$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer (raw, json) Hash identifier: jEE6gmdIlEEFfxtjGn3s58NM+jUgkl3ATDiVTnqb64M= Subject key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6DD8AE5D97E4EDFFCBCF1AD8E0A4C0A87524D6C9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 05 Jul 2025 03:04:34 +0000 Certificate not after: Sat 04 Jul 2026 03:09:34 +0000 Subordinate resources: IP: 2a05:dfc1:8500::/40 IP: 2a05:dfc1:9600::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d8:ae:5d:97:e4:ed:ff:cb:cf:1a:d8:e0:a4:c0:a8:75:24:d6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 5 03:04:34 2025 GMT Not After : Jul 4 03:09:34 2026 GMT Subject: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:db:c1:3f:6b:67:85:47:a0:89:81:73:b5: 45:6d:a6:2f:00:c6:05:ec:fa:ad:04:89:c0:d0:58: 7c:31:b9:d8:d0:e5:4b:f8:96:33:87:60:38:1d:39: ae:f9:29:45:74:61:d1:23:6a:c5:aa:95:54:c9:90: d5:6f:1f:bd:9c:39:ba:5a:8e:1c:d4:ae:9e:88:3a: cb:b1:6d:5f:3a:b9:ae:b4:61:fb:61:62:5f:68:a4: 14:15:b1:7d:9f:6b:58:fd:be:31:06:ad:70:ed:0a: f3:56:1b:f4:f8:7e:ae:7b:ee:5d:e1:70:91:c1:b6: be:35:e2:b6:d5:96:ec:87:90:91:7f:c1:7b:76:ab: 17:23:fe:3c:a4:b0:8f:3f:44:f5:2b:a2:83:b8:24: 89:55:60:e5:5f:50:54:3b:8e:a2:cf:22:a9:41:a4: f7:61:78:12:2f:bf:16:65:91:e5:8b:f6:20:06:12: 7b:b2:42:24:03:fb:6b:d9:e9:b5:70:83:41:cc:d3: 80:44:b5:cc:9f:a7:ac:37:74:8f:79:0d:7e:3d:74: fa:d5:a1:a5:4a:63:f3:f2:8d:b0:e4:9f:ee:bc:85: 05:00:e9:11:f4:80:1a:78:7b:d5:34:2b:bb:6a:a6: 36:80:d3:6f:3e:58:9a:fb:a3:39:91:b2:3f:4f:af: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8500::/40 2a05:dfc1:9600::/40 Signature Algorithm: sha256WithRSAEncryption 06:f1:5f:4f:f8:9d:b7:78:79:76:35:64:ba:0e:31:2a:53:07: 18:a6:b0:3a:ca:e2:25:5c:b3:f1:01:73:4d:68:45:1d:93:e4: cd:a7:63:f1:c3:6c:31:6d:c5:89:b0:8b:53:50:45:c6:b3:0f: 03:52:0a:5d:0c:b6:5c:72:e6:f7:cd:e4:00:3c:fd:cc:73:fb: 2a:8c:33:e6:07:0a:fd:e3:26:ca:dd:d1:a7:b4:48:3c:53:f1: 88:bb:e5:a7:67:27:c8:10:20:a6:cb:c2:2c:12:27:fa:01:b3: 6d:93:be:a2:94:fe:21:f7:2b:81:66:1f:50:86:26:e4:5a:e6: 0e:f1:24:d7:17:62:78:5a:5f:26:f7:5d:de:4f:aa:be:18:72: b3:bd:5e:80:da:2a:63:22:80:bc:26:c8:82:c7:a5:55:4d:7a: 06:f0:6a:8d:51:d7:b1:ac:53:28:d9:ce:45:7c:f0:05:fd:8a: b7:c9:5c:2f:e4:ed:bd:36:f1:66:f9:00:41:f6:32:8a:aa:64: e9:76:85:83:4f:6e:32:53:d9:a4:3b:72:ff:ef:75:58:b5:24: fc:9d:6e:e9:f9:27:54:cb:3e:91:6b:e0:64:68:fc:92:5c:3f: ab:3b:a5:d8:ed:a3:19:4e:c7:a6:a8:bf:1b:3a:5e:1b:d1:92: 59:66:2c:33 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUbdiuXZfk7f/LzxrY4KTAqHUk1skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDUwMzA0MzRaFw0yNjA3MDQwMzA5MzRaMDMxMTAvBgNV BAMTKENDNkVDQzQ2MjBDMzMyOThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYtvBP2tnhUegiYFztUVtpi8A xgXs+q0EicDQWHwxudjQ5Uv4ljOHYDgdOa75KUV0YdEjasWqlVTJkNVvH72cObpa jhzUrp6IOsuxbV86ua60YfthYl9opBQVsX2fa1j9vjEGrXDtCvNWG/T4fq577l3h cJHBtr414rbVluyHkJF/wXt2qxcj/jyksI8/RPUrooO4JIlVYOVfUFQ7jqLPIqlB pPdheBIvvxZlkeWL9iAGEnuyQiQD+2vZ6bVwg0HM04BEtcyfp6w3dI95DX49dPrV oaVKY/PyjbDkn+68hQUA6RH0gBp4e9U0K7tqpjaA028+WJr7ozmRsj9Pr6cFAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMbsxGIMMymLqu 8XCa1tBZXNJWXDAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUx YWU1NjRhLzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEy ZTFhZTU2NGEvMy9DQzZFQ0M0NjIwQzMzMjk4QkFBRUYxNzA5QUQ2RDA1OTVDRDI1 NjVDLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqBd/BhQMGACoF38GWMA0GCSqG SIb3DQEBCwUAA4IBAQAG8V9P+J23eHl2NWS6DjEqUwcYprA6yuIlXLPxAXNNaEUd k+TNp2Pxw2wxbcWJsItTUEXGsw8DUgpdDLZccub3zeQAPP3Mc/sqjDPmBwr94ybK 3dGntEg8U/GIu+WnZyfIECCmy8IsEif6AbNtk76ilP4h9yuBZh9QhibkWuYO8STX F2J4Wl8m913eT6q+GHKzvV6A2ipjIoC8JsiCx6VVTXoG8GqNUdexrFMo2c5FfPAF /Yq3yVwv5O29NvFm+QBB9jKKqmTpdoWDT24yU9mkO3L/73VYtST8nW7p+SdUyz6R a+BkaPySXD+rO6XY7aMZTsemqL8bOl4b0ZJZZiwz -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:01 2025 by rpki-client