
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
File: BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer (raw, json)
Hash identifier: 3kK5Go3mI3chRjYiWUnbiCAHYq7Np5D3VvgN2175+fM=
Subject key identifier: BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 78D857C2CAEA7F0F9BEB6EA2C39121A256B495B3
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
caRepository: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/
Notify URL: https://krill.accuristechnologies.ca/rrdp/notification.xml
Certificate not before: Fri 04 Jul 2025 15:23:15 +0000
Certificate not after: Fri 03 Jul 2026 15:28:15 +0000
Subordinate resources: IP: 2a0a:6040:1500::/40
IP: 2a0a:6040:6d00::/40
IP: 2a0a:6040:c500::/40
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d8:57:c2:ca:ea:7f:0f:9b:eb:6e:a2:c3:91:21:a2:56:b4:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jul 4 15:23:15 2025 GMT
Not After : Jul 3 15:28:15 2026 GMT
Subject: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:ee:f9:11:d4:ac:8d:52:0b:27:03:e5:b2:
d4:cd:48:a5:b5:e7:f0:7e:f7:fa:9e:6c:3f:13:0e:
c8:79:1c:2f:bc:82:6c:51:2a:49:89:88:dc:d8:97:
f2:15:f3:a3:88:5a:11:e9:ec:b2:e0:35:e5:c8:5e:
8d:02:9f:f7:1a:de:c5:68:7b:cb:9b:e3:f7:1d:55:
a4:ae:30:49:f6:b9:89:f4:6f:6b:c3:12:d6:de:02:
a0:2c:53:04:da:30:0a:7e:cd:25:53:00:e4:63:fb:
f4:c5:2c:b6:33:0f:92:68:8e:6c:5c:a2:4e:9c:c7:
dd:bf:7e:ed:9c:25:90:4c:ef:75:84:4c:80:59:0e:
ad:dc:1e:05:b6:10:ef:b1:29:10:00:07:6d:ae:c7:
16:7f:69:b5:57:cf:d2:36:2d:82:92:c3:c5:33:87:
0c:4a:cb:11:15:dd:cf:d3:0b:e3:12:c6:a2:11:2d:
0c:4b:77:29:d3:25:d4:d2:fb:70:a5:0f:69:e2:15:
f7:8b:a3:4a:2d:7a:b8:09:8b:52:d4:03:8c:bd:14:
7f:7d:c1:a1:ca:07:4b:72:06:0c:43:3e:33:68:26:
99:3f:64:ce:a3:4b:70:99:c7:74:91:d1:06:7a:5a:
98:b9:54:a9:3b:3a:52:00:22:91:79:30:2d:d4:e4:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
CA Repository - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/
RPKI Manifest - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
RPKI Notify - URI:https://krill.accuristechnologies.ca/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:1500::/40
2a0a:6040:6d00::/40
2a0a:6040:c500::/40
Signature Algorithm: sha256WithRSAEncryption
28:c8:76:8b:03:5c:c3:be:6a:10:61:44:92:cd:8d:bb:df:22:
34:bb:f5:18:dd:6c:89:c6:73:8f:08:10:8b:0e:bc:07:e6:9f:
ae:aa:44:7f:af:10:e3:04:bf:9f:95:63:c7:0c:34:89:a5:95:
83:e6:3f:d2:67:11:79:cf:52:ad:a5:13:8d:6d:69:2c:82:90:
6a:10:f1:38:c7:e3:83:e5:aa:a1:d3:83:14:f8:92:90:e9:d9:
4b:1f:79:62:60:b1:aa:6b:76:f3:40:60:c6:a8:59:a8:cb:b5:
04:95:36:76:61:46:bf:80:68:29:ad:d9:d9:25:e8:8b:bd:f1:
cb:04:1b:25:92:df:8a:49:cb:fc:f7:cc:0e:4a:39:d5:cb:a7:
78:e3:90:40:f9:c3:db:fe:44:2a:e7:4a:a2:b6:22:ef:4b:3c:
02:b1:61:6b:d2:02:da:ee:60:28:fd:6e:53:be:03:55:3f:46:
65:6f:1f:ef:c6:af:ed:62:f1:d2:68:35:5c:50:7d:a7:72:27:
47:92:22:44:89:ed:61:57:07:03:e0:b2:b6:ea:1e:77:e7:98:
34:67:4e:a5:af:25:8e:18:1b:16:4b:2a:97:8c:f3:a5:ac:2d:
aa:41:e3:10:ac:eb:ed:83:45:0d:f7:82:a0:1d:69:ef:49:09:
6e:98:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:54 2025 by rpki-client