$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9832E74678E4CD60717C36E84BA71426178E7DF3.cer File: 9832E74678E4CD60717C36E84BA71426178E7DF3.cer (raw, json) Hash identifier: L19jYqHkR4DXfSW9rJNZyK+qDWEkUYaeJwAjrIGLnIQ= Subject key identifier: 98:32:E7:46:78:E4:CD:60:71:7C:36:E8:4B:A7:14:26:17:8E:7D:F3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 08FBA68874CA5E7B111656E8492A3E591B3C1A11 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:10:54 +0000 Certificate not after: Tue 04 Mar 2025 18:15:54 +0000 Subordinate resources: AS: 272958 IP: 2803:3450::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fb:a6:88:74:ca:5e:7b:11:16:56:e8:49:2a:3e:59:1b:3c:1a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:10:54 2024 GMT Not After : Mar 4 18:15:54 2025 GMT Subject: CN=9832E74678E4CD60717C36E84BA71426178E7DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1c:5c:b5:9e:f2:d8:19:5b:1a:db:7e:ae:8f: a3:d9:4c:28:b9:17:3d:f9:e3:1d:5b:4a:c5:78:c6: 3a:d6:08:58:2c:00:11:d3:8a:86:d7:68:3a:a3:a1: 33:60:01:fe:cc:e5:3d:b9:09:f8:34:80:ff:5f:14: 18:a3:71:88:06:ed:a0:e7:22:2d:f5:07:7d:76:d3: 45:62:33:ed:ac:7d:7c:9b:9b:46:1d:44:be:e4:88: f7:63:bf:a7:e7:65:ae:ad:3c:87:0c:9a:45:f0:69: 38:12:e7:4f:6a:28:43:32:1b:0c:94:25:60:29:00: b2:7c:50:1e:e7:de:33:15:89:5c:73:ca:7a:3f:4a: f5:28:d6:ab:a2:18:cf:45:fa:c9:a9:8f:38:0d:8f: 98:f0:45:c3:62:a5:c5:49:41:d6:00:bb:9f:2e:ae: 1a:c2:43:5e:a6:b2:4a:fa:a0:a8:ad:96:7c:b0:1e: ed:2a:c6:27:c3:5e:85:86:4d:8c:eb:75:d9:de:d1: f6:d0:1e:6f:d1:28:27:73:7e:b9:e3:23:6e:20:3b: a6:52:3a:ee:b1:fb:c6:73:ea:82:ff:6d:51:86:4a: b9:9a:55:f8:e9:e8:a5:db:b6:d3:7c:b5:bf:51:c9: 40:33:61:3d:1a:17:27:9c:ab:6c:86:55:c7:e9:90: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:32:E7:46:78:E4:CD:60:71:7C:36:E8:4B:A7:14:26:17:8E:7D:F3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272958 Signature Algorithm: sha256WithRSAEncryption 25:ec:5a:35:ec:12:00:27:5a:68:79:4e:0c:23:26:fb:b5:39: 25:3f:c8:af:65:7d:7e:e5:9d:47:66:db:ee:de:20:b1:3d:c3: 35:7e:3e:ae:7c:68:cc:2e:a1:67:92:18:2e:66:b9:a1:8d:a1: a4:41:53:98:9c:88:00:9a:15:af:eb:22:49:95:5a:3f:a6:03: 30:3e:ec:4f:ae:39:98:fa:d9:4c:8f:15:3c:b0:d6:7e:d3:c2: 39:f5:6e:2f:03:ba:03:b6:b5:07:2d:f3:62:23:59:ee:d3:db: ed:a0:b7:90:55:51:35:51:8c:dc:08:70:40:9b:26:74:58:ef: 9d:3a:ce:8b:d3:ec:63:8e:2e:1b:95:9f:45:ba:2b:2d:7c:0b: 68:09:66:fe:97:9d:cc:ed:fe:67:b2:e5:5c:28:a7:3a:00:4d: 64:c3:2f:05:c5:61:f7:c3:ad:cb:95:fc:61:07:75:5b:fa:12: d4:a5:a2:30:8e:19:0b:43:0e:31:63:29:db:e9:9a:48:8c:a5: 18:bc:dc:f7:11:f6:48:5b:80:d7:56:10:79:2e:d8:7e:a0:c6: a3:51:8d:01:bd:4e:d0:2c:ee:f9:31:dd:3f:66:0e:c6:4f:31: 3a:e9:ed:ca:c7:e3:1e:ae:66:a1:20:3d:bb:4f:c8:1f:a3:82: 64:9c:5c:cf -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCPumiHTKXnsRFlboSSo+WRs8GhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODEwNTRaFw0yNTAzMDQxODE1NTRaMDMxMTAvBgNV BAMTKDk4MzJFNzQ2NzhFNENENjA3MTdDMzZFODRCQTcxNDI2MTc4RTdERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHFy1nvLYGVsa236uj6PZTCi5 Fz354x1bSsV4xjrWCFgsABHTiobXaDqjoTNgAf7M5T25Cfg0gP9fFBijcYgG7aDn Ii31B31200ViM+2sfXybm0YdRL7kiPdjv6fnZa6tPIcMmkXwaTgS509qKEMyGwyU JWApALJ8UB7n3jMViVxzyno/SvUo1quiGM9F+smpjzgNj5jwRcNipcVJQdYAu58u rhrCQ16mskr6oKitlnywHu0qxifDXoWGTYzrddne0fbQHm/RKCdzfrnjI24gO6ZS Ou6x+8Zz6oL/bVGGSrmaVfjp6KXbttN8tb9RyUAzYT0aFyecq2yGVcfpkDl1AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYMudGeOTNYHF8 NuhLpxQmF4598zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEM2QTY2QkJCQ0U0Q0I0NUI5OUIyQjEy QUQzRjFFMzUxQzNEMEVENEY3NTE1QkRBMDlBMjkwREUxREQ4NDhBMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80QzZBNjZCQkJDRTRDQjQ1Qjk5QjJCMTJBRDNGMUUzNTFDM0QwRUQ0Rjc1 MTVCREEwOUEyOTBERTFERDg0OEEyLzAvOTgzMkU3NDY3OEU0Q0Q2MDcxN0MzNkU4 NEJBNzE0MjYxNzhFN0RGMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM0UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKj4wDQYJKoZIhvcNAQELBQADggEBACXsWjXs EgAnWmh5TgwjJvu1OSU/yK9lfX7lnUdm2+7eILE9wzV+Pq58aMwuoWeSGC5muaGN oaRBU5iciACaFa/rIkmVWj+mAzA+7E+uOZj62UyPFTyw1n7Twjn1bi8DugO2tQct 82IjWe7T2+2gt5BVUTVRjNwIcECbJnRY7506zovT7GOOLhuVn0W6Ky18C2gJZv6X nczt/mey5VwopzoATWTDLwXFYffDrcuV/GEHdVv6EtSlojCOGQtDDjFjKdvpmkiM pRi83PcR9khbgNdWEHku2H6gxqNRjQG9TtAs7vkx3T9mDsZPMTrp7crH4x6uZqEg PbtPyB+jgmScXM8= -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:52 2024 by rpki-client on console-ams.rpki-client.org