$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer File: DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer (raw, json) Hash identifier: OauAGCITTU1qQ9bmpTI7IBZYRMu3jzjYwxI45fMTNGk= Subject key identifier: DF:7B:A6:67:4A:1C:6C:4D:2C:C1:8E:91:4B:C6:A3:AD:8A:01:75:5B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 50514D347B71230D988B795CB462C9EF8B7FC919 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 01 May 2024 04:20:01 +0000 Certificate not after: Wed 30 Apr 2025 04:25:01 +0000 Subordinate resources: AS: 273235 IP: 2803:fe50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:51:4d:34:7b:71:23:0d:98:8b:79:5c:b4:62:c9:ef:8b:7f:c9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 1 04:20:01 2024 GMT Not After : Apr 30 04:25:01 2025 GMT Subject: CN=DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:2b:e7:7b:14:92:4c:63:7b:e7:23:61:54: 85:ae:9e:25:ee:e8:e0:cf:2b:9b:4e:d8:fd:66:66: c3:11:09:01:c2:d6:a0:94:1d:9e:b2:d9:49:d2:bf: e7:e7:4a:da:b8:4a:fd:f5:ae:6e:ba:32:0c:a0:56: 74:16:03:25:b7:0b:05:3b:a4:1d:40:69:34:09:a9: 89:16:e8:ce:ea:34:4b:d4:17:55:2d:75:b5:82:a9: b4:2b:16:56:c7:26:38:db:55:2c:a5:fe:6a:e7:af: 98:8c:5f:eb:b8:cb:d2:c4:7b:1a:7f:66:26:24:41: 7b:94:60:9f:e6:5e:1a:f5:82:5f:5f:15:0a:88:ff: 30:3c:9d:1a:44:5a:48:ab:70:ad:12:3b:5f:5b:a5: cb:af:53:a0:62:fa:c4:23:57:fb:93:21:b5:aa:fb: 44:30:ce:fc:3c:71:f5:10:18:f4:99:1d:9f:78:ef: 71:10:25:d0:ae:d9:1f:21:4d:d0:06:7a:41:d4:57: 3d:7b:cb:06:69:11:16:c0:d4:26:70:2e:3f:d5:ff: 5d:00:9f:f7:98:51:4b:f3:4b:a6:52:64:70:ee:e5: 24:8c:21:f3:2b:11:1b:b9:44:28:a9:11:80:b1:50: da:16:4c:fe:5d:45:e7:af:3d:7f:e1:41:68:15:fc: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:7B:A6:67:4A:1C:6C:4D:2C:C1:8E:91:4B:C6:A3:AD:8A:01:75:5B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:fe50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273235 Signature Algorithm: sha256WithRSAEncryption 56:1a:3b:44:2d:97:c7:ce:46:f9:8e:3c:f4:b4:76:11:16:2d: 6d:99:a9:3a:66:c1:37:85:ba:bc:32:22:e2:5b:59:d4:4c:f3: dd:ab:6b:59:7a:b2:f3:2a:25:4f:7f:31:6a:65:32:13:ac:1d: 32:9b:e0:fc:f4:98:5a:bb:2b:f5:4b:a7:0a:bf:45:b7:bf:0d: e1:86:e1:38:b5:95:b2:0f:46:26:89:7a:2f:b7:97:c9:6a:34: 77:8a:2b:d9:c4:c8:d7:7a:08:cd:db:43:a1:2a:e2:6b:0d:bd: e7:8e:7c:47:91:e7:64:26:f5:7e:d7:bf:35:a4:31:af:7e:78: 67:bd:07:94:bc:35:46:38:e0:9c:0e:9e:4b:4d:24:29:2d:63: 12:24:84:df:19:35:29:52:1b:b6:b3:55:91:5b:f4:60:7f:bd: 66:9f:31:c7:62:a7:4f:e0:76:7a:4c:06:88:ee:ef:6f:d7:9e: 75:19:4a:a0:34:b7:bc:21:99:3e:7b:84:f4:b8:bb:67:02:ea: cf:b3:c2:2e:69:9a:d4:be:f8:34:29:84:23:98:be:a0:9e:92: b0:b9:a3:63:0f:17:c9:23:1f:9a:be:85:15:31:d4:3a:06:6c: d2:7d:91:c1:b5:b2:98:2b:3b:21:36:ce:2f:11:86:b4:44:3f: 63:e5:9c:4d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUUFFNNHtxIw2Yi3lctGLJ74t/yRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA1MDEwNDIwMDFaFw0yNTA0MzAwNDI1MDFaMDMxMTAvBgNV BAMTKERGN0JBNjY3NEExQzZDNEQyQ0MxOEU5MTRCQzZBM0FEOEEwMTc1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjSvnexSSTGN75yNhVIWuniXu 6ODPK5tO2P1mZsMRCQHC1qCUHZ6y2UnSv+fnStq4Sv31rm66MgygVnQWAyW3CwU7 pB1AaTQJqYkW6M7qNEvUF1UtdbWCqbQrFlbHJjjbVSyl/mrnr5iMX+u4y9LEexp/ ZiYkQXuUYJ/mXhr1gl9fFQqI/zA8nRpEWkircK0SO19bpcuvU6Bi+sQjV/uTIbWq +0Qwzvw8cfUQGPSZHZ9473EQJdCu2R8hTdAGekHUVz17ywZpERbA1CZwLj/V/10A n/eYUUvzS6ZSZHDu5SSMIfMrERu5RCipEYCxUNoWTP5dReevPX/hQWgV/Lh9AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfe6ZnShxsTSzB jpFLxqOtigF1WzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjRCMEE0MEYxMTU0N0ExODgwQ0I0NDY1 RjU3MjcwQjