
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer (raw, json)
Hash identifier: T8nYsUhf9h/Ep1mi0N0UVt39VpEcAnUlXCx5Z3OwqRQ=
Subject key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 2AF4CD9FBAED3DFFB731B551D48FE35C0BF239A1
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 06 Jun 2026 10:08:33 +0000
Certificate not after: Sat 05 Jun 2027 10:13:33 +0000
Subordinate resources: IP: 2a0a:6040:a100::/40
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f4:cd:9f:ba:ed:3d:ff:b7:31:b5:51:d4:8f:e3:5c:0b:f2:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 6 10:08:33 2026 GMT
Not After : Jun 5 10:13:33 2027 GMT
Subject: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:27:04:f5:84:6a:fb:08:13:93:03:3a:d5:
a1:c2:3b:0d:91:47:84:f4:d7:90:0b:b7:19:5a:07:
36:35:99:18:e0:c1:a3:80:4b:d6:64:6f:ce:ad:87:
38:9a:99:3f:02:8f:98:ca:97:29:17:3c:b3:9c:2f:
43:3c:7a:5f:cc:05:37:be:5e:b6:17:ac:ef:9c:3e:
de:64:84:ed:b9:40:2a:2f:3c:d1:a0:7b:82:fb:bd:
93:91:49:ef:02:97:b5:8c:17:85:68:9f:2b:15:df:
76:7d:f6:67:3e:c7:27:07:6f:1c:97:58:18:19:f7:
34:06:7b:ac:ad:71:87:8b:02:21:57:9f:0d:1f:32:
ae:ed:e3:68:cd:0b:c2:ec:3a:b9:a9:cd:42:e4:3d:
98:63:16:fb:f5:38:39:05:46:4f:69:04:d5:21:85:
cd:9c:15:e7:b4:f0:9c:36:24:88:3d:02:2b:a9:46:
92:c9:99:df:00:f2:82:83:f8:a6:f3:94:5c:af:2d:
4a:a4:72:30:fd:34:ed:f6:11:07:cd:94:ff:bb:d3:
be:20:ce:d3:28:4b:b9:fa:c4:af:6b:fe:fd:36:65:
9e:62:a2:4e:d6:4c:9b:7f:3c:76:97:05:24:2e:80:
84:71:57:94:2e:eb:7a:97:58:50:7a:e5:08:30:86:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a100::/40
Signature Algorithm: sha256WithRSAEncryption
02:e3:91:99:21:20:89:1e:be:9b:79:11:df:a4:d8:8e:05:5e:
c5:46:0d:bb:ec:e9:80:50:96:1b:73:e8:f9:16:4c:40:3e:fc:
f4:f1:80:ec:d0:cd:66:35:8a:10:c0:19:c6:a7:08:b6:99:9a:
fd:e7:f2:4d:d0:12:61:03:bd:bd:48:f4:66:a9:34:e7:d3:ab:
8d:9f:1a:52:d2:1e:03:9b:7a:ec:99:dc:fb:2f:32:2c:19:c7:
10:e8:e9:38:6e:69:7a:6e:19:11:eb:c9:5d:b4:78:2e:24:84:
b5:5f:a7:17:7c:c4:d6:e1:10:05:ce:92:ca:21:ad:45:60:ad:
02:d3:ef:f5:58:83:cc:7a:80:34:2c:40:e9:85:56:1f:17:5d:
e2:c6:2f:22:b4:33:92:05:59:ef:70:a3:bb:98:b8:c6:3e:17:
e5:b6:9a:a5:43:d1:d4:c7:2e:52:11:24:00:8f:56:e5:b9:5a:
f5:45:f0:25:66:cf:9f:4c:5f:65:cb:d8:52:d6:b1:dd:30:f5:
8c:e6:2d:23:e5:dc:dd:94:99:09:4e:23:23:bf:8f:61:b9:db:
6e:f8:7a:73:52:d8:b6:89:f5:36:ef:11:a2:7b:2a:fe:24:1b:
6c:a9:58:a2:65:59:5a:6f:99:b4:c9:e9:ae:7e:9c:9f:d1:3f:
69:e5:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:20 2026 by rpki-client