
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
File: 547F71C62763A22A9156089F2F55B587337FAFCB.cer (raw, json)
Hash identifier: i/QTYjSN/glAgs6jiOWb6LcKlDSBW35E07j7Bc04a+Q=
Subject key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 508B67663E986741A5AAC1F3E007710E1CD0116E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Jul 2026 17:34:47 +0000
Certificate not after: Mon 26 Jul 2027 17:39:47 +0000
Subordinate resources: IP: 2a05:dfc1:9500::/40
IP: 2a0a:6040:4900::/40
IP: 2a0a:6040:5400::/40
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8b:67:66:3e:98:67:41:a5:aa:c1:f3:e0:07:71:0e:1c:d0:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jul 27 17:34:47 2026 GMT
Not After : Jul 26 17:39:47 2027 GMT
Subject: CN=547F71C62763A22A9156089F2F55B587337FAFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:9b:22:b9:bc:a3:06:7d:12:c8:30:c1:8d:
fb:bd:1f:cb:6a:d1:d5:4f:07:b3:fb:f9:bc:bd:3c:
89:1a:45:1b:95:55:55:0b:90:4e:f9:ab:48:1d:bd:
ca:d5:84:9d:ab:e4:02:55:4f:f4:4c:f1:96:35:be:
60:06:60:84:95:6e:27:6d:16:fe:22:fa:cd:6b:2a:
fd:27:14:6f:54:de:38:30:b4:81:3a:2c:fb:84:3d:
7b:10:4a:f2:8e:85:1e:c9:db:58:b3:2b:13:17:b9:
08:cf:71:a4:29:b3:38:ca:0d:cb:dd:ba:84:cc:eb:
2d:53:7e:56:f2:af:c4:38:7c:0d:b2:bd:62:7d:02:
b7:6f:a1:3b:5d:c0:68:6f:d7:ab:d1:83:98:5e:e7:
15:93:5c:c1:83:77:66:d9:45:14:59:42:89:f4:1b:
82:67:55:d4:57:22:a8:87:eb:42:4a:cc:91:9d:59:
e0:07:bb:63:67:6c:bf:07:e3:15:fa:d0:12:8d:4f:
d1:4e:65:2b:e2:79:d2:76:34:df:0b:75:18:91:0d:
f1:cf:d4:45:73:d4:62:9e:26:46:e6:03:f0:15:b4:
4b:fc:23:2f:7d:0f:b8:bb:c2:92:f8:85:32:01:f7:
87:c4:87:e9:b0:7a:17:2c:1d:af:3e:29:87:32:c1:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9500::/40
2a0a:6040:4900::/40
2a0a:6040:5400::/40
Signature Algorithm: sha256WithRSAEncryption
2f:ca:cc:b2:94:25:0e:7e:e0:ce:42:ad:60:ef:a8:31:a6:11:
f9:85:96:13:04:fd:47:1a:5c:cb:29:a1:3a:e8:79:65:59:f4:
84:ed:dd:fa:57:e9:7e:02:02:0d:43:db:b3:2a:fc:03:a4:20:
67:f9:09:0d:79:f3:1a:04:5e:0c:8a:7c:a5:87:d6:a5:08:01:
4b:76:01:85:27:cc:c6:c9:46:50:96:83:5f:7c:24:77:a0:dc:
e0:9e:48:d6:0b:ac:0d:89:8a:7d:0a:4f:a4:89:3d:4b:97:54:
51:a8:b5:3f:40:b8:98:53:16:d8:22:57:ed:03:16:9d:d1:50:
0a:a5:34:68:43:1d:ae:bd:1c:64:9f:bb:4e:92:4b:1b:5f:43:
ed:b8:34:0e:55:aa:60:c3:2d:82:fa:72:b6:8d:8c:79:f0:2e:
83:a8:95:68:e9:b0:03:a0:d3:28:0b:1b:1c:02:ca:38:9e:8a:
12:7e:df:4f:46:7e:c3:c0:9f:61:39:30:63:8e:3f:5d:b2:59:
21:5d:c5:6b:9d:c7:b0:5a:a1:4a:65:fe:64:d8:49:cc:c4:07:
ad:96:07:92:09:76:07:62:13:90:40:d0:3a:f7:49:99:73:48:
29:80:43:92:45:30:37:d6:7a:4f:5d:4e:64:4e:fa:eb:af:ef:
6e:03:a8:c9
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgIUUItnZj6YZ0GlqsHz4AdxDhzQEW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA3MjcxNzM0NDdaFw0yNzA3MjYxNzM5NDdaMDMxMTAvBgNV
BAMTKDU0N0Y3MUM2Mjc2M0EyMkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sZsiubyjBn0SyDDBjfu9H8tq
0dVPB7P7+by9PIkaRRuVVVULkE75q0gdvcrVhJ2r5AJVT/RM8ZY1vmAGYISVbidt
Fv4i+s1rKv0nFG9U3jgwtIE6LPuEPXsQSvKOhR7J21izKxMXuQjPcaQpszjKDcvd
uoTM6y1Tflbyr8Q4fA2yvWJ9ArdvoTtdwGhv16vRg5he5xWTXMGDd2bZRRRZQon0
G4JnVdRXIqiH60JKzJGdWeAHu2NnbL8H4xX60BKNT9FOZSviedJ2NN8LdRiRDfHP
1EVz1GKeJkbmA/AVtEv8Iy99D7i7wpL4hTIB94fEh+mwehcsHa8+KYcywcS1AgMB
AAGjggL8MIIC+DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUf3HGJ2OiKpFW
CJ8vVbWHM3+vyzAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy
MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw
gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG
M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL
BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3
OGE3Y2EzLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS8wMTc5MWE2NC1hMzZhLTRlYjktYTZmZi1lMWM0
MDc4YTdjYTMvMS81NDdGNzFDNjI3NjNBMjJBOTE1NjA4OUYyRjU1QjU4NzMzN0ZB
RkNCLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl
Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MQYIKwYBBQUHAQcBAf8EIjAgMB4EAgACMBgDBgAqBd/BlQMGACoKYEBJAwYAKgpg
QFQwDQYJKoZIhvcNAQELBQADggEBAC/KzLKUJQ5+4M5CrWDvqDGmEfmFlhME/Uca
XMspoTroeWVZ9ITt3fpX6X4CAg1D27Mq/AOkIGf5CQ158xoEXgyKfKWH1qUIAUt2
AYUnzMbJRlCWg198JHeg3OCeSNYLrA2Jin0KT6SJPUuXVFGotT9AuJhTFtgiV+0D
Fp3RUAqlNGhDHa69HGSfu06SSxtfQ+24NA5VqmDDLYL6craNjHnwLoOolWjpsAOg
0ygLGxwCyjieihJ+309GfsPAn2E5MGOOP12yWSFdxWudx7BaoUpl/mTYSczEB62W
B5IJdgdiE5BA0Dr3SZlzSCmAQ5JFMDfWek9dTmRO+uuv724DqMk=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:33 2026 by rpki-client