914670434DCF5633E81E2B8721DF75CEB8.cer (raw, json) Hash identifier: 8iUNtOI0PM7lOiflJQBOJVfYF6i30GWEmPzUy7UZN14= Subject key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 69CF9F2051D22E557CB46D5714DF6CC7FB819A0A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 05 Jul 2025 09:27:30 +0000 Certificate not after: Sat 04 Jul 2026 09:32:30 +0000 Subordinate resources: IP: 2a0a:6040:ba00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 07:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cf:9f:20:51:d2:2e:55:7c:b4:6d:57:14:df:6c:c7:fb:81:9a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 5 09:27:30 2025 GMT Not After : Jul 4 09:32:30 2026 GMT Subject: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:05:02:8d:a3:34:64:fc:3d:f4:dc:71:71: cf:8b:3c:ec:d0:fd:7a:27:3e:d7:89:49:ab:e0:70: c2:8b:77:56:67:e5:fd:ea:94:19:fa:7d:21:4f:b6: 35:fd:51:0e:6e:01:d5:b2:c3:9a:3b:18:12:7b:1b: 46:c2:5f:67:7b:13:55:e4:e5:a9:b4:98:98:4f:ee: 15:f9:ed:3a:58:9e:74:73:08:96:44:96:98:9b:2e: 80:19:b1:8b:6d:c7:d0:95:83:61:2c:d2:e1:a6:79: eb:00:8e:85:bd:9c:97:22:ac:ca:98:e7:13:1a:ac: 6d:05:cd:24:1e:cf:f7:a5:1f:4a:eb:39:b1:ee:c0: f3:5e:15:70:5f:2f:8c:31:c2:f8:20:7c:ed:6c:d7: b1:7f:97:76:30:aa:80:5c:17:c4:c1:5f:5f:9b:e1: 30:ce:8f:2b:17:f7:5c:b3:fd:44:cb:b9:07:ff:9d: ad:97:43:a2:6b:2c:f7:19:09:94:4c:40:82:c4:33: 3a:16:b7:2d:99:c1:d0:a6:56:d9:79:4c:b3:a8:b1: e8:bc:a9:e2:ad:7f:0d:25:1a:ac:3b:e2:08:a1:10: 0a:51:4e:07:c2:fd:6f:0f:32:95:0c:89:8a:2d:0c: dc:8b:aa:f0:a9:3c:c5:ad:82:fa:c0:63:8b:a3:9d: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ba00::/40 Signature Algorithm: sha256WithRSAEncryption dd:1f:d5:b9:4b:58:1d:e5:8b:3b:86:7d:71:c7:2c:32:b5:7c: ed:d1:78:ee:8d:27:a2:cb:ed:90:6f:22:35:e5:98:d6:59:8f: df:01:78:0d:54:9c:34:f2:6f:d4:5d:50:28:6c:27:1f:d9:7c: 37:7b:2e:84:5f:0f:ed:49:9a:2f:3c:40:21:1b:21:41:6e:d6: c9:64:13:e0:d5:7d:19:07:e5:56:02:f9:7f:5c:a2:40:4a:c0: 44:63:7e:40:0f:7e:af:a1:80:62:fb:c3:c4:1b:55:9b:7a:af: ca:3c:84:97:82:93:83:41:44:3e:5a:5f:8e:7b:8f:9c:ac:36: 40:11:f0:6d:62:8a:6b:43:8a:30:18:51:8f:02:40:f0:5c:3a: 2f:58:38:c8:2d:8e:ca:f0:d8:ee:3b:2e:ff:1b:21:ea:cc:f7: 6c:d6:3d:72:9d:de:38:5a:f3:5d:3f:2d:f6:fa:a7:17:3b:78: a0:07:61:2b:6f:d7:74:28:42:86:1e:48:88:ad:65:67:14:db: eb:a6:2d:5c:16:d8:99:51:4d:77:0d:07:10:a8:d6:11:17:d2: ed:2f:74:56:ad:42:40:de:fb:15:5e:36:1a:2c:83:3b:fc:0f: c3:e5:c3:9e:c3:b9:75:0b:2b:9d:10:21:32:bb:cf:2b:39:15: aa:44:9b:a6 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUac+fIFHSLlV8tG1XFN9sx/uBmgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDUwOTI3MzBaFw0yNjA3MDQwOTMyMzBaMDMxMTAvBgNV BAMTKDBGNzI4QjkxNDY3MDQzNERDRjU2MzNFODFFMkI4NzIxREY3NUNFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vAUCjaM0ZPw99Nxxcc+LPOzQ /XonPteJSavgcMKLd1Zn5f3qlBn6fSFPtjX9UQ5uAdWyw5o7GBJ7G0bCX2d7E1Xk 5am0mJhP7hX57TpYnnRzCJZElpibLoAZsYttx9CVg2Es0uGmeesAjoW9nJcirMqY 5xMarG0FzSQez/elH0rrObHuwPNeFXBfL4wxwvggfO1s17F/l3YwqoBcF8TBX1+b 4TDOjysX91yz/UTLuQf/na2XQ6JrLPcZCZRMQILEMzoWty2ZwdCmVtl5TLOosei8 qeKtfw0lGqw74gihEApRTgfC/W8PMpUMiYotDNyLqvCpPMWtgvrAY4ujnQVfAgMB AAGjggLvMIIC6zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPcouRRnBDTc9W M+geK4ch33XOuDAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAUIGCCsGAQUFBwEL BIIBNDCCATAwYAYIKwYBBQUHMAWGVHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4 Y2Y1MGU4LzExLzCBjQYIKwYBBQUHMAqGgYByc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0 MjgxOGNmNTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURG NzVDRUI4Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5y aXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAujANBgkqhkiG9w0B AQsFAAOCAQEA3R/VuUtYHeWLO4Z9cccsMrV87dF47o0nosvtkG8iNeWY1lmP3wF4 DVScNPJv1F1QKGwnH9l8N3suhF8P7UmaLzxAIRshQW7WyWQT4NV9GQflVgL5f1yi QErARGN+QA9+r6GAYvvDxBtVm3qvyjyEl4KTg0FEPlpfjnuPnKw2QBHwbWKKa0OK MBhRjwJA8Fw6L1g4yC2OyvDY7jsu/xsh6sz3bNY9cp3eOFrzXT8t9vqnFzt4oAdh K2/XdChChh5IiK1lZxTb66YtXBbYmVFNdw0HEKjWERfS7S90Vq1CQN77FV42GiyD O/wPw+XDnsO5dQsrnRAhMrvPKzkVqkSbpg== -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:11 2025 by rpki-client