$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer (raw, json) Hash identifier: GtalphIDN43l5Yudl1s6UxfOFu4AWyqi+YnTJy7wI4A= Subject key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 538534E2885AB7838B5AB902DD19B4BDAC8FC490 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 23:19:18 +0000 Certificate not after: Fri 05 Feb 2027 23:24:18 +0000 Subordinate resources: IP: 2a0a:6040:1100::/40 IP: 2a0a:6040:3f00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:85:34:e2:88:5a:b7:83:8b:5a:b9:02:dd:19:b4:bd:ac:8f:c4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Feb 6 23:19:18 2026 GMT Not After : Feb 5 23:24:18 2027 GMT Subject: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:eb:7b:94:5a:c7:3f:62:be:97:83:29:24:5a: 72:3b:82:9d:7a:5a:ca:be:00:e9:d8:0b:ed:0c:1a: d6:4d:a0:4c:fe:3c:a3:ca:2f:40:f4:a5:ef:68:bd: 86:ea:20:17:02:04:18:5e:6b:f8:76:c4:24:9a:32: e6:8d:87:05:80:2b:f2:9c:68:10:9c:08:7f:d2:1e: 3c:5f:44:a1:27:1a:19:3c:24:48:de:67:c2:d5:ee: f2:2d:7c:34:dc:fc:88:01:f4:77:f8:8f:22:37:7e: 11:31:4e:2d:97:f0:07:56:14:cf:72:03:da:f5:73: 20:b4:5e:de:b6:35:79:1e:9a:c5:bd:bd:5f:4a:0e: be:3e:f1:60:87:47:6b:ca:bd:fb:1d:9a:19:4d:22: d9:22:79:20:14:8e:ed:d6:55:52:41:4a:f0:72:2a: f2:90:e3:3f:fd:73:68:93:1b:4f:d2:ba:03:a6:e0: 14:b9:da:ff:b5:ea:2c:f2:8a:18:4b:14:59:19:26: ef:ae:16:60:00:f1:e6:95:61:33:36:47:b9:24:34: 24:fc:b8:2d:6f:77:48:4d:48:93:f3:3c:3d:18:43: aa:f2:82:a1:68:09:ec:ec:53:1b:4e:3c:d8:d6:0a: 5d:5a:1a:7c:b1:f0:28:45:7c:33:00:59:a6:aa:70: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1100::/40 2a0a:6040:3f00::/40 Signature Algorithm: sha256WithRSAEncryption 86:7c:e1:94:51:dd:58:77:cd:ac:75:f6:83:f7:74:5e:dd:f8: 17:c8:86:34:be:48:c5:2e:86:ba:c7:f5:e4:31:9a:84:c2:ce: 65:6e:19:97:1b:de:11:3d:d8:51:2d:e5:2c:a4:f8:bb:08:82: 66:6d:87:d1:a1:b8:6a:63:82:67:57:d5:a4:b7:43:ac:12:f1: 9a:87:4a:18:21:3c:40:e0:b6:c8:df:03:0c:22:f3:d5:0e:78: f4:c9:87:0a:1d:b1:84:df:d8:73:4a:bc:31:f1:d3:df:88:c2: f6:2e:02:54:fd:c5:2a:9a:8a:50:30:39:0a:db:71:c9:ca:5f: e0:60:be:ee:b7:ba:d8:fb:3e:dc:bb:73:ea:d0:73:cb:af:f2: b7:f8:33:a3:38:e8:fb:66:df:16:76:1e:e9:ca:54:61:97:72: 94:eb:37:29:da:38:24:e4:c6:25:0a:8c:c7:b5:66:4d:7d:5c: 00:a2:30:f6:f9:7c:14:e5:7d:7a:be:b5:f5:db:51:08:f3:1b: 1a:f0:75:6d:32:13:57:39:38:8f:e4:06:3b:38:4b:b2:c0:24: 05:ef:a2:8b:ef:8e:e3:fb:02:43:4e:8e:cf:98:8f:50:b3:04: f6:d2:4d:6e:c0:5d:1b:29:75:6b:a1:3f:1f:11:df:88:b8:1e: 36:d1:5f:b0 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUU4U04ohat4OLWrkC3Rm0vayPxJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjAyMDYyMzE5MThaFw0yNzAyMDUyMzI0MThaMDMxMTAvBgNV BAMTKDZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn63uUWsc/Yr6XgykkWnI7gp16 Wsq+AOnYC+0MGtZNoEz+PKPKL0D0pe9ovYbqIBcCBBhea/h2xCSaMuaNhwWAK/Kc aBCcCH/SHjxfRKEnGhk8JEjeZ8LV7vItfDTc/IgB9Hf4jyI3fhExTi2X8AdWFM9y A9r1cyC0Xt62NXkemsW9vV9KDr4+8WCHR2vKvfsdmhlNItkieSAUju3WVVJBSvBy KvKQ4z/9c2iTG0/SugOm4BS52v+16izyihhLFFkZJu+uFmAA8eaVYTM2R7kkNCT8 uC1vd0hNSJPzPD0YQ6rygqFoCezsUxtOPNjWCl1aGnyx8ChFfDMAWaaqcM2FAgMB AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRu+N+LdMXYu2c3 7ELOAyq0sD4MUTAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAUIGCCsGAQUFBwEL BIIBNDCCATAwYAYIKwYBBQUHMAWGVHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFm ZDJiZTRlLzEwLzCBjQYIKwYBBQUHMAqGgYByc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5 Y2QxZmQyYmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIw M0UwQzUxLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5y aXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAEQMGACoKYEA/MA0G CSqGSIb3DQEBCwUAA4IBAQCGfOGUUd1Yd82sdfaD93Re3fgXyIY0vkjFLoa6x/Xk MZqEws5lbhmXG94RPdhRLeUspPi7CIJmbYfRobhqY4JnV9Wkt0OsEvGah0oYITxA 4LbI3wMMIvPVDnj0yYcKHbGE39hzSrwx8dPfiML2LgJU/cUqmopQMDkK23HJyl/g YL7ut7rY+z7cu3Pq0HPLr/K3+DOjOOj7Zt8Wdh7pylRhl3KU6zcp2jgk5MYlCozH tWZNfVwAojD2+XwU5X16vrX121EI8xsa8HVtMhNXOTiP5AY7OEuywCQF76KL747j +wJDTo7PmI9QswT20k1uwF0bKXVroT8fEd+IuB420V+w -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:11 2026 by rpki-client