$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer (raw, json) Hash identifier: J5kWt2NHYToe22aSCP2Wspl5KRdNw+EZdewKozUbOEg= Subject key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 319EF88C8C266FD3168B90CA6111D4BC765F8205 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 11 Jul 2026 19:45:57 +0000 Certificate not after: Sat 10 Jul 2027 19:50:57 +0000 Subordinate resources: IP: 2a0a:6040:4400::/40 IP: 2a0a:6040:c200::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9e:f8:8c:8c:26:6f:d3:16:8b:90:ca:61:11:d4:bc:76:5f:82:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 11 19:45:57 2026 GMT Not After : Jul 10 19:50:57 2027 GMT Subject: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:20:f3:bc:61:a8:c8:92:21:ca:a6:2c:bf: 77:9e:0a:6e:ed:e1:0a:49:41:34:3b:6b:cc:75:72: 13:d2:77:bc:7a:8a:2c:22:a2:41:eb:dc:18:e9:90: a4:4c:9d:b8:fd:a1:20:3a:80:58:d2:73:8f:c4:4f: 90:75:ea:9b:f9:38:75:ff:b0:e0:db:19:5b:05:32: ea:b2:9a:86:57:4e:dd:cf:26:ea:cd:c1:12:e7:dc: 25:d5:85:fa:7f:db:22:2b:56:f5:02:96:76:69:23: 10:a5:6b:dc:76:37:01:64:e9:dc:c3:26:9a:32:3a: 9b:f5:e1:0a:75:53:08:d3:e3:51:30:90:54:dc:fd: 7d:31:59:77:e2:66:1f:ac:1d:f6:22:39:bd:fc:62: 9f:50:78:f7:93:ab:a2:0f:fc:de:b1:43:e8:05:35: f2:5f:e3:3f:a5:07:7f:71:38:94:86:7b:fd:df:b4: 1f:9b:32:04:4e:46:76:8a:b1:d1:13:8d:c3:8b:47: 25:1d:1b:7d:a5:68:6e:d7:74:86:15:c4:3c:47:7a: 55:7e:7a:e0:8a:44:25:a0:a1:9b:ee:76:55:01:01: 3e:4e:1d:8a:64:78:36:cf:64:cf:0e:c0:e5:e9:42: 38:92:38:d7:e2:40:6f:7b:dd:37:dd:9f:d0:f4:b8: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4400::/40 2a0a:6040:c200::/40 Signature Algorithm: sha256WithRSAEncryption 98:bc:8d:ae:da:65:5e:3a:af:be:a3:6b:74:11:dc:7f:05:e1: 84:05:d5:28:0f:cb:39:af:85:26:64:66:ea:af:0a:a5:46:e9: 54:82:47:90:07:d5:24:b7:8a:57:31:72:f5:36:4d:ef:71:09: 18:50:c2:3c:91:4a:1e:01:03:f4:6f:9f:b1:35:26:1d:9d:a1: 44:4a:db:02:53:1c:77:ae:51:79:85:1a:1e:38:98:bd:b2:73: 07:b3:75:af:1a:f7:44:7b:da:42:15:b3:b6:9b:d5:a7:fe:a4: b8:b4:b0:3c:2c:a1:d9:31:f3:cc:b4:72:1c:80:76:df:02:87: 07:66:14:96:d8:01:ef:f5:d2:cf:13:6d:90:38:bf:0f:77:47: f6:e9:fd:4b:1f:c8:68:67:41:11:58:49:9f:16:3c:41:ad:0e: 65:fe:bf:cd:93:4c:60:3a:70:0a:53:3f:bc:46:e1:10:79:c7: 87:71:c1:75:5f:08:bb:f6:cf:e8:43:48:f2:3e:a9:e1:f8:84: 44:c3:a0:bf:43:d0:4a:20:f2:40:36:e6:10:f8:7a:e6:4a:c9: cd:df:46:57:39:28:b7:e7:e9:1e:6b:73:08:5f:7e:61:2d:f0: 22:4b:e2:55:e3:bd:9a:c2:9c:60:f3:95:1c:44:5d:29:5d:29: e6:68:56:76 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUMZ74jIwmb9MWi5DKYRHUvHZfggUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA3MTExOTQ1NTdaFw0yNzA3MTAxOTUwNTdaMDMxMTAvBgNV BAMTKDY5ODZEQzgyODEyQzQ3REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3CDzvGGoyJIhyqYsv3eeCm7t 4QpJQTQ7a8x1chPSd7x6iiwiokHr3BjpkKRMnbj9oSA6gFjSc4/ET5B16pv5OHX/ sODbGVsFMuqymoZXTt3PJurNwRLn3CXVhfp/2yIrVvUClnZpIxCla9x2NwFk6dzD JpoyOpv14Qp1UwjT41EwkFTc/X0xWXfiZh+sHfYiOb38Yp9QePeTq6IP/N6xQ+gF NfJf4z+lB39xOJSGe/3ftB+bMgRORnaKsdETjcOLRyUdG32laG7XdIYVxDxHelV+ euCKRCWgoZvudlUBAT5OHYpkeDbPZM8OwOXpQjiSONfiQG973Tfdn9D0uGa1AgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRphtyCgSxH2hSZ S45ucnty4LL42DAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJk ZGVkOGM0LzkvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1lNWMzLTQ4ZjktYjJlZS0zNmE5 YmRkZWQ4YzQvOS82OTg2REM4MjgxMkM0N0RBMTQ5OTRCOEU2RTcyN0I3MkUwQjJG OEQ4Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBARAMGACoKYEDCMA0GCSqG SIb3DQEBCwUAA4IBAQCYvI2u2mVeOq++o2t0Edx/BeGEBdUoD8s5r4UmZGbqrwql RulUgkeQB9Ukt4pXMXL1Nk3vcQkYUMI8kUoeAQP0b5+xNSYdnaFEStsCUxx3rlF5 hRoeOJi9snMHs3WvGvdEe9pCFbO2m9Wn/qS4tLA8LKHZMfPMtHIcgHbfAocHZhSW 2AHv9dLPE22QOL8Pd0f26f1LH8hoZ0ERWEmfFjxBrQ5l/r/Nk0xgOnAKUz+8RuEQ eceHccF1Xwi79s/oQ0jyPqnh+IREw6C/Q9BKIPJANuYQ+HrmSsnN30ZXOSi35+ke a3MIX35hLfAiS+JV472awpxg85UcRF0pXSnmaFZ2 -----END CERTIFICATE-----Generated at Sun Jul 12 03:41:53 2026 by rpki-client