$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/651F86B15DB37EC0723BCA740DA4777ECC562F69.cer File: 651F86B15DB37EC0723BCA740DA4777ECC562F69.cer (raw, json) Hash identifier: WDO5bj9rxc3bUidfCI7Q5l3SIpC6iJ4FvvO7hmMuYn0= Subject key identifier: 65:1F:86:B1:5D:B3:7E:C0:72:3B:CA:74:0D:A4:77:7E:CC:56:2F:69 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 45AAAD664D0B729AAC03BD40E84D83ECDC42E262 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://krill.stonham.info/repo/Stonham/3/651F86B15DB37EC0723BCA740DA4777ECC562F69.mft caRepository: rsync://krill.stonham.info/repo/Stonham/3/ Notify URL: https://krill.stonham.uk/rrdp/notification.xml Certificate not before: Fri 25 Sep 2026 13:19:14 +0000 Certificate not after: Fri 24 Sep 2027 13:24:14 +0000 Subordinate resources: IP: 2a05:dfc1:8900::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:aa:ad:66:4d:0b:72:9a:ac:03:bd:40:e8:4d:83:ec:dc:42:e2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Sep 25 13:19:14 2026 GMT Not After : Sep 24 13:24:14 2027 GMT Subject: CN=651F86B15DB37EC0723BCA740DA4777ECC562F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:4b:b2:f0:3e:7f:ff:ba:27:cf:e5:cf:33: 23:bd:0f:a9:24:eb:ce:e1:4e:ce:1c:52:29:e6:ba: 38:d5:09:83:88:b3:19:6b:51:71:4a:f4:43:d4:89: 06:da:48:c8:fe:2b:46:e7:e7:54:a0:5b:8c:94:e7: dd:59:32:e9:34:e5:33:6e:d9:cd:da:df:f6:0f:be: 13:38:13:3a:6a:46:a4:e9:60:9c:1c:c9:a7:2b:dd: 62:0d:b2:24:ec:78:85:53:1c:49:75:dc:07:c5:a5: 8e:fa:27:ce:38:80:b4:9b:4b:34:a3:71:d4:cf:36: e6:17:96:0d:4f:15:9f:ef:f0:7a:eb:03:c2:26:61: 38:e4:2b:ce:15:d6:c2:bc:cd:c9:d2:2f:87:c0:f8: 7c:53:71:4d:96:0b:d4:65:ce:df:64:be:6a:6d:c8: 5a:70:0a:30:57:88:5f:88:9b:96:42:46:56:aa:29: 54:af:f1:b9:35:80:d2:5d:4a:d7:68:c4:c5:a9:5f: fe:8b:85:22:a1:01:43:0d:72:07:5d:55:84:d5:10: b2:3e:3e:04:b9:0c:07:1c:fc:a2:e6:01:8f:f1:d7: de:c6:51:47:1e:61:2c:49:82:6b:84:e7:81:8b:fc: e4:b3:ae:dc:44:72:a9:7f:3f:09:d6:06:7d:13:8d: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:1F:86:B1:5D:B3:7E:C0:72:3B:CA:74:0D:A4:77:7E:CC:56:2F:69 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://krill.stonham.info/repo/Stonham/3/ RPKI Manifest - URI:rsync://krill.stonham.info/repo/Stonham/3/651F86B15DB37EC0723BCA740DA4777ECC562F69.mft RPKI Notify - URI:https://krill.stonham.uk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8900::/40 Signature Algorithm: sha256WithRSAEncryption 