$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer File: C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer (raw, json) Hash identifier: 2qanWHljH2ED5nHuPgofOF5ZkFUDndcQD5HAlkdj+lQ= Subject key identifier: C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 43370492FC90460CCD6EAF1B7B0DFB2FA09DDC50 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:48:26 +0000 Certificate not after: Tue 04 Mar 2025 17:53:26 +0000 Subordinate resources: AS: 52405 IP: 181.118.192.0/20 IP: 190.8.48.0/20 IP: 2803:f300::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:37:04:92:fc:90:46:0c:cd:6e:af:1b:7b:0d:fb:2f:a0:9d:dc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:48:26 2024 GMT Not After : Mar 4 17:53:26 2025 GMT Subject: CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:23:b8:d1:80:13:e4:d5:33:19:0f:c0:18: f6:43:eb:3c:35:e1:17:19:a3:ab:12:ff:66:c6:aa: 55:dd:3a:6e:5d:21:03:45:cc:58:15:4b:6b:e0:a4: 47:aa:0b:1f:4b:e0:ea:9f:89:a0:d8:3d:b8:b7:3c: 02:e6:69:ee:ba:2c:9d:af:63:db:f5:36:5d:cc:48: 30:d2:84:2c:6c:d5:7c:24:97:96:ff:70:f4:6f:f1: df:ce:96:89:fb:94:ff:a5:b4:0f:44:67:10:b0:5e: 6c:d8:c3:8c:17:19:14:0b:09:39:15:e6:46:a0:73: 79:13:aa:2f:1b:39:84:59:39:49:b9:bf:01:6e:c4: dc:d3:3f:af:21:61:fa:28:d0:89:ee:14:d0:92:ab: 3f:5e:b3:95:24:2c:7e:f1:41:93:21:e1:d7:46:87: a0:c0:5f:1f:22:0e:ba:fd:cf:22:38:75:e3:81:fa: 1c:a7:97:fd:a7:89:82:ea:91:4b:57:e3:51:53:db: 23:0a:2f:d4:1c:a7:b9:f9:47:c2:30:80:5f:55:d4: 70:09:b6:fb:72:af:56:33:04:9b:ea:9f:37:99:b7: ea:39:5e:c4:bd:75:84:47:c4:b8:e7:d3:e5:3e:1f: ab:0e:dd:5e:c6:3a:cd:0e:4c:75:61:b2:81:cc:cc: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.118.192.0/20 190.8.48.0/20 IPv6: 2803:f300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52405 Signature Algorithm: sha256WithRSAEncryption 14:bd:26:ea:14:12:25:91:2f:c0:9a:82:4a:be:d9:7e:1b:45: ee:da:9b:a3:5a:03:7b:7b:fc:32:8e:f6:4a:f1:ae:b2:45:aa: b9:2e:8d:bb:fa:fe:af:8d:da:31:ca:e0:cc:04:57:86:13:85: 5d:7f:bd:51:a8:2e:25:2b:0e:50:b3:07:37:68:a0:79:4c:2c: 01:09:4a:1e:f5:b1:2f:da:af:be:e5:9d:e3:df:a7:09:78:28: af:94:98:b6:bb:8e:f8:27:53:09:5a:95:3e:e8:43:e1:6b:63: 1d:d7:3b:eb:54:7b:99:7d:92:1d:c4:3c:4f:75:4d:10:43:55: 52:0d:39:84:f3:37:8c:71:0b:64:f9:c4:51:d0:cc:25:0b:fb: 48:7c:c3:2d:f2:cd:e7:60:12:1a:6f:00:3f:ef:83:75:94:f1: 66:e7:e1:87:01:ac:7c:88:09:e5:ba:6f:58:8d:97:1a:c0:a0: 9c:3d:dc:92:4e:22:51:8a:8c:f1:27:3f:06:f7:9b:76:79:07: b3:33:d4:a2:6a:66:33:5c:e7:19:5a:50:a9:27:c9:4e:30:33: fc:3e:fa:17:e3:1b:88:17:61:80:70:f2:cd:fa:18:4c:2e:73: f2:85:c3:d0:6c:ab:38:4c:6a:58:00:75:c1:d2:50:f8:9c:1e: 96:42:57:68 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUQzcEkvyQRgzNbq8bew37L6Cd3FAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ4MjZaFw0yNTAzMDQxNzUzMjZaMDMxMTAvBgNV BAMTKEM2QkY5MjU1RTM1Q0YyODUxRUNGREZBQzE2MUU5NUNDQzdFNUMyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVCO40YAT5NUzGQ/AGPZD6zw1 4RcZo6sS/2bGqlXdOm5dIQNFzFgVS2vgpEeqCx9L4OqfiaDYPbi3PALmae66LJ2v Y9v1Nl3MSDDShCxs1Xwkl5b/cPRv8d/Olon7lP+ltA9EZxCwXmzYw4wXGRQLCTkV 5kagc3kTqi8bOYRZOUm5vwFuxNzTP68hYfoo0InuFNCSqz9es5UkLH7xQZMh4ddG h6DAXx8iDrr9zyI4deOB+hynl/2niYLqkUtX41FT2yMKL9Qcp7n5R8IwgF9V1HAJ tvtyr1YzBJvqnzeZt+o5XsS9dYRHxLjn0+U+H6sO3V7GOs0OTHVhsoHMzIYVAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTGv5JV41zyhR7P 36wWHpXMx+XCLzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREFGRTNBMTQ1N0FCQkQ2RDc1MTc2QjNE MjRENzAyNUM4MzEyNDg5RkY0QzUyQ0FFODNCOEEwRDJEMUQxQkM3QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQUZFM0ExNDU3QUJCRDZENzUxNzZCM0QyNEQ3MDI1QzgzMTI0ODlGRjRD NTJDQUU4M0I4QTBEMkQxRDFCQzdBLzAvQzZCRjkyNTVFMzVDRjI4NTFFQ0ZERkFD MTYxRTk1Q0NDN0U1QzIyRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEtXbAAwQEvggw MA0EAgACMAcDBQAoA/MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMtTANBgkq hkiG9w0BAQsFAAOCAQEAFL0m6hQSJZEvwJqCSr7ZfhtF7tqbo1oDe3v8Mo72SvGu skWquS6Nu/r+r43aMcrgzARXhhOFXX+9UaguJSsOULMHN2igeUwsAQlKHvWxL9qv vuWd49+nCXgor5SYtruO+CdTCVqVPuhD4WtjHdc761R7mX2SHcQ8T3VNEENVUg05 hPM3jHELZPnEUdDMJQv7SHzDLfLN52ASGm8AP++DdZTxZufhhwGsfIgJ5bpvWI2X GsCgnD3ckk4iUYqM8Sc/BvebdnkHszPUompmM1znGVpQqSfJTjAz/D76F+MbiBdh gHDyzfoYTC5z8oXD0GyrOExqWAB1wdJQ+JwelkJXaA== -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:53 2024 by rpki-client on console-ams.rpki-client.org