$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer (raw, json) Hash identifier: qyLWkDWfNKOI4m1+n+R4aTs+l4K+FVv2Pm70+KUe6cg= Subject key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 471608B52508DB8A60C698C4051C9EFB5D0438A4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 05 Jul 2025 08:05:54 +0000 Certificate not after: Sat 04 Jul 2026 08:10:54 +0000 Subordinate resources: IP: 2a0a:6040:1100::/40 IP: 2a0a:6040:3f00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:16:08:b5:25:08:db:8a:60:c6:98:c4:05:1c:9e:fb:5d:04:38:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 5 08:05:54 2025 GMT Not After : Jul 4 08:10:54 2026 GMT Subject: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:eb:7b:94:5a:c7:3f:62:be:97:83:29:24:5a: 72:3b:82:9d:7a:5a:ca:be:00:e9:d8:0b:ed:0c:1a: d6:4d:a0:4c:fe:3c:a3:ca:2f:40:f4:a5:ef:68:bd: 86:ea:20:17:02:04:18:5e:6b:f8:76:c4:24:9a:32: e6:8d:87:05:80:2b:f2:9c:68:10:9c:08:7f:d2:1e: 3c:5f:44:a1:27:1a:19:3c:24:48:de:67:c2:d5:ee: f2:2d:7c:34:dc:fc:88:01:f4:77:f8:8f:22:37:7e: 11:31:4e:2d:97:f0:07:56:14:cf:72:03:da:f5:73: 20:b4:5e:de:b6:35:79:1e:9a:c5:bd:bd:5f:4a:0e: be:3e:f1:60:87:47:6b:ca:bd:fb:1d:9a:19:4d:22: d9:22:79:20:14:8e:ed:d6:55:52:41:4a:f0:72:2a: f2:90:e3:3f:fd:73:68:93:1b:4f:d2:ba:03:a6:e0: 14:b9:da:ff:b5:ea:2c:f2:8a:18:4b:14:59:19:26: ef:ae:16:60:00:f1:e6:95:61:33:36:47:b9:24:34: 24:fc:b8:2d:6f:77:48:4d:48:93:f3:3c:3d:18:43: aa:f2:82:a1:68:09:ec:ec:53:1b:4e:3c:d8:d6:0a: 5d:5a:1a:7c:b1:f0:28:45:7c:33:00:59:a6:aa:70: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1100::/40 2a0a:6040:3f00::/40 Signature Algorithm: sha256WithRSAEncryption 6e:40:dd:d7:a7:30:4a:6a:4d:44:f7:ea:64:c2:55:6f:d9:bc: e4:e0:b0:88:17:c0:7c:87:ea:07:a5:1b:66:da:cb:68:90:83: 4b:ea:d1:00:c0:bc:84:78:29:fb:d5:9b:c8:75:d0:f4:d2:ad: 62:8e:8f:c8:99:09:1b:5d:76:ec:a7:38:71:8a:96:3c:64:dc: 2d:ca:5c:64:a3:fb:79:9a:e1:c4:54:8b:e8:51:f2:0b:0f:aa: 72:9b:ce:76:ec:c4:4b:02:c1:55:1b:54:db:c7:f8:73:d9:21: 04:ef:c4:d2:6e:97:af:b5:b7:30:22:0a:ea:13:8c:bd:11:76: 15:13:2d:46:1b:3e:11:ef:08:ac:ca:3d:30:ed:21:c5:06:e2: e8:89:1b:70:7f:e5:41:29:59:61:cf:37:0a:c3:73:63:fc:5c: 2c:80:bd:a5:dc:81:e9:ec:01:91:f2:60:80:25:98:05:13:2e: 56:3e:4a:0b:b8:2f:bf:f5:e7:c6:d0:66:48:7f:cb:d6:08:d6: e9:32:ea:9b:35:10:54:87:fc:05:df:64:b1:ca:68:08:75:dd: 75:87:86:7a:ee:83:75:47:2b:ca:3c:d6:76:aa:f2:ba:fb:6c: 68:46:3c:a2:6d:7c:c7:e5:bb:68:1e:9a:25:60:d3:79:71:88: 57:0b:ac:5b -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIURxYItSUI24pgxpjEBRye+10EOKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDUwODA1NTRaFw0yNjA3MDQwODEwNTRaMDMxMTAvBgNV BAMTKDZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn63uUWsc/Yr6XgykkWnI7gp16 Wsq+AOnYC+0MGtZNoEz+PKPKL0D0pe9ovYbqIBcCBBhea/h2xCSaMuaNhwWAK/Kc aBCcCH/SHjxfRKEnGhk8JEjeZ8LV7vItfDTc/IgB9Hf4jyI3fhExTi2X8AdWFM9y A9r1cyC0Xt62NXkemsW9vV9KDr4+8WCHR2vKvfsdmhlNItkieSAUju3WVVJBSvBy KvKQ4z/9c2iTG0/SugOm4BS52v+16izyihhLFFkZJu+uFmAA8eaVYTM2R7kkNCT8 uC1vd0hNSJPzPD0YQ6rygqFoCezsUxtOPNjWCl1aGnyx8ChFfDMAWaaqcM2FAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRu+N+LdMXYu2c3 7ELOAyq0sD4MUTAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAUIGCCsGAQUFBwEL BIIBNDCCATAwYAYIKwYBBQUHMAWGVHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFm ZDJiZTRlLzEwLzCBjQYIKwYBBQUHMAqGgYByc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5 Y2QxZmQyYmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIw M0UwQzUxLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5y aXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAEQMGACoKYEA/MA0G CSqGSIb3DQEBCwUAA4IBAQBuQN3XpzBKak1E9+pkwlVv2bzk4LCIF8B8h+oHpRtm 2stokINL6tEAwLyEeCn71ZvIddD00q1ijo/ImQkbXXbspzhxipY8ZNwtylxko/t5 muHEVIvoUfILD6pym8527MRLAsFVG1Tbx/hz2SEE78TSbpevtbcwIgrqE4y9EXYV Ey1GGz4R7wisyj0w7SHFBuLoiRtwf+VBKVlhzzcKw3Nj/FwsgL2l3IHp7AGR8mCA JZgFEy5WPkoLuC+/9efG0GZIf8vWCNbpMuqbNRBUh/wF32SxymgIdd11h4Z67oN1 RyvKPNZ2qvK6+2xoRjyibXzH5btoHpolYNN5cYhXC6xb -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:26 2025 by rpki-client