93:89:bc:e9:ec:c9:27:cb:20:84:5e:c8:c5:71:5f:02:6e:d6: ce:05:a3:59:c1:af:39:e7:fe:93:03:3b:e4:62:e8:a6:29:b1: f1:1b:3c:e6:03:6b:38:26:65:99:9f:e1:97:31:8b:5a:39:2b: 9b:19:34:1f:57:59:40:86:ff:d1:6c:02:a8:7f:d3:a1:f6:0c: 60:e9:f3:e2:9d:64:5e:72:e7:39:15:94:66:cc:4d:63:83:fc: 9e:49:26:6a:68:05:86:06:20:0f:e8:29:b6:0e:ac:9e:60:76: e0:5d:cf:02:17:a9:fe:5b:2f:2f:66:13:8a:48:b0:da:85:be: a9:fa:7c:8e:5e:8b:86:a2:d5:bc:0b:88:f2:e7:ef:e4:57:e4: 6b:6b:a3:df:96:6d:92:e5:09:c5:4e:e6:3e:43:f9:d4:39:f8: b9:e0:5f:77:e2:60:8d:f1:2f:46:1b:67:d1:54:d2:61:02:a1: 6e:37:76:03:13:18:3d:67:73:08:39:1f:96:6f:70:c1:ae:2b: 02:9b:09:01:93:0a:cb:b0:c0:62:a3:d2:0d:7d:e3:40:cb:8a: 71:47:5a:be:72:f1:66:73:88:3c:8c:b2:47:fa:32:28:7c:d2: eb:05:cd:6f:1d:24:7f:4e:ec:0c:e1:6d:8c:62:b1:cb:63:b1: 0c:9d:9d:35 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIURaqtZk0LcpqsA71A6E2D7NxC4mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA5MjUxMzE5MTRaFw0yNzA5MjQxMzI0MTRaMDMxMTAvBgNV BAMTKDY1MUY4NkIxNURCMzdFQzA3MjNCQ0E3NDBEQTQ3NzdFQ0M1NjJGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqUuy8D5//7onz+XPMyO9D6kk 687hTs4cUinmujjVCYOIsxlrUXFK9EPUiQbaSMj+K0bn51SgW4yU591ZMuk05TNu 2c3a3/YPvhM4EzpqRqTpYJwcyacr3WINsiTseIVTHEl13AfFpY76J844gLSbSzSj cdTPNuYXlg1PFZ/v8HrrA8ImYTjkK84V1sK8zcnSL4fA+HxTcU2WC9Rlzt9kvmpt yFpwCjBXiF+Im5ZCRlaqKVSv8bk1gNJdStdoxMWpX/6LhSKhAUMNcgddVYTVELI+ PgS5DAcc/KLmAY/x197GUUceYSxJgmuE54GL/OSzrtxEcql/PwnWBn0TjU5LAgMB AAGjggKUMIICkDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlH4axXbN+wHI7 ynQNpHd+zFYvaTAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCB6AYIKwYBBQUHAQsE gdswgdgwNgYIKwYBBQUHMAWGKnJzeW5jOi8va3JpbGwuc3RvbmhhbS5pbmZvL3Jl cG8vU3RvbmhhbS8zLzBiBggrBgEFBQcwCoZWcnN5bmM6Ly9rcmlsbC5zdG9uaGFt LmluZm8vcmVwby9TdG9uaGFtLzMvNjUxRjg2QjE1REIzN0VDMDcyM0JDQTc0MERB NDc3N0VDQzU2MkY2OS5tZnQwOgYIKwYBBQUHMA2GLmh0dHBzOi8va3JpbGwuc3Rv bmhhbS51ay9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF38GJMA0GCSqG SIb3DQEBCwUAA4IBAQCTibzp7MknyyCEXsjFcV8CbtbOBaNZwa855/6TAzvkYuim KbHxGzzmA2s4JmWZn+GXMYtaOSubGTQfV1lAhv/RbAKof9Oh9gxg6fPinWRecuc5 FZRmzE1jg/yeSSZqaAWGBiAP6Cm2DqyeYHbgXc8CF6n+Wy8vZhOKSLDahb6p+nyO XouGotW8C4jy5+/kV+Rra6Pflm2S5QnFTuY+Q/nUOfi54F934mCN8S9GG2fRVNJh AqFuN3YDExg9Z3MIOR+Wb3DBrisCmwkBkwrLsMBio9INfeNAy4pxR1q+cvFmc4g8 jLJH+jIofNLrBc1vHSR/TuwM4W2MYrHLY7EMnZ01 -----END CERTIFICATE-----Generated at Sun Oct 11 22:47:22 2026 by rpki-client