$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer File: 18299A2A773E023437644491950ACF588A4379CF.cer (raw, json) Hash identifier: e193vx9KIm25entj3ijYm8mhr40pDKFv2nHnugT3BbU= Subject key identifier: 18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 67048F04223D003445E9FFCF9E2CBA7B9C143530 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.mft caRepository: rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/ Notify URL: https://rpki-publication.haruue.net/rrdp/notification.xml Certificate not before: Sat 05 Jul 2025 15:03:09 +0000 Certificate not after: Sat 04 Jul 2026 15:08:09 +0000 Subordinate resources: IP: 2a0a:6040:2d00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Oct 2025 21:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:04:8f:04:22:3d:00:34:45:e9:ff:cf:9e:2c:ba:7b:9c:14:35:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 5 15:03:09 2025 GMT Not After : Jul 4 15:08:09 2026 GMT Subject: CN=18299A2A773E023437644491950ACF588A4379CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:75:dd:7e:e3:84:ac:55:d4:ee:32:69:68: 55:ee:13:14:0d:c8:55:b3:85:b9:f5:5b:09:f6:7d: df:49:e8:fb:c0:28:81:d9:50:66:40:03:7a:b0:78: 92:50:cf:e2:7e:04:0d:cb:30:5f:4e:cb:94:ac:4d: 9d:4f:d4:4c:f5:0a:0b:9e:c7:70:80:e6:68:de:4d: 98:cf:6e:9f:27:48:f1:60:34:4e:2c:67:82:c7:e2: b3:7b:d2:a3:59:4f:65:de:95:e5:7c:c7:a9:96:8b: bc:ca:ba:d1:ef:85:bb:c4:d4:ae:1c:f5:7a:ba:95: 8c:16:cc:37:94:78:02:0a:f3:92:06:02:57:ae:9a: ee:56:1c:5c:13:da:62:df:e6:bc:18:7f:89:7a:25: 2b:b4:49:de:df:8e:d0:e3:1a:4b:83:01:83:1d:46: 4c:4f:3c:97:9d:65:46:b5:bb:1b:b8:64:db:29:44: 0b:c7:45:bb:72:9b:66:b3:fe:37:77:72:99:b5:46: 0f:80:ac:75:03:0e:b5:e0:17:df:a3:df:06:74:5a: 0a:67:19:a1:f6:99:6f:b0:38:00:57:f6:b6:0e:7f: 04:6b:5a:8e:dc:2c:23:6a:31:e3:fb:d2:cb:5d:91: 5e:17:d1:4c:e6:44:87:0e:df:d9:f5:7f:57:6b:79: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/ RPKI Manifest - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.mft RPKI Notify - URI:https://rpki-publication.haruue.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2d00::/40 Signature Algorithm: sha256WithRSAEncryption 2c:ff:1c:7d:45:00:dd:26:96:15:3e:86:de:92:7a:a2:60:7b: 77:45:7d:b5:b4:ba:e1:60:d9:58:92:8d:c4:76:2f:e6:6b:aa: 4b:1d:0d:11:4e:62:4f:5c:6a:0f:82:bc:98:4b:d1:99:de:68: dd:31:54:7b:2c:54:b3:6f:8f:83:ed:b4:b4:c6:18:43:31:9e: 67:66:15:c7:27:94:65:ed:1f:7f:f4:ea:45:81:a1:f7:6b:6e: fa:58:52:85:ab:2b:37:59:e3:97:e7:ab:af:c1:bd:99:1e:5f: 15:25:c0:73:4e:2e:3a:ea:71:1e:c8:2c:46:da:5e:ce:90:03: d9:10:64:72:93:c8:bc:d0:d3:cf:8b:ad:1c:95:45:ce:16:04: 67:03:b3:e8:c3:c3:23:a7:19:c2:3e:ae:16:f1:00:8b:4c:93: 56:73:6a:61:0c:e2:1b:7c:56:e8:87:73:89:26:eb:9d:5a:85: 2f:24:fd:b8:f5:41:1f:2e:ab:79:a0:94:6a:d2:7b:37:9b:78: bd:31:c8:61:6c:be:f8:c4:32:2f:7a:cd:90:82:b0:96:b4:95: a7:ad:31:2e:3f:af:85:92:9e:59:56:f4:80:15:db:d9:02:2b: 80:5b:83:ba:7c:68:59:74:be:22:32:0c:76:06:00:b2:9e:fb: 58:33:52:fe -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgIUZwSPBCI9ADRF6f/Pniy6e5wUNTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDUxNTAzMDlaFw0yNjA3MDQxNTA4MDlaMDMxMTAvBgNV BAMTKDE4Mjk5QTJBNzczRTAyMzQzNzY0NDQ5MTk1MEFDRjU4OEE0Mzc5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CHXdfuOErFXU7jJpaFXuExQN yFWzhbn1Wwn2fd9J6PvAKIHZUGZAA3qweJJQz+J+BA3LMF9Oy5SsTZ1P1Ez1Cgue x3CA5mjeTZjPbp8nSPFgNE4sZ4LH4rN70qNZT2XeleV8x6mWi7zKutHvhbvE1K4c 9Xq6lYwWzDeUeAIK85IGAleumu5WHFwT2mLf5rwYf4l6JSu0Sd7fjtDjGkuDAYMd RkxPPJedZUa1uxu4ZNspRAvHRbtym2az/jd3cpm1Rg+ArHUDDrXgF9+j3wZ0Wgpn GaH2mW+wOABX9rYOfwRrWo7cLCNqMeP70stdkV4X0UzmRIcO39n1f1dreVV/AgMB AAGjggK4MIICtDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYKZoqdz4CNDdk RJGVCs9YikN5zzAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAQsGCCsGAQUFBwEL BIH+MIH7MEIGCCsGAQUFBzAFhjZyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5oYXJ1 dWUubmV0L3JlcG8vWUMzMjU0LVJQS0kvMy8wbgYIKwYBBQUHMAqGYnJzeW5jOi8v cnBraS1yZXBvc2l0b3J5LmhhcnV1ZS5uZXQvcmVwby9ZQzMyNTQtUlBLSS8zLzE4 Mjk5QTJBNzczRTAyMzQzNzY0NDQ5MTk1MEFDRjU4OEE0Mzc5Q0YubWZ0MEUGCCsG AQUFBzANhjlodHRwczovL3Jwa2ktcHVibGljYXRpb24uaGFydXVlLm5ldC9ycmRw L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoKYEAtMA0GCSqGSIb3DQEBCwUAA4IB AQAs/xx9RQDdJpYVPobeknqiYHt3RX21tLrhYNlYko3Edi/ma6pLHQ0RTmJPXGoP gryYS9GZ3mjdMVR7LFSzb4+D7bS0xhhDMZ5nZhXHJ5Rl7R9/9OpFgaH3a276WFKF qys3WeOX56uvwb2ZHl8VJcBzTi466nEeyCxG2l7OkAPZEGRyk8i80NPPi60clUXO FgRnA7Pow8MjpxnCPq4W8QCLTJNWc2phDOIbfFboh3OJJuudWoUvJP249UEfLqt5 oJRq0ns3m3i9MchhbL74xDIves2QgrCWtJWnrTEuP6+Fkp5ZVvSAFdvZAiuAW4O6 fGhZdL4iMgx2BgCynvtYM1L+ -----END CERTIFICATE-----Generated at Thu Oct 30 05:24:18 2025 by rpki-client