$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer File: FF4F1D48A6088FEC5ED73270F82068A436391A71.cer (raw, json) Hash identifier: bfrMZ4fGBTCKzgGF9e3cXtU6+31f0QftaYHt60i3L0A= Subject key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 098531206E42FC676668A613502832B41A78CEC6 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 16 Jul 2025 01:43:01 +0000 Certificate not after: Wed 15 Jul 2026 01:48:01 +0000 Subordinate resources: IP: 2a05:dfc1:3500:: -- 2a05:dfc1:36ff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:85:31:20:6e:42:fc:67:66:68:a6:13:50:28:32:b4:1a:78:ce:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 16 01:43:01 2025 GMT Not After : Jul 15 01:48:01 2026 GMT Subject: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:45:a2:0c:a3:b8:3d:f2:d7:b7:15:52:bc: a2:95:65:07:36:c9:d8:4b:17:70:37:85:62:62:5d: fa:74:30:37:53:51:93:95:be:66:7c:73:29:f8:c9: 35:e7:c7:4e:44:1b:51:79:33:19:ed:ce:0f:16:9e: 4e:a1:82:26:e2:cc:fd:34:60:a5:ea:1f:d5:97:ae: 22:12:57:f1:c7:ea:56:87:1d:a3:7a:5c:53:21:6e: 26:a9:d0:0f:57:6f:9a:1f:53:ed:18:9d:66:0b:cd: 61:0f:34:83:78:f1:14:4a:10:a3:aa:54:45:bc:8a: bd:c2:2a:6f:4b:c3:9f:bf:29:c0:11:48:81:a1:bd: 2f:c1:19:f5:0d:00:11:03:29:65:ca:eb:a7:92:8b: 65:b8:74:50:c6:f0:d8:b6:82:df:1c:db:a9:e1:75: a7:ba:59:0d:a9:5f:d9:2e:3d:d1:86:85:44:89:2d: 09:09:15:c0:dc:af:02:2b:49:57:b4:48:fc:c9:8d: b7:c9:15:3a:7e:d2:81:00:a1:ce:f6:8d:f7:0f:58: 8a:ea:85:34:eb:89:3a:47:fa:13:d4:86:7e:6e:34: c1:f2:09:1f:e5:7b:fb:15:55:de:a6:3d:ea:15:9d: 3d:1b:b6:0c:9b:4c:fd:73:b5:20:f7:4c:d5:2d:dd: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3500::-2a05:dfc1:36ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 15:e0:b4:c1:71:73:d1:3d:a7:09:07:96:33:0d:64:51:7a:bc: 64:d8:7f:b6:a1:0b:3e:e0:65:64:72:b5:06:a3:7b:6f:c1:c9: 9e:1f:ca:4f:ce:33:6b:cb:10:52:c2:42:7b:db:1a:0e:73:c4: fa:9f:fe:53:45:d3:ef:01:a7:a8:c5:0e:e0:8a:ec:62:15:b2: 81:79:17:c8:28:dd:2c:e2:30:81:8b:a9:3a:30:2c:e5:b0:27: 59:47:c6:9d:c2:50:73:25:81:00:53:78:a5:85:57:01:cf:6b: ed:12:fa:67:89:62:15:27:d2:c9:bb:54:d6:9d:0f:0f:67:2d: ef:b1:1d:70:d0:ee:97:0c:71:0b:61:29:42:72:2f:3a:6b:43: b4:6e:54:de:45:be:f2:64:8c:6a:11:a1:cf:0f:33:af:c4:52: 9d:43:79:60:6f:b0:a4:52:45:1f:91:85:02:d4:a6:d2:2b:55: 38:58:98:ac:89:f8:36:8b:a7:29:d5:56:75:29:00:41:11:99: 78:e5:4a:3a:0e:2d:4b:c4:76:37:bd:dd:4e:31:a7:29:9c:dc: 52:9a:8d:da:d2:02:87:62:11:1f:45:f6:f4:fe:f1:08:79:5e: fa:87:a6:7f:e9:02:70:92:5a:d1:17:3c:2d:7b:f4:68:6c:c9: 5a:24:3d:5b -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIUCYUxIG5C/GdmaKYTUCgytBp4zsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MTYwMTQzMDFaFw0yNjA3MTUwMTQ4MDFaMDMxMTAvBgNV BAMTKEZGNEYxRDQ4QTYwODhGRUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNkWiDKO4PfLXtxVSvKKVZQc2 ydhLF3A3hWJiXfp0MDdTUZOVvmZ8cyn4yTXnx05EG1F5Mxntzg8Wnk6hgibizP00 YKXqH9WXriISV/HH6laHHaN6XFMhbiap0A9Xb5ofU+0YnWYLzWEPNIN48RRKEKOq VEW8ir3CKm9Lw5+/KcARSIGhvS/BGfUNABEDKWXK66eSi2W4dFDG8Ni2gt8c26nh dae6WQ2pX9kuPdGGhUSJLQkJFcDcrwIrSVe0SPzJjbfJFTp+0oEAoc72jfcPWIrq hTTriTpH+hPUhn5uNMHyCR/le/sVVd6mPeoVnT0btgybTP1ztSD3TNUt3UVHAgMB AAGjggL2MIIC8jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/Tx1IpgiP7F7X MnD4IGikNjkacTAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1 MzA5NzMyLzIvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yMmE4MDY4Mi1jNTRjLTRkNWEtOTQ1Ni1iMjM5 MjUzMDk3MzIvMi9GRjRGMUQ0OEE2MDg4RkVDNUVENzMyNzBGODIwNjhBNDM2Mzkx QTcxLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIwEAMGACoF38E1AwYAKgXfwTYwDQYJ KoZIhvcNAQELBQADggEBABXgtMFxc9E9pwkHljMNZFF6vGTYf7ahCz7gZWRytQaj e2/ByZ4fyk/OM2vLEFLCQnvbGg5zxPqf/lNF0+8Bp6jFDuCK7GIVsoF5F8go3Szi MIGLqTowLOWwJ1lHxp3CUHMlgQBTeKWFVwHPa+0S+meJYhUn0sm7VNadDw9nLe+x HXDQ7pcMcQthKUJyLzprQ7RuVN5FvvJkjGoRoc8PM6/EUp1DeWBvsKRSRR+RhQLU ptIrVThYmKyJ+DaLpynVVnUpAEERmXjlSjoOLUvEdje93U4xpymc3FKajdrSAodi ER9F9vT+8Qh5XvqHpn/pAnCSWtEXPC179GhsyVokPVs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:21 2025 by rpki-client