$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer File: 183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer (raw, json) Hash identifier: 3WUiZL8cYEpPFDXDPnlzscIbhsKJEbn1cRdGm2Yp/is= Subject key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6F68908E0BE13767CF39E063187E9EAAEF1D2E2E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 25 Apr 2024 12:40:02 +0000 Certificate not after: Thu 24 Apr 2025 12:45:02 +0000 Subordinate resources: AS: 52381 IP: 186.65.64.0/21 IP: 200.24.248.0/21 IP: 200.107.88.0/21 IP: 2803:a00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:68:90:8e:0b:e1:37:67:cf:39:e0:63:18:7e:9e:aa:ef:1d:2e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 25 12:40:02 2024 GMT Not After : Apr 24 12:45:02 2025 GMT Subject: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:97:4f:e1:38:e7:97:58:3c:02:c8:a1:f2: 5d:6a:71:ae:5c:df:7c:32:e7:68:98:22:a6:ac:b1: 92:2b:33:3f:4c:ea:0a:3e:7b:ce:28:fe:61:da:55: 10:93:e8:b4:4c:66:da:d7:df:a6:0b:71:60:56:7c: 36:20:4c:65:f1:75:43:a2:b3:0a:d5:b7:82:3a:25: 09:43:13:81:d4:f1:56:76:0e:b4:f0:22:0a:9b:1b: 7e:59:7f:e8:67:20:30:a3:57:2f:79:e8:74:e6:32: 20:c1:fb:2a:4b:6e:ad:7b:c7:06:57:73:98:bc:02: 0d:54:4e:11:84:16:de:96:0e:8b:6a:16:43:9c:a1: 42:4a:d2:59:63:db:3a:9e:3e:59:8a:1b:6e:28:34: c0:94:ba:63:3d:ea:ed:d3:6a:42:93:0b:a4:05:52: 4b:78:1a:40:33:c2:89:7e:85:d2:5a:8d:df:ec:14: 24:65:49:bb:be:91:71:a2:f2:11:b5:05:16:c7:a2: 3e:4c:6a:a3:46:48:b3:0e:9b:25:04:ec:0c:c0:20: cf:0c:e5:50:4f:34:af:c9:3c:f6:bc:b0:14:09:53: 55:2c:f6:8f:3a:53:ab:de:51:8c:23:d7:66:d1:ad: 91:fa:8f:45:7b:e0:fd:76:0f:f4:1b:55:1b:ef:83: 42:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.65.64.0/21 200.24.248.0/21 200.107.88.0/21 IPv6: 2803:a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52381 Signature Algorithm: sha256WithRSAEncryption 86:61:0b:31:73:3d:c6:8b:0b:f3:08:12:3b:45:41:fe:de:64: 7d:c4:12:2d:f6:b0:cb:b2:7b:ea:06:c3:69:10:db:b7:cb:b9: 40:07:bd:b7:35:54:db:8e:f8:cc:5a:b5:8a:f5:ae:18:c8:5b: f6:54:de:73:f4:95:94:47:72:2d:63:d2:29:aa:9f:9a:8b:ed: ce:52:4b:7c:1a:69:6e:f5:8e:2c:e9:ee:02:c7:ad:21:61:79: f2:b7:f6:f2:41:87:6c:4d:c0:56:bb:18:38:a7:f9:6a:41:a2: e1:4b:c6:8f:0e:02:8b:a9:0b:d7:e9:92:41:e5:54:64:7c:02: 41:42:1e:97:06:c9:97:48:2e:7a:4a:51:e4:c6:44:30:4a:00: 58:47:0c:13:16:c2:04:0c:00:70:f6:4c:9f:2e:08:ad:64:c2: 2a:b4:44:02:78:52:d0:c8:60:03:19:bc:87:9b:99:59:b0:9f: 48:d2:fd:39:38:0a:3a:0f:b1:63:90:1a:44:dc:0b:c4:ea:9b: 82:cc:cc:42:02:29:aa:b2:03:39:29:14:e8:dd:80:76:94:c4: 57:10:09:cc:7b:87:83:ed:b2:5d:af:8c:37:69:0e:df:dd:97: 8c:7c:14:c5:4e:c5:24:dd:30:1f:69:d2:44:28:30:b1:d0:5e: 2e:ac:91:69 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUb2iQjgvhN2fPOeBjGH6equ8dLi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA0MjUxMjQwMDJaFw0yNTA0MjQxMjQ1MDJaMDMxMTAvBgNV BAMTKDE4M0ZDMzgxQjNFNTY1MEI1RTBDQzlGMEE4MDE3QkJDOUMyQ0ZCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eZdP4Tjnl1g8Asih8l1qca5c 33wy52iYIqassZIrMz9M6go+e84o/mHaVRCT6LRMZtrX36YLcWBWfDYgTGXxdUOi swrVt4I6JQlDE4HU8VZ2DrTwIgqbG35Zf+hnIDCjVy956HTmMiDB+ypLbq17xwZX c5i8Ag1UThGEFt6WDotqFkOcoUJK0llj2zqePlmKG24oNMCUumM96u3TakKTC6QF Ukt4GkAzwol+hdJajd/sFCRlSbu+kXGi8hG1BRbHoj5MaqNGSLMOmyUE7AzAIM8M 5VBPNK/JPPa8sBQJU1Us9o86U6veUYwj12bRrZH6j0V74P12D/QbVRvvg0LTAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYP8OBs+VlC14M yfCoAXu8nCz7EzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjg0QjY2NjIyQkRDQkE2RTNCNUZCNzVE QUY3Rjk4MjkyNjA1QzhFNzc5MDA4MDA0QjU2RDUwMTc3MENBODdEOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yODRCNjY2MjJCRENCQTZFM0I1RkI3NURBRjdGOTgyOTI2MDVDOEU3Nzkw MDgwMDRCNTZENTAxNzcwQ0E4N0Q5LzAvMTgzRkMzODFCM0U1NjUwQjVFMENDOUYw QTgwMTdCQkM5QzJDRkIxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDukFAAwQDyBj4 AwQDyGtYMA0EAgACMAcDBQAoAwoAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDM nTANBgkqhkiG9w0BAQsFAAOCAQEAhmELMXM9xosL8wgSO0VB/t5kfcQSLfawy7J7 6gbDaRDbt8u5QAe9tzVU2474zFq1ivWuGMhb9lTec/SVlEdyLWPSKaqfmovtzlJL fBppbvWOLOnuAsetIWF58rf28kGHbE3AVrsYOKf5akGi4UvGjw4Ci6kL1+mSQeVU ZHwCQUIelwbJl0guekpR5MZEMEoAWEcMExbCBAwAcPZMny4IrWTCKrREAnhS0Mhg Axm8h5uZWbCfSNL9OTgKOg+xY5AaRNwLxOqbgszMQgIpqrIDOSkU6N2AdpTEVxAJ zHuHg+2yXa+MN2kO392XjHwUxU7FJN0wH2nSRCgwsdBeLqyRaQ== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:54 2024 by rpki-client on console-fra.rpki-client.org