$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer (raw, json) Hash identifier: 5KJOKB1r9JQe7NWXyckw/+XbcYz/ivLz6cS4nhcfUfs= Subject key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 4275AF43C6C9436C0E199A74406367C596585FB8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Jul 2025 10:42:26 +0000 Certificate not after: Fri 03 Jul 2026 10:47:26 +0000 Subordinate resources: IP: 2a0a:6040:b100::/40 IP: 2a0a:6040:ed00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:75:af:43:c6:c9:43:6c:0e:19:9a:74:40:63:67:c5:96:58:5f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 10:42:26 2025 GMT Not After : Jul 3 10:47:26 2026 GMT Subject: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:4a:e8:a7:8e:87:7a:99:24:e9:3b:e4:ac: 03:e0:87:8b:47:43:f4:29:f8:d0:93:53:d4:bc:e0: 30:52:b1:fc:3f:01:47:46:60:7a:f5:5d:87:3d:b4: 3a:07:d3:73:89:4a:50:cd:1c:c2:91:12:c5:56:1a: 7c:72:52:67:72:d5:eb:a5:a2:31:dc:6b:80:04:7b: 07:0f:62:e9:40:bb:5a:43:c4:f4:5a:30:00:50:91: ed:7d:ba:40:62:38:3e:f6:25:72:27:88:b9:81:fb: ff:0e:8c:01:68:9c:87:e3:eb:0a:ad:16:fd:83:7a: f6:14:f4:ed:5f:b7:6f:85:2c:2a:84:6a:80:87:06: b6:8c:02:9d:06:29:f1:32:1e:e2:77:64:b8:39:1d: da:75:04:76:0c:6e:fc:04:46:6d:d4:97:c1:37:5e: 69:2c:18:0d:02:40:5d:8b:f0:6b:a8:a0:a0:68:b7: 92:86:36:c0:ae:14:b7:eb:3e:80:db:29:4b:9d:a3: 8c:9e:f5:e2:03:15:5f:fa:e1:0d:dd:db:6b:c9:f9: 61:49:33:94:93:57:ab:b6:44:7e:b4:34:65:cb:a3: 6d:4f:fa:ee:4a:57:c5:ff:56:0c:65:f8:50:02:06: 56:d1:91:fe:a2:14:0a:07:34:4c:00:a0:b5:54:3c: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b100::/40 2a0a:6040:ed00::/40 Signature Algorithm: sha256WithRSAEncryption 8f:8d:ba:12:65:90:a8:17:1b:c7:a6:9a:4b:13:f5:c4:ac:99: 5c:45:94:a7:e7:ed:e1:f6:0e:a1:4d:b2:03:a1:f6:ef:56:d6: 23:51:95:b9:1d:2e:cd:f1:c4:91:66:83:b8:eb:14:5b:e2:67: 4d:ee:a4:ea:13:41:d9:fb:68:af:91:d3:7d:06:56:50:0f:ca: 31:11:bd:d9:49:51:3b:73:32:99:ca:21:8f:37:8a:bf:1e:d2: 5e:15:c2:a7:12:16:27:d3:3e:f8:66:63:f7:5d:40:2e:2e:5e: 0e:51:f7:4f:d7:f8:df:45:33:79:88:3e:ee:b9:83:b5:f5:0b: b4:31:42:7a:72:7b:eb:1e:5c:bc:13:43:cb:79:29:74:ad:bc: 1e:a1:dd:11:32:03:75:b6:f4:3f:93:72:f7:15:1e:ed:0c:58: 96:67:8f:10:3a:29:a0:e0:56:e7:62:16:c5:f8:ee:cc:47:43: 02:15:66:4d:df:dc:91:9a:36:eb:2a:09:ba:0c:70:77:6e:a9: cf:8b:7d:3a:e7:fe:d7:22:89:6f:15:b9:ec:74:86:17:1e:69: 31:e2:06:d1:02:ba:42:7a:0b:b1:16:44:41:c9:b3:ff:0e:0a: 3d:e5:24:93:3e:a5:8e:bf:8a:78:a1:4c:67:ff:2d:ff:29:f0: f0:50:81:a9 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUQnWvQ8bJQ2wOGZp0QGNnxZZYX7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQxMDQyMjZaFw0yNjA3MDMxMDQ3MjZaMDMxMTAvBgNV BAMTKDRGREM1NzFBNUNEQTEzOTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCkrop46Hepkk6TvkrAPgh4tH Q/Qp+NCTU9S84DBSsfw/AUdGYHr1XYc9tDoH03OJSlDNHMKREsVWGnxyUmdy1eul ojHca4AEewcPYulAu1pDxPRaMABQke19ukBiOD72JXIniLmB+/8OjAFonIfj6wqt Fv2DevYU9O1ft2+FLCqEaoCHBraMAp0GKfEyHuJ3ZLg5Hdp1BHYMbvwERm3Ul8E3 XmksGA0CQF2L8GuooKBot5KGNsCuFLfrPoDbKUudo4ye9eIDFV/64Q3d22vJ+WFJ M5STV6u2RH60NGXLo21P+u5KV8X/Vgxl+FACBlbRkf6iFAoHNEwAoLVUPE1ZAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRP3FcaXNoTlYvO R18OXZEB24EgVzAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQw MTk1Y2U3LzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0zNGNjLTQ3NzItYmFjMC1hMzVk ZDAxOTVjZTcvMy80RkRDNTcxQTVDREExMzk1OEJDRTQ3NUYwRTVEOTEwMURCODEy MDU3Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAsQMGACoKYEDtMA0GCSqG SIb3DQEBCwUAA4IBAQCPjboSZZCoFxvHpppLE/XErJlcRZSn5+3h9g6hTbIDofbv VtYjUZW5HS7N8cSRZoO46xRb4mdN7qTqE0HZ+2ivkdN9BlZQD8oxEb3ZSVE7czKZ yiGPN4q/HtJeFcKnEhYn0z74ZmP3XUAuLl4OUfdP1/jfRTN5iD7uuYO19Qu0MUJ6 cnvrHly8E0PLeSl0rbweod0RMgN1tvQ/k3L3FR7tDFiWZ48QOimg4FbnYhbF+O7M R0MCFWZN39yRmjbrKgm6DHB3bqnPi3065/7XIolvFbnsdIYXHmkx4gbRArpCegux FkRBybP/Dgo95SSTPqWOv4p4oUxn/y3/KfDwUIGp -----END CERTIFICATE-----Generated at Sat Jul 5 04:32:53 2025 by rpki-client