$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer (raw, json) Hash identifier: oaHev+ew9WqR8anZ1Y9Z/frA+J4V2bTuX/TgkmqBzPg= Subject key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6FAE12F2DAE3DBB3E75B5C7DEC4BCB1CF73F0FA6 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 10 Oct 2026 10:11:45 +0000 Certificate not after: Sat 09 Oct 2027 10:16:45 +0000 Subordinate resources: IP: 2a0a:6040:4400::/40 IP: 2a0a:6040:c200::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 03:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ae:12:f2:da:e3:db:b3:e7:5b:5c:7d:ec:4b:cb:1c:f7:3f:0f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Oct 10 10:11:45 2026 GMT Not After : Oct 9 10:16:45 2027 GMT Subject: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:20:f3:bc:61:a8:c8:92:21:ca:a6:2c:bf: 77:9e:0a:6e:ed:e1:0a:49:41:34:3b:6b:cc:75:72: 13:d2:77:bc:7a:8a:2c:22:a2:41:eb:dc:18:e9:90: a4:4c:9d:b8:fd:a1:20:3a:80:58:d2:73:8f:c4:4f: 90:75:ea:9b:f9:38:75:ff:b0:e0:db:19:5b:05:32: ea:b2:9a:86:57:4e:dd:cf:26:ea:cd:c1:12:e7:dc: 25:d5:85:fa:7f:db:22:2b:56:f5:02:96:76:69:23: 10:a5:6b:dc:76:37:01:64:e9:dc:c3:26:9a:32:3a: 9b:f5:e1:0a:75:53:08:d3:e3:51:30:90:54:dc:fd: 7d:31:59:77:e2:66:1f:ac:1d:f6:22:39:bd:fc:62: 9f:50:78:f7:93:ab:a2:0f:fc:de:b1:43:e8:05:35: f2:5f:e3:3f:a5:07:7f:71:38:94:86:7b:fd:df:b4: 1f:9b:32:04:4e:46:76:8a:b1:d1:13:8d:c3:8b:47: 25:1d:1b:7d:a5:68:6e:d7:74:86:15:c4:3c:47:7a: 55:7e:7a:e0:8a:44:25:a0:a1:9b:ee:76:55:01:01: 3e:4e:1d:8a:64:78:36:cf:64:cf:0e:c0:e5:e9:42: 38:92:38:d7:e2:40:6f:7b:dd:37:dd:9f:d0:f4:b8: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4400::/40 2a0a:6040:c200::/40 Signature Algorithm: sha256WithRSAEncryption cc:e8:fe:f0:36:64:5f:db:69:f7:56:30:c3:c8:b3:a5:1a:8d: 40:43:41:bd:02:cb:c6:ac:6e:9a:35:86:a0:1d:4e:a7:75:85: 16:fb:cd:31:89:b4:f0:46:84:26:b7:cf:e6:0d:40:a6:f4:b5: 67:45:b4:2a:90:3c:1b:26:a7:c2:9b:29:85:b9:e4:7a:d3:ed: c6:a1:99:fd:60:48:29:90:52:9e:e3:e3:79:03:b7:ff:90:ec: c2:66:55:d9:f4:7a:f3:51:a3:79:fa:8e:fd:6b:b5:04:7b:f0: c3:76:c9:99:80:5d:0f:90:61:56:bf:60:a2:92:a0:88:07:24: 44:24:b9:3e:05:3c:cf:08:d8:0b:1f:e0:18:88:6d:dc:c8:c0: bd:1d:03:54:93:4f:20:a5:63:66:84:f5:9e:c4:ad:80:bf:77: a7:01:6e:de:dc:d2:57:bc:b2:b0:f3:84:2b:a5:89:94:84:95: 96:32:ae:bd:a0:53:34:f1:b6:35:bf:c4:82:27:2b:dd:a3:52: b0:04:5c:e6:63:5e:01:47:5f:0b:ac:57:86:3f:b7:2d:88:da: cb:b8:4f:e1:d0:f5:12:d6:8a:1e:a4:6f:0e:39:b4:57:a4:90: 28:32:53:fc:33:b7:a0:1d:3e:75:c0:d8:cb:e6:fd:ab:6a:53: 74:5a:55:fd -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUb64S8trj27PnW1x97EvLHPc/D6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjEwMTAxMDExNDVaFw0yNzEwMDkxMDE2NDVaMDMxMTAvBgNV BAMTKDY5ODZEQzgyODEyQzQ3REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3CDzvGGoyJIhyqYsv3eeCm7t 4QpJQTQ7a8x1chPSd7x6iiwiokHr3BjpkKRMnbj9oSA6gFjSc4/ET5B16pv5OHX/ sODbGVsFMuqymoZXTt3PJurNwRLn3CXVhfp/2yIrVvUClnZpIxCla9x2NwFk6dzD JpoyOpv14Qp1UwjT41EwkFTc/X0xWXfiZh+sHfYiOb38Yp9QePeTq6IP/N6xQ+gF NfJf4z+lB39xOJSGe/3ftB+bMgRORnaKsdETjcOLRyUdG32laG7XdIYVxDxHelV+ euCKRCWgoZvudlUBAT5OHYpkeDbPZM8OwOXpQjiSONfiQG973Tfdn9D0uGa1AgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRphtyCgSxH2hSZ S45ucnty4LL42DAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJk ZGVkOGM0LzkvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1lNWMzLTQ4ZjktYjJlZS0zNmE5 YmRkZWQ4YzQvOS82OTg2REM4MjgxMkM0N0RBMTQ5OTRCOEU2RTcyN0I3MkUwQjJG OEQ4Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBARAMGACoKYEDCMA0GCSqG SIb3DQEBCwUAA4IBAQDM6P7wNmRf22n3VjDDyLOlGo1AQ0G9AsvGrG6aNYagHU6n dYUW+80xibTwRoQmt8/mDUCm9LVnRbQqkDwbJqfCmymFueR60+3GoZn9YEgpkFKe 4+N5A7f/kOzCZlXZ9HrzUaN5+o79a7UEe/DDdsmZgF0PkGFWv2CikqCIByREJLk+ BTzPCNgLH+AYiG3cyMC9HQNUk08gpWNmhPWexK2Av3enAW7e3NJXvLKw84QrpYmU hJWWMq69oFM08bY1v8SCJyvdo1KwBFzmY14BR18LrFeGP7ctiNrLuE/h0PUS1ooe pG8OObRXpJAoMlP8M7egHT51wNjL5v2ralN0WlX9 -----END CERTIFICATE-----Generated at Sun Oct 11 10:23:50 2026 by rpki-client