$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer (raw, json) Hash identifier: jbvpJYt+A0NSI8mkfcSpW3+hNH4c/UIy/6VxDXURmFg= Subject key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 132BFCA3C021E997CE556DC8F55C22A2CE54E35B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 05 Jul 2025 00:45:47 +0000 Certificate not after: Sat 04 Jul 2026 00:50:47 +0000 Subordinate resources: IP: 2a0a:6040:a100::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 23:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2b:fc:a3:c0:21:e9:97:ce:55:6d:c8:f5:5c:22:a2:ce:54:e3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 5 00:45:47 2025 GMT Not After : Jul 4 00:50:47 2026 GMT Subject: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:27:04:f5:84:6a:fb:08:13:93:03:3a:d5: a1:c2:3b:0d:91:47:84:f4:d7:90:0b:b7:19:5a:07: 36:35:99:18:e0:c1:a3:80:4b:d6:64:6f:ce:ad:87: 38:9a:99:3f:02:8f:98:ca:97:29:17:3c:b3:9c:2f: 43:3c:7a:5f:cc:05:37:be:5e:b6:17:ac:ef:9c:3e: de:64:84:ed:b9:40:2a:2f:3c:d1:a0:7b:82:fb:bd: 93:91:49:ef:02:97:b5:8c:17:85:68:9f:2b:15:df: 76:7d:f6:67:3e:c7:27:07:6f:1c:97:58:18:19:f7: 34:06:7b:ac:ad:71:87:8b:02:21:57:9f:0d:1f:32: ae:ed:e3:68:cd:0b:c2:ec:3a:b9:a9:cd:42:e4:3d: 98:63:16:fb:f5:38:39:05:46:4f:69:04:d5:21:85: cd:9c:15:e7:b4:f0:9c:36:24:88:3d:02:2b:a9:46: 92:c9:99:df:00:f2:82:83:f8:a6:f3:94:5c:af:2d: 4a:a4:72:30:fd:34:ed:f6:11:07:cd:94:ff:bb:d3: be:20:ce:d3:28:4b:b9:fa:c4:af:6b:fe:fd:36:65: 9e:62:a2:4e:d6:4c:9b:7f:3c:76:97:05:24:2e:80: 84:71:57:94:2e:eb:7a:97:58:50:7a:e5:08:30:86: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:a100::/40 Signature Algorithm: sha256WithRSAEncryption 02:3a:10:9d:d0:fd:a2:03:bb:31:84:db:4c:2e:74:36:06:eb: 3e:40:0a:9e:a9:a1:97:98:8c:45:37:90:28:53:13:31:4c:a5: 7c:ee:fd:de:43:97:6d:66:10:95:fa:4b:f0:d0:20:b0:60:0f: ac:d2:fb:5e:c7:d9:cb:60:93:9f:d5:3a:83:ca:d3:94:3e:24: 88:c6:8f:95:71:84:1f:36:75:01:e2:d2:e6:74:7e:18:d2:00: f5:55:21:ec:e2:de:a3:9a:69:e3:c3:b7:40:a8:53:ed:10:93: 07:d5:35:a8:aa:a2:57:54:89:11:3b:28:30:60:40:ed:a9:c8: 09:46:17:fe:83:4d:e4:4e:5f:56:be:71:52:d3:e1:c3:16:7a: 4a:81:65:d5:88:52:56:a3:07:c6:d5:8a:97:57:f9:74:65:74: b4:f4:5b:99:5d:88:b7:e3:87:8d:20:32:2d:14:27:c4:04:8f: c0:6c:09:60:3c:b8:f8:de:5c:ac:c0:d3:9b:9f:42:da:cc:5e: ec:ad:e5:a8:d4:45:da:ef:08:15:a9:cb:04:5a:b7:d3:75:f7: be:28:14:93:f0:94:b4:a9:8c:51:18:1d:6e:91:fb:b7:bc:6e: 63:8f:c1:8d:e4:18:2a:7d:a6:e6:fb:2c:82:c3:8b:48:9e:d6: 78:1a:0b:84 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUEyv8o8Ah6ZfOVW3I9Vwios5U41swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDUwMDQ1NDdaFw0yNjA3MDQwMDUwNDdaMDMxMTAvBgNV BAMTKDRDOEYxNEE5ODA0MUNDRDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJCcE9YRq+wgTkwM61aHCOw2R R4T015ALtxlaBzY1mRjgwaOAS9Zkb86thziamT8Cj5jKlykXPLOcL0M8el/MBTe+ XrYXrO+cPt5khO25QCovPNGge4L7vZORSe8Cl7WMF4VonysV33Z99mc+xycHbxyX WBgZ9zQGe6ytcYeLAiFXnw0fMq7t42jNC8LsOrmpzULkPZhjFvv1ODkFRk9pBNUh hc2cFee08Jw2JIg9AiupRpLJmd8A8oKD+KbzlFyvLUqkcjD9NO32EQfNlP+7074g ztMoS7n6xK9r/v02ZZ5iok7WTJt/PHaXBSQugIRxV5Qu63qXWFB65Qgwhp6pAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMjxSpgEHM2erv xFb/Wq+/SQHGgTAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFh ZmM4ZWI4LzQvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0wYTc0LTRjY2EtYmY4Zi0xMmZh YWFmYzhlYjgvNC80QzhGMTRBOTgwNDFDQ0Q5RUFFRkM0NTZGRjVBQUZCRjQ5MDFD NjgxLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAoTANBgkqhkiG9w0BAQsF AAOCAQEAAjoQndD9ogO7MYTbTC50NgbrPkAKnqmhl5iMRTeQKFMTMUylfO793kOX bWYQlfpL8NAgsGAPrNL7XsfZy2CTn9U6g8rTlD4kiMaPlXGEHzZ1AeLS5nR+GNIA 9VUh7OLeo5pp48O3QKhT7RCTB9U1qKqiV1SJETsoMGBA7anICUYX/oNN5E5fVr5x UtPhwxZ6SoFl1YhSVqMHxtWKl1f5dGV0tPRbmV2It+OHjSAyLRQnxASPwGwJYDy4 +N5crMDTm59C2sxe7K3lqNRF2u8IFanLBFq303X3vigUk/CUtKmMURgdbpH7t7xu Y4/BjeQYKn2m5vssgsOLSJ7WeBoLhA== -----END CERTIFICATE-----Generated at Mon Aug 4 14:07:04 2025 by rpki-client