$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.cer File: 013E14B02B1AA5182E8C641FBA3FC0723665FE89.cer (raw, json) Hash identifier: LNywDrBXJYYtmzn5Qv97w518545zB/9fjFSVWsk02K0= Subject key identifier: 01:3E:14:B0:2B:1A:A5:18:2E:8C:64:1F:BA:3F:C0:72:36:65:FE:89 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 72AEBADC2E6B6FB7E72830574758A68B24BA96D4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:39:56 +0000 Certificate not after: Tue 04 Mar 2025 17:44:56 +0000 Subordinate resources: AS: 265816 IP: 45.70.220.0/22 IP: 2803:2420::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ae:ba:dc:2e:6b:6f:b7:e7:28:30:57:47:58:a6:8b:24:ba:96:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:39:56 2024 GMT Not After : Mar 4 17:44:56 2025 GMT Subject: CN=013E14B02B1AA5182E8C641FBA3FC0723665FE89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:75:f0:e7:d6:5e:c3:59:c1:d8:dd:96:15: e3:3a:b3:94:fb:6a:05:1a:63:c7:34:52:a5:ec:8f: e9:ac:c2:c7:23:73:c8:0f:d8:d5:d4:bc:38:2d:0f: 02:2c:54:96:70:00:1e:83:4f:56:91:c7:82:f4:2c: fb:50:6d:95:53:f5:d2:9d:e1:ad:67:ff:5f:8a:d1: 72:89:3f:50:5c:40:d4:a4:38:13:da:a6:6c:c7:c7: 3f:47:70:e0:32:e7:ef:0f:61:57:52:96:02:39:3c: 59:5a:6b:f9:dc:ea:6d:48:86:9f:ae:8a:a9:62:ca: c2:70:53:7c:39:db:76:44:66:5b:b0:37:46:8a:ce: 8f:6f:e5:49:73:42:4a:3f:ca:82:13:59:4c:b0:c8: 51:e1:13:5a:46:f6:ab:2c:be:07:9f:5c:ff:11:bc: 06:32:ad:70:db:30:30:01:0b:70:f4:80:d7:21:99: 8a:82:cb:d3:52:f6:5f:f8:30:8c:05:0a:bf:59:56: 1f:c1:7d:62:4c:a3:88:48:82:dc:d7:40:3d:0f:2f: bc:b2:b1:d6:7c:d7:af:b7:90:83:ec:42:2d:5f:cd: a8:40:81:5a:a9:b1:98:17:b6:42:14:c1:38:67:b3: 32:c4:b8:15:89:80:53:63:53:78:52:ba:dc:a7:a6: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:3E:14:B0:2B:1A:A5:18:2E:8C:64:1F:BA:3F:C0:72:36:65:FE:89 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.220.0/22 IPv6: 2803:2420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265816 Signature Algorithm: sha256WithRSAEncryption 01:b3:f4:8c:f3:51:b0:e3:09:91:94:03:b9:d3:ad:e0:ff:ae: 0d:02:61:18:28:6d:8c:3b:7e:ee:76:17:8e:e7:61:c5:4e:98: f9:b2:e5:8e:00:07:65:3f:78:ce:c9:5d:c4:bd:fb:28:3c:b7: 1f:90:72:1c:99:df:ea:19:d2:00:e2:84:5e:33:59:6e:7d:2b: cb:48:f1:1d:cc:f1:4c:18:f2:41:92:01:fe:99:6b:ca:08:d4: 23:71:c7:9c:2b:78:d0:6c:fb:fb:d6:f5:44:4d:a3:2b:2f:6d: 68:b6:e6:a6:66:e6:e6:b7:c5:96:cc:81:78:13:14:66:ab:8c: de:6b:4a:11:b2:f1:b7:f1:e1:fd:08:4b:84:88:ba:24:ba:09: 79:a4:fb:b7:52:2c:3b:63:47:a0:7d:c0:00:ee:3e:b6:9a:7a: 0f:7b:d6:be:a5:ed:e2:db:bc:72:26:9d:92:63:4d:e5:fa:76: a7:09:5f:8d:82:94:53:51:d8:84:f9:ef:60:c5:97:b2:c7:5e: 00:d6:4d:f4:70:3d:03:a9:26:72:7b:ad:0c:0c:df:5c:01:43: 00:3c:03:af:a6:dc:3c:d2:6c:d6:71:01:1b:c0:be:f0:b3:a1: 12:df:e8:13:ba:42:35:2f:1e:72:06:17:b7:75:62:67:5e:b7: 2f:f1:f7:aa -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUcq663C5rb7fnKDBXR1imiyS6ltQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM5NTZaFw0yNTAzMDQxNzQ0NTZaMDMxMTAvBgNV BAMTKDAxM0UxNEIwMkIxQUE1MTgyRThDNjQxRkJBM0ZDMDcyMzY2NUZFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qHXw59Zew1nB2N2WFeM6s5T7 agUaY8c0UqXsj+mswscjc8gP2NXUvDgtDwIsVJZwAB6DT1aRx4L0LPtQbZVT9dKd 4a1n/1+K0XKJP1BcQNSkOBPapmzHxz9HcOAy5+8PYVdSlgI5PFlaa/nc6m1Ihp+u iqliysJwU3w523ZEZluwN0aKzo9v5UlzQko/yoITWUywyFHhE1pG9qssvgefXP8R vAYyrXDbMDABC3D0gNchmYqCy9NS9l/4MIwFCr9ZVh/BfWJMo4hIgtzXQD0PL7yy sdZ816+3kIPsQi1fzahAgVqpsZgXtkIUwThnszLEuBWJgFNjU3hSutynpm2RAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBPhSwKxqlGC6M ZB+6P8ByNmX+iTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRThBMkU3OTg5MjIzRkNCRjdCNjlBRTk0 QThCRTI5ODBDMzRCNjlGNDhBRjZEMjg1QTFENzZDQjQzMkIzQjRCQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FOEEyRTc5ODkyMjNGQ0JGN0I2OUFFOTRBOEJFMjk4MEMzNEI2OUY0OEFG NkQyODVBMUQ3NkNCNDMyQjNCNEJDLzAvMDEzRTE0QjAyQjFBQTUxODJFOEM2NDFG QkEzRkMwNzIzNjY1RkU4OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUbcMA0EAgAC MAcDBQAoAyQgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOWDANBgkqhkiG9w0B AQsFAAOCAQEAAbP0jPNRsOMJkZQDudOt4P+uDQJhGChtjDt+7nYXjudhxU6Y+bLl jgAHZT94zsldxL37KDy3H5ByHJnf6hnSAOKEXjNZbn0ry0jxHczxTBjyQZIB/plr ygjUI3HHnCt40Gz7+9b1RE2jKy9taLbmpmbm5rfFlsyBeBMUZquM3mtKEbLxt/Hh /QhLhIi6JLoJeaT7t1IsO2NHoH3AAO4+tpp6D3vWvqXt4tu8ciadkmNN5fp2pwlf jYKUU1HYhPnvYMWXssdeANZN9HA9A6kmcnutDAzfXAFDADwDr6bcPNJs1nEBG8C+ 8LOhEt/oE7pCNS8ecgYXt3ViZ163L/H3qg== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:54 2024 by rpki-client on console-fra.rpki-client.org