$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer File: FF4F1D48A6088FEC5ED73270F82068A436391A71.cer (raw, json) Hash identifier: 1R9pRcoIolZwCGDLA1wTAkWXszzFtASic3GC1j9I/TY= Subject key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2CE152967B8093D4497B0DAF6C3DC9DC495E0385 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 17 Jun 2026 21:04:39 +0000 Certificate not after: Wed 16 Jun 2027 21:09:39 +0000 Subordinate resources: IP: 2a05:dfc1:3500:: -- 2a05:dfc1:36ff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 17:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e1:52:96:7b:80:93:d4:49:7b:0d:af:6c:3d:c9:dc:49:5e:03:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 17 21:04:39 2026 GMT Not After : Jun 16 21:09:39 2027 GMT Subject: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:45:a2:0c:a3:b8:3d:f2:d7:b7:15:52:bc: a2:95:65:07:36:c9:d8:4b:17:70:37:85:62:62:5d: fa:74:30:37:53:51:93:95:be:66:7c:73:29:f8:c9: 35:e7:c7:4e:44:1b:51:79:33:19:ed:ce:0f:16:9e: 4e:a1:82:26:e2:cc:fd:34:60:a5:ea:1f:d5:97:ae: 22:12:57:f1:c7:ea:56:87:1d:a3:7a:5c:53:21:6e: 26:a9:d0:0f:57:6f:9a:1f:53:ed:18:9d:66:0b:cd: 61:0f:34:83:78:f1:14:4a:10:a3:aa:54:45:bc:8a: bd:c2:2a:6f:4b:c3:9f:bf:29:c0:11:48:81:a1:bd: 2f:c1:19:f5:0d:00:11:03:29:65:ca:eb:a7:92:8b: 65:b8:74:50:c6:f0:d8:b6:82:df:1c:db:a9:e1:75: a7:ba:59:0d:a9:5f:d9:2e:3d:d1:86:85:44:89:2d: 09:09:15:c0:dc:af:02:2b:49:57:b4:48:fc:c9:8d: b7:c9:15:3a:7e:d2:81:00:a1:ce:f6:8d:f7:0f:58: 8a:ea:85:34:eb:89:3a:47:fa:13:d4:86:7e:6e:34: c1:f2:09:1f:e5:7b:fb:15:55:de:a6:3d:ea:15:9d: 3d:1b:b6:0c:9b:4c:fd:73:b5:20:f7:4c:d5:2d:dd: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3500::-2a05:dfc1:36ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b5:1b:78:2e:66:db:74:cb:55:be:c4:f0:e3:51:60:14:d4:cd: 1b:11:8d:52:36:62:f8:a9:f3:5e:be:2a:55:83:c7:68:14:e0: 93:16:eb:b2:52:33:05:b4:80:39:6a:14:34:e9:0f:8c:ab:91: 1c:44:4f:1a:6d:fc:6e:00:ae:be:52:87:27:ca:97:b2:d0:c2: 63:40:62:2e:ea:57:05:d1:17:d9:5d:5f:26:e7:2d:2a:9a:fd: cd:10:7e:c8:c2:af:03:8f:36:cd:01:38:ce:4a:2f:57:b9:99: f8:86:c2:67:8b:24:57:1d:04:e5:dc:ce:7a:25:f8:1c:92:3d: 8a:f1:db:79:90:ea:4c:18:7f:bf:41:8e:27:28:24:d4:f3:37: 85:ee:de:82:9e:bd:a1:b5:46:67:04:89:02:ae:2c:e2:0e:9c: 70:e6:6d:9f:fa:fc:84:d6:01:39:9d:e5:bb:b6:59:4c:8c:1b: dc:b1:7e:a3:cf:35:61:e4:e2:2f:bd:bd:d2:b9:1b:84:44:66: 7d:ff:79:5c:49:79:9b:76:25:19:6d:6a:dd:5b:9c:d4:b7:19: cb:7d:24:10:3f:c4:62:ee:26:98:95:2f:8a:f6:1c:a4:fa:64: 77:b3:85:7d:e6:26:34:33:a6:6f:fd:39:66:7a:7b:41:b3:f7: 6c:65:1d:d7 -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIULOFSlnuAk9RJew2vbD3J3EleA4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MTcyMTA0MzlaFw0yNzA2MTYyMTA5MzlaMDMxMTAvBgNV BAMTKEZGNEYxRDQ4QTYwODhGRUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNkWiDKO4PfLXtxVSvKKVZQc2 ydhLF3A3hWJiXfp0MDdTUZOVvmZ8cyn4yTXnx05EG1F5Mxntzg8Wnk6hgibizP00 YKXqH9WXriISV/HH6laHHaN6XFMhbiap0A9Xb5ofU+0YnWYLzWEPNIN48RRKEKOq VEW8ir3CKm9Lw5+/KcARSIGhvS/BGfUNABEDKWXK66eSi2W4dFDG8Ni2gt8c26nh dae6WQ2pX9kuPdGGhUSJLQkJFcDcrwIrSVe0SPzJjbfJFTp+0oEAoc72jfcPWIrq hTTriTpH+hPUhn5uNMHyCR/le/sVVd6mPeoVnT0btgybTP1ztSD3TNUt3UVHAgMB AAGjggL2MIIC8jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/Tx1IpgiP7F7X MnD4IGikNjkacTAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1 MzA5NzMyLzIvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yMmE4MDY4Mi1jNTRjLTRkNWEtOTQ1Ni1iMjM5 MjUzMDk3MzIvMi9GRjRGMUQ0OEE2MDg4RkVDNUVENzMyNzBGODIwNjhBNDM2Mzkx QTcxLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIwEAMGACoF38E1AwYAKgXfwTYwDQYJ KoZIhvcNAQELBQADggEBALUbeC5m23TLVb7E8ONRYBTUzRsRjVI2Yvip816+KlWD x2gU4JMW67JSMwW0gDlqFDTpD4yrkRxETxpt/G4Arr5ShyfKl7LQwmNAYi7qVwXR F9ldXybnLSqa/c0QfsjCrwOPNs0BOM5KL1e5mfiGwmeLJFcdBOXcznol+BySPYrx 23mQ6kwYf79BjicoJNTzN4Xu3oKevaG1RmcEiQKuLOIOnHDmbZ/6/ITWATmd5bu2 WUyMG9yxfqPPNWHk4i+9vdK5G4REZn3/eVxJeZt2JRltat1bnNS3Gct9JBA/xGLu JpiVL4r2HKT6ZHezhX3mJjQzpm/9OWZ6e0Gz92xlHdc= -----END CERTIFICATE-----Generated at Sun Jul 12 03:41:29 2026 by rpki-client