$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.cer (raw, json) Hash identifier: drC7uhgKSXLngedtBTzg6Dz9wiE/MZbzC3h0PVp6r7A= Subject key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6DE9C4D796B115116C0B4E8CCDC423B9C98D71D4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 06 Jun 2026 22:00:36 +0000 Certificate not after: Sat 05 Jun 2027 22:05:36 +0000 Subordinate resources: IP: 2a05:dfc1:c00::/40 IP: 2a05:dfc1:9300::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e9:c4:d7:96:b1:15:11:6c:0b:4e:8c:cd:c4:23:b9:c9:8d:71:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 6 22:00:36 2026 GMT Not After : Jun 5 22:05:36 2027 GMT Subject: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:63:12:cb:fe:cc:21:34:f9:8d:1c:d6:4e:65: 25:9c:94:9b:d2:b7:7a:5f:7b:95:c1:5c:91:eb:22: a6:64:d2:ec:56:36:83:a0:8c:56:e2:6d:23:a6:dd: 5b:18:d2:fd:24:61:47:dc:a9:e6:4b:1e:d4:1d:66: 94:50:89:23:17:df:e1:6f:47:7f:b8:9c:6c:a7:4a: 69:cd:04:31:23:a2:22:38:ab:56:4c:f8:ae:37:56: 2c:e7:d3:f3:a3:06:14:c0:1d:60:2f:1f:b5:e2:07: 0f:94:fe:73:aa:4b:f2:5b:2a:12:92:6f:8e:62:78: fa:15:7a:03:b5:a9:98:e7:3b:96:78:de:34:0d:6f: fa:5c:e7:1b:ce:a2:5d:1a:ea:70:d7:59:db:9a:77: 6a:a5:e1:f4:87:29:09:03:9e:c3:7d:a0:02:4e:d8: 06:ac:7c:b6:de:9f:01:27:24:34:d4:38:37:54:d6: e0:35:e8:11:97:6d:09:5d:08:4b:ad:7f:e5:3b:f8: 08:64:b5:dc:1e:f8:b4:05:0f:b9:ca:b8:5c:64:fa: e0:e7:53:5b:c9:62:47:69:d3:1c:de:87:14:cc:33: f3:74:55:9b:b6:7d:0b:f7:c7:73:a6:a8:10:16:ac: 8d:b4:bd:84:6f:7f:f3:28:02:ca:2c:35:17:4b:65: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c00::/40 2a05:dfc1:9300::/40 Signature Algorithm: sha256WithRSAEncryption 8d:44:1a:4f:4b:98:21:a5:37:c5:a1:2c:08:a2:78:73:d6:95: 5f:3b:29:d5:34:c4:98:ec:87:a5:b2:ce:ae:58:fa:5e:01:16: 7c:17:c7:36:c1:96:fe:3e:4b:d5:6b:3f:e7:b6:e5:6c:46:3e: 26:ea:f0:10:00:2f:85:87:4e:15:df:1e:7c:d4:ab:ea:32:08: 56:52:dd:af:b9:49:40:e7:06:f8:5e:2b:04:1a:a6:32:58:66: 0a:ba:7f:00:24:4a:18:17:87:0f:a9:72:21:f6:a5:2c:ca:51: f4:53:9f:eb:77:a9:74:e9:6f:a3:d7:60:6d:c5:5a:b8:f5:cb: dc:3a:bf:11:bb:bf:31:a6:44:b4:dc:ed:1c:06:bb:94:2a:17: bc:0d:1d:ff:01:a9:00:d7:df:9b:79:01:78:48:0f:e5:66:e9: 81:1d:28:cc:f1:96:dd:5e:11:f7:4f:10:f9:a6:b2:d0:ba:f6: eb:e8:3e:3c:79:3e:c5:a0:2b:54:bc:71:35:89:e2:c6:cc:c5: fa:a9:ca:a4:f6:72:69:22:41:cc:b4:b4:5b:f7:63:49:54:93: 40:38:f8:73:c1:11:ae:43:59:26:7e:4e:37:1f:99:79:fb:c0: 56:0b:7b:c9:70:5c:56:08:9f:13:5d:b9:59:66:7f:ba:8e:73: f8:81:31:bc -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUbenE15axFRFsC06MzcQjucmNcdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDYyMjAwMzZaFw0yNzA2MDUyMjA1MzZaMDMxMTAvBgNV BAMTKDQ3NUEzQkZBMDk2MTRFMDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnYxLL/swhNPmNHNZOZSWclJvS t3pfe5XBXJHrIqZk0uxWNoOgjFbibSOm3VsY0v0kYUfcqeZLHtQdZpRQiSMX3+Fv R3+4nGynSmnNBDEjoiI4q1ZM+K43Vizn0/OjBhTAHWAvH7XiBw+U/nOqS/JbKhKS b45iePoVegO1qZjnO5Z43jQNb/pc5xvOol0a6nDXWduad2ql4fSHKQkDnsN9oAJO 2AasfLbenwEnJDTUODdU1uA16BGXbQldCEutf+U7+Ahktdwe+LQFD7nKuFxk+uDn U1vJYkdp0xzehxTMM/N0VZu2fQv3x3OmqBAWrI20vYRvf/MoAsosNRdLZbhpAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHWjv6CWFOB74F Z7H7FREPRfiU6zAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZh M2U5MjQzLzIvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1hM2IwLTQ2OGUtYWEzNy04MmNh NmEzZTkyNDMvMi80NzVBM0JGQTA5NjE0RTA3QkUwNTY3QjFGQjE1MTEwRjQ1Rjg5 NEVCLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqBd/BDAMGACoF38GTMA0GCSqG SIb3DQEBCwUAA4IBAQCNRBpPS5ghpTfFoSwIonhz1pVfOynVNMSY7Ielss6uWPpe ARZ8F8c2wZb+PkvVaz/ntuVsRj4m6vAQAC+Fh04V3x581KvqMghWUt2vuUlA5wb4 XisEGqYyWGYKun8AJEoYF4cPqXIh9qUsylH0U5/rd6l06W+j12BtxVq49cvcOr8R u78xpkS03O0cBruUKhe8DR3/AakA19+beQF4SA/lZumBHSjM8ZbdXhH3TxD5prLQ uvbr6D48eT7FoCtUvHE1ieLGzMX6qcqk9nJpIkHMtLRb92NJVJNAOPhzwRGuQ1km fk43H5l5+8BWC3vJcFxWCJ8TXblZZn+6jnP4gTG8 -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:10 2026 by rpki-client