$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer (raw, json) Hash identifier: p39t4SYkY1e6FpFE+5vKgVCfyhx9w4oSeMGYppX6o28= Subject key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1C98E03BAC976CD6823078F16A8FE1A5E4893988 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 20 Sep 2026 08:08:21 +0000 Certificate not after: Sun 19 Sep 2027 08:13:21 +0000 Subordinate resources: IP: 2a0a:6040:4400::/40 IP: 2a0a:6040:c200::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 12:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:98:e0:3b:ac:97:6c:d6:82:30:78:f1:6a:8f:e1:a5:e4:89:39:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Sep 20 08:08:21 2026 GMT Not After : Sep 19 08:13:21 2027 GMT Subject: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:20:f3:bc:61:a8:c8:92:21:ca:a6:2c:bf: 77:9e:0a:6e:ed:e1:0a:49:41:34:3b:6b:cc:75:72: 13:d2:77:bc:7a:8a:2c:22:a2:41:eb:dc:18:e9:90: a4:4c:9d:b8:fd:a1:20:3a:80:58:d2:73:8f:c4:4f: 90:75:ea:9b:f9:38:75:ff:b0:e0:db:19:5b:05:32: ea:b2:9a:86:57:4e:dd:cf:26:ea:cd:c1:12:e7:dc: 25:d5:85:fa:7f:db:22:2b:56:f5:02:96:76:69:23: 10:a5:6b:dc:76:37:01:64:e9:dc:c3:26:9a:32:3a: 9b:f5:e1:0a:75:53:08:d3:e3:51:30:90:54:dc:fd: 7d:31:59:77:e2:66:1f:ac:1d:f6:22:39:bd:fc:62: 9f:50:78:f7:93:ab:a2:0f:fc:de:b1:43:e8:05:35: f2:5f:e3:3f:a5:07:7f:71:38:94:86:7b:fd:df:b4: 1f:9b:32:04:4e:46:76:8a:b1:d1:13:8d:c3:8b:47: 25:1d:1b:7d:a5:68:6e:d7:74:86:15:c4:3c:47:7a: 55:7e:7a:e0:8a:44:25:a0:a1:9b:ee:76:55:01:01: 3e:4e:1d:8a:64:78:36:cf:64:cf:0e:c0:e5:e9:42: 38:92:38:d7:e2:40:6f:7b:dd:37:dd:9f:d0:f4:b8: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4400::/40 2a0a:6040:c200::/40 Signature Algorithm: sha256WithRSAEncryption 20:f1:b4:2a:00:c2:1a:8f:4c:3f:96:2c:b2:df:35:b9:ed:06: 89:f3:97:e4:25:39:78:74:6e:d5:c6:6f:77:58:15:10:47:56: 41:40:73:c0:3e:3e:62:25:e7:d2:d6:99:39:ca:9e:ff:59:66: 2c:f1:1e:39:e1:ad:91:24:b6:60:bb:a4:02:2d:50:58:a1:30: e5:d9:cb:c0:03:02:f3:e5:26:e8:07:a7:80:f5:ad:03:76:0e: e1:88:01:d3:9e:48:27:48:a9:ed:a5:7e:90:ca:f3:00:52:61: 6a:b7:cc:a5:f1:e0:28:88:5e:b6:78:dc:74:99:78:96:e9:09: 24:e2:df:21:70:ed:41:6e:9d:ee:84:82:d7:c7:d6:d0:00:4c: 34:be:cc:d9:5e:cd:40:4d:66:a3:c1:35:b4:90:cd:9a:ee:69: 6d:ed:0e:cd:d9:b1:6c:ed:6d:2f:5a:a2:60:65:4b:bb:ba:55: 24:db:92:d0:0c:30:20:aa:c8:20:6e:20:f0:8f:75:49:ac:97: bd:8a:56:d1:14:c5:7f:d1:0b:08:74:eb:50:d1:22:99:29:79: cf:46:51:f4:71:37:65:69:d1:60:31:f5:ea:b4:f9:c2:f9:82: b3:17:7a:ca:0d:a4:e6:52:88:a0:60:82:79:b2:b9:36:25:eb: 6e:72:21:62 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUHJjgO6yXbNaCMHjxao/hpeSJOYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA5MjAwODA4MjFaFw0yNzA5MTkwODEzMjFaMDMxMTAvBgNV BAMTKDY5ODZEQzgyODEyQzQ3REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3CDzvGGoyJIhyqYsv3eeCm7t 4QpJQTQ7a8x1chPSd7x6iiwiokHr3BjpkKRMnbj9oSA6gFjSc4/ET5B16pv5OHX/ sODbGVsFMuqymoZXTt3PJurNwRLn3CXVhfp/2yIrVvUClnZpIxCla9x2NwFk6dzD JpoyOpv14Qp1UwjT41EwkFTc/X0xWXfiZh+sHfYiOb38Yp9QePeTq6IP/N6xQ+gF NfJf4z+lB39xOJSGe/3ftB+bMgRORnaKsdETjcOLRyUdG32laG7XdIYVxDxHelV+ euCKRCWgoZvudlUBAT5OHYpkeDbPZM8OwOXpQjiSONfiQG973Tfdn9D0uGa1AgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRphtyCgSxH2hSZ S45ucnty4LL42DAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJk ZGVkOGM0LzkvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1lNWMzLTQ4ZjktYjJlZS0zNmE5 YmRkZWQ4YzQvOS82OTg2REM4MjgxMkM0N0RBMTQ5OTRCOEU2RTcyN0I3MkUwQjJG OEQ4Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBARAMGACoKYEDCMA0GCSqG SIb3DQEBCwUAA4IBAQAg8bQqAMIaj0w/liyy3zW57QaJ85fkJTl4dG7Vxm93WBUQ R1ZBQHPAPj5iJefS1pk5yp7/WWYs8R454a2RJLZgu6QCLVBYoTDl2cvAAwLz5Sbo B6eA9a0Ddg7hiAHTnkgnSKntpX6QyvMAUmFqt8yl8eAoiF62eNx0mXiW6Qkk4t8h cO1Bbp3uhILXx9bQAEw0vszZXs1ATWajwTW0kM2a7mlt7Q7N2bFs7W0vWqJgZUu7 ulUk25LQDDAgqsggbiDwj3VJrJe9ilbRFMV/0QsIdOtQ0SKZKXnPRlH0cTdladFg MfXqtPnC+YKzF3rKDaTmUoigYIJ5srk2JetuciFi -----END CERTIFICATE-----Generated at Sun Sep 20 19:30:31 2026 by rpki-client