$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer File: 0F728B914670434DCF5633E81E2B8721DF75CEB8.cer (raw, json) Hash identifier: vPCasbOS812tR2N2RgoiKiv7vAMiFDvXc3D83it4P50= Subject key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 13036CDC0A70E03EE7CB682ADAACF119D9E7BFC6 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 07 Jun 2026 02:50:53 +0000 Certificate not after: Sun 06 Jun 2027 02:55:53 +0000 Subordinate resources: IP: 2a0a:6040:ba00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:03:6c:dc:0a:70:e0:3e:e7:cb:68:2a:da:ac:f1:19:d9:e7:bf:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 7 02:50:53 2026 GMT Not After : Jun 6 02:55:53 2027 GMT Subject: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:05:02:8d:a3:34:64:fc:3d:f4:dc:71:71: cf:8b:3c:ec:d0:fd:7a:27:3e:d7:89:49:ab:e0:70: c2:8b:77:56:67:e5:fd:ea:94:19:fa:7d:21:4f:b6: 35:fd:51:0e:6e:01:d5:b2:c3:9a:3b:18:12:7b:1b: 46:c2:5f:67:7b:13:55:e4:e5:a9:b4:98:98:4f:ee: 15:f9:ed:3a:58:9e:74:73:08:96:44:96:98:9b:2e: 80:19:b1:8b:6d:c7:d0:95:83:61:2c:d2:e1:a6:79: eb:00:8e:85:bd:9c:97:22:ac:ca:98:e7:13:1a:ac: 6d:05:cd:24:1e:cf:f7:a5:1f:4a:eb:39:b1:ee:c0: f3:5e:15:70:5f:2f:8c:31:c2:f8:20:7c:ed:6c:d7: b1:7f:97:76:30:aa:80:5c:17:c4:c1:5f:5f:9b:e1: 30:ce:8f:2b:17:f7:5c:b3:fd:44:cb:b9:07:ff:9d: ad:97:43:a2:6b:2c:f7:19:09:94:4c:40:82:c4:33: 3a:16:b7:2d:99:c1:d0:a6:56:d9:79:4c:b3:a8:b1: e8:bc:a9:e2:ad:7f:0d:25:1a:ac:3b:e2:08:a1:10: 0a:51:4e:07:c2:fd:6f:0f:32:95:0c:89:8a:2d:0c: dc:8b:aa:f0:a9:3c:c5:ad:82:fa:c0:63:8b:a3:9d: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ba00::/40 Signature Algorithm: sha256WithRSAEncryption 8d:ba:64:7d:df:53:96:ca:12:62:49:26:3c:bf:e1:6b:bb:05: 76:c4:7d:48:ba:37:17:b3:fb:00:6b:eb:34:11:6e:9f:d6:a6: d5:9b:f9:b2:bb:8b:ef:d8:00:e4:8a:bd:a1:89:38:6e:db:14: dd:79:85:f8:1e:65:a4:ec:0e:b0:cf:8e:ba:a3:5c:67:12:37: 12:a6:a7:13:e5:fa:9c:4c:eb:be:98:8a:7b:ff:eb:4e:41:a6: 0f:c6:c3:80:4f:82:69:3c:47:26:c3:cc:6e:4e:29:c6:7a:a1: 11:9c:a0:ce:68:ef:1e:78:9d:b4:e2:14:2c:20:b7:a4:a2:7e: 5d:a7:87:84:4d:3e:ba:36:7a:54:3b:48:5a:fc:d3:dd:2d:78: ef:3f:c4:d7:47:63:42:23:46:e8:1f:2f:0a:43:70:d7:5d:63: 8a:d6:04:9b:d5:7a:c1:7b:06:52:fe:4f:69:27:80:77:04:01: ea:59:96:5e:f4:af:18:0d:53:7d:ed:8e:32:47:ab:78:77:be: 2c:b3:ce:69:e5:50:a6:14:b9:fa:5d:54:cc:3d:e8:22:5c:7a: 6a:77:da:20:b2:73:32:14:63:f6:88:49:0e:e0:81:ab:53:0b: 27:bc:db:d2:d6:9b:e9:71:b5:0c:37:d2:2f:8d:5f:06:4a:5e: d1:73:2a:9b -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUEwNs3Apw4D7ny2gq2qzxGdnnv8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDcwMjUwNTNaFw0yNzA2MDYwMjU1NTNaMDMxMTAvBgNV BAMTKDBGNzI4QjkxNDY3MDQzNERDRjU2MzNFODFFMkI4NzIxREY3NUNFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vAUCjaM0ZPw99Nxxcc+LPOzQ /XonPteJSavgcMKLd1Zn5f3qlBn6fSFPtjX9UQ5uAdWyw5o7GBJ7G0bCX2d7E1Xk 5am0mJhP7hX57TpYnnRzCJZElpibLoAZsYttx9CVg2Es0uGmeesAjoW9nJcirMqY 5xMarG0FzSQez/elH0rrObHuwPNeFXBfL4wxwvggfO1s17F/l3YwqoBcF8TBX1+b 4TDOjysX91yz/UTLuQf/na2XQ6JrLPcZCZRMQILEMzoWty2ZwdCmVtl5TLOosei8 qeKtfw0lGqw74gihEApRTgfC/W8PMpUMiYotDNyLqvCpPMWtgvrAY4ujnQVfAgMB AAGjggLvMIIC6zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPcouRRnBDTc9W M+geK4ch33XOuDAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAUIGCCsGAQUFBwEL BIIBNDCCATAwYAYIKwYBBQUHMAWGVHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4 Y2Y1MGU4LzExLzCBjQYIKwYBBQUHMAqGgYByc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0 MjgxOGNmNTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURG NzVDRUI4Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5y aXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAujANBgkqhkiG9w0B AQsFAAOCAQEAjbpkfd9TlsoSYkkmPL/ha7sFdsR9SLo3F7P7AGvrNBFun9am1Zv5 sruL79gA5Iq9oYk4btsU3XmF+B5lpOwOsM+OuqNcZxI3EqanE+X6nEzrvpiKe//r TkGmD8bDgE+CaTxHJsPMbk4pxnqhEZygzmjvHnidtOIULCC3pKJ+XaeHhE0+ujZ6 VDtIWvzT3S147z/E10djQiNG6B8vCkNw111jitYEm9V6wXsGUv5PaSeAdwQB6lmW XvSvGA1Tfe2OMkereHe+LLPOaeVQphS5+l1UzD3oIlx6anfaILJzMhRj9ohJDuCB q1MLJ7zb0tab6XG1DDfSL41fBkpe0XMqmw== -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:26 2026 by rpki-client