$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer File: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer (raw, json) Hash identifier: L+tJrUC9qi3hqraFttOLqZD6EpkzQi1EcSpRh14D7lo= Subject key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 4098C93AC5C8DEDEE332D4FA2DDA578EF321D5E8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 06 Jun 2026 05:37:01 +0000 Certificate not after: Sat 05 Jun 2027 05:42:01 +0000 Subordinate resources: IP: 2a06:9f81:3000::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:98:c9:3a:c5:c8:de:de:e3:32:d4:fa:2d:da:57:8e:f3:21:d5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 6 05:37:01 2026 GMT Not After : Jun 5 05:42:01 2027 GMT Subject: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:bd:de:3b:d7:37:db:6b:80:9f:3d:5e:ac: 4e:31:78:1c:fd:4c:af:8e:be:f6:e1:eb:98:c1:95: ce:cb:0a:2e:d2:ef:57:f3:85:f2:9a:68:14:cc:f4: a2:29:b1:c7:65:1c:69:85:a8:e8:9c:95:a7:aa:ff: 49:f0:21:91:87:d6:db:94:23:81:54:38:e5:48:b1: 0f:84:8d:68:78:d8:76:c6:85:9b:b5:44:2e:a6:5b: 41:db:91:d7:40:f3:26:8c:82:2b:21:db:da:4c:be: 4e:e0:ca:c3:a0:03:c5:b3:eb:71:1e:e4:01:ee:56: 50:e6:1f:bb:a2:42:4d:11:65:95:66:94:5d:bc:3d: 3e:0d:0d:00:01:48:23:d3:b4:d6:da:76:cd:a8:3f: a8:6f:7c:61:6b:88:27:64:9a:a5:4c:f9:d5:dd:eb: 7a:91:d6:39:09:ac:b3:3a:14:ee:31:c6:be:1f:dd: 5e:b0:59:6d:28:96:72:13:cc:d7:81:28:4b:6d:9b: c8:94:38:bb:ce:06:4c:be:46:46:ad:fe:a2:45:63: af:de:25:40:0f:1a:3f:c9:12:ab:de:de:4f:6d:3a: 57:cf:63:7b:de:97:61:d6:15:00:08:86:8d:3d:52: 1e:ed:96:36:79:7b:08:a2:6e:0f:6d:cc:ae:58:d7: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3000::/40 Signature Algorithm: sha256WithRSAEncryption 90:5c:72:95:4b:88:a4:26:4c:11:5a:24:a8:a0:e1:36:ee:88: b4:69:90:43:b2:b8:10:a2:6b:64:21:d5:d1:1a:4c:9a:2c:68: ae:0f:b6:65:1c:54:1a:da:8f:25:5a:1f:12:70:c4:f0:cf:89: e6:be:53:89:3b:32:35:8c:12:66:5f:72:99:19:54:94:f6:e6: d8:93:04:bc:68:bd:6e:8a:f9:05:78:81:63:ac:fe:d0:0a:e9: b7:ae:f6:81:60:ba:fa:e6:d0:40:0a:3c:e3:8a:2f:3a:b4:16: c9:9c:2d:c1:ad:26:c0:84:bc:80:6a:33:6d:a7:b3:62:f3:73: fc:f0:2e:f5:44:1e:46:6f:a4:a6:21:66:36:14:d2:31:12:61: 5b:7c:d0:56:80:8b:1c:92:c6:0b:29:c6:61:41:48:d1:be:0a: ff:07:ba:6c:66:c3:7c:fb:be:93:bd:fd:f7:4a:46:f0:f8:7a: a1:94:28:57:ee:45:ea:75:81:c0:f1:10:28:51:55:58:09:a7: 15:b3:29:4e:fc:4f:b3:5c:34:b0:24:e6:d4:71:06:c3:9c:a8: cb:85:62:e1:57:f4:7a:02:ac:3b:7b:d3:84:3d:4f:6a:92:6a: 2e:b6:1b:65:ad:95:62:0e:1a:66:fe:70:46:99:4d:45:35:f0: 25:60:5a:d6 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUQJjJOsXI3t7jMtT6LdpXjvMh1egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDYwNTM3MDFaFw0yNzA2MDUwNTQyMDFaMDMxMTAvBgNV BAMTKDcyRDFEREUxQjFCMDQ1RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAb3eO9c322uAnz1erE4xeBz9 TK+Ovvbh65jBlc7LCi7S71fzhfKaaBTM9KIpscdlHGmFqOiclaeq/0nwIZGH1tuU I4FUOOVIsQ+EjWh42HbGhZu1RC6mW0HbkddA8yaMgish29pMvk7gysOgA8Wz63Ee 5AHuVlDmH7uiQk0RZZVmlF28PT4NDQABSCPTtNbads2oP6hvfGFriCdkmqVM+dXd 63qR1jkJrLM6FO4xxr4f3V6wWW0olnITzNeBKEttm8iUOLvOBky+Rkat/qJFY6/e JUAPGj/JEqve3k9tOlfPY3vel2HWFQAIho09Uh7tljZ5ewiibg9tzK5Y17AdAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRy0d3hsbBF2L5D nd0QFIbmcXyTzDAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhm MTg4N2YyLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kNjRhYzk0MS01YTdjLTQyY2YtYjY0Yi0wYjI4 OGYxODg3ZjIvMS83MkQxRERFMUIxQjA0NUQ4QkU0MzlEREQxMDE0ODZFNjcxN0M5 M0NDLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BMDANBgkqhkiG9w0BAQsF AAOCAQEAkFxylUuIpCZMEVokqKDhNu6ItGmQQ7K4EKJrZCHV0RpMmixorg+2ZRxU GtqPJVofEnDE8M+J5r5TiTsyNYwSZl9ymRlUlPbm2JMEvGi9bor5BXiBY6z+0Arp t672gWC6+ubQQAo844ovOrQWyZwtwa0mwIS8gGozbaezYvNz/PAu9UQeRm+kpiFm NhTSMRJhW3zQVoCLHJLGCynGYUFI0b4K/we6bGbDfPu+k73990pG8Ph6oZQoV+5F 6nWBwPEQKFFVWAmnFbMpTvxPs1w0sCTm1HEGw5yoy4Vi4Vf0egKsO3vThD1PapJq LrYbZa2VYg4aZv5wRplNRTXwJWBa1g== -----END CERTIFICATE-----Generated at Sat Jun 13 13:08:02 2026 by rpki-client