
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
File: B729F0C7BF295C6844FD328B324A1ED8598032F9.cer (raw, json)
Hash identifier: Uorb0EOSc/Jn2PJYdnDZTdcWl3sAK9SrDHee0P+cfHg=
Subject key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 7C087683928A40150AF22C282F8CC6217DC0325E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 04 Jul 2025 18:52:55 +0000
Certificate not after: Fri 03 Jul 2026 18:57:55 +0000
Subordinate resources: IP: 2a05:dfc1:8200::/40
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:08:76:83:92:8a:40:15:0a:f2:2c:28:2f:8c:c6:21:7d:c0:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jul 4 18:52:55 2025 GMT
Not After : Jul 3 18:57:55 2026 GMT
Subject: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:42:17:40:5e:e5:b1:ca:4a:44:51:e4:fb:
34:21:34:bd:2c:ac:49:48:d3:df:af:dd:a4:4d:a5:
45:0f:b8:cc:4c:3b:ea:05:7b:ac:0b:9a:f7:b4:ad:
d7:9f:1d:13:f4:db:68:0e:7d:44:38:8b:f7:84:bf:
71:6f:90:e3:70:ec:5e:d6:75:71:45:d8:6c:23:b8:
15:98:9b:44:12:17:6a:84:b5:b8:c9:d9:65:b9:b1:
f3:9d:c6:bd:5e:01:1a:79:da:4c:a5:31:04:12:49:
fa:47:0c:04:c3:ce:77:59:17:a3:2b:7c:4c:b8:a3:
f0:e5:87:8b:d0:8e:a4:f2:70:7e:49:46:6f:a1:45:
bc:93:2f:65:6a:05:6f:2a:8a:1c:f4:c4:63:e0:d1:
ff:f2:4d:93:c0:95:1d:74:f1:6e:3e:d5:d4:a1:7e:
18:3a:c9:90:a2:bf:fa:d3:74:bd:96:de:0f:2a:52:
de:2d:e7:de:c9:64:c9:55:63:99:18:91:ef:a6:c0:
62:00:b1:bd:8a:0f:c9:59:b1:38:2f:08:00:51:10:
fc:4d:0d:49:04:20:cc:b0:21:72:b9:5f:ad:11:8a:
5f:3b:33:13:a6:cf:f5:67:fc:32:d1:a5:a7:91:db:
bd:6d:f4:a6:de:59:84:81:28:ec:ae:8f:33:05:e1:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8200::/40
Signature Algorithm: sha256WithRSAEncryption
5e:b4:92:2c:27:b5:5b:b8:0e:d8:18:58:93:45:82:1a:72:0a:
31:22:7e:75:22:f3:77:e0:76:cc:e4:58:62:3c:33:66:ef:51:
59:5e:16:09:7b:7d:a4:54:7c:63:58:f2:50:ed:41:d7:99:f3:
e8:b9:20:55:c0:65:ec:5b:78:0f:79:87:09:2f:53:4a:31:95:
13:4a:33:8e:ae:1e:9b:2c:dc:09:ac:6e:e0:ba:fd:8f:5a:ba:
2b:00:56:46:b8:89:61:c5:eb:86:34:ad:bd:a9:7b:77:af:45:
a6:58:f5:f8:ef:dc:e8:2f:94:bf:e9:48:a3:c7:59:30:fe:c9:
ac:57:a4:f0:4a:8b:a7:6d:5b:a5:0e:ae:c8:a0:17:dc:d9:4b:
5c:1c:9a:a7:6d:7d:42:fd:df:84:00:40:92:f4:a7:94:a5:e0:
78:42:f3:a6:a4:3c:43:cb:2a:79:ef:b0:d6:f6:18:43:09:63:
2d:c8:39:b8:cf:c6:c6:e6:7a:59:02:8f:8a:6b:24:d9:3b:1d:
91:22:13:4f:f0:51:2e:54:47:1f:66:50:9a:03:79:17:54:2f:
2a:06:22:8a:49:22:c3:66:33:19:d7:7b:79:f0:4e:f0:33:c5:
be:a9:2c:b0:44:2d:f6:60:5d:0b:f4:d9:b5:17:16:1e:81:81:
9a:f0:40:e9
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUfAh2g5KKQBUK8iwoL4zGIX3AMl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQxODUyNTVaFw0yNjA3MDMxODU3NTVaMDMxMTAvBgNV
BAMTKEI3MjlGMEM3QkYyOTVDNjg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYkIXQF7lscpKRFHk+zQhNL0s
rElI09+v3aRNpUUPuMxMO+oFe6wLmve0rdefHRP022gOfUQ4i/eEv3FvkONw7F7W
dXFF2GwjuBWYm0QSF2qEtbjJ2WW5sfOdxr1eARp52kylMQQSSfpHDATDzndZF6Mr
fEy4o/Dlh4vQjqTycH5JRm+hRbyTL2VqBW8qihz0xGPg0f/yTZPAlR108W4+1dSh
fhg6yZCiv/rTdL2W3g8qUt4t597JZMlVY5kYke+mwGIAsb2KD8lZsTgvCABREPxN
DUkEIMywIXK5X60Ril87MxOmz/Vn/DLRpaeR271t9KbeWYSBKOyujzMF4XozAgMB
AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3KfDHvylcaET9
MosySh7YWYAy+TAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy
MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw
gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG
M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL
BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVk
MTNkOGVmLzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1jMzJkLTQ3Y2UtODk0My0wNzUy
ZWQxM2Q4ZWYvMy9CNzI5RjBDN0JGMjk1QzY4NDRGRDMyOEIzMjRBMUVEODU5ODAz
MkY5Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl
Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BgjANBgkqhkiG9w0BAQsF
AAOCAQEAXrSSLCe1W7gO2BhYk0WCGnIKMSJ+dSLzd+B2zORYYjwzZu9RWV4WCXt9
pFR8Y1jyUO1B15nz6LkgVcBl7Ft4D3mHCS9TSjGVE0ozjq4emyzcCaxu4Lr9j1q6
KwBWRriJYcXrhjStval7d69Fplj1+O/c6C+Uv+lIo8dZMP7JrFek8EqLp21bpQ6u
yKAX3NlLXByap219Qv3fhABAkvSnlKXgeELzpqQ8Q8sqee+w1vYYQwljLcg5uM/G
xuZ6WQKPimsk2TsdkSITT/BRLlRHH2ZQmgN5F1QvKgYiikkiw2YzGdd7efBO8DPF
vqkssEQt9mBdC/TZtRcWHoGBmvBA6Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:52:10 2025 by rpki-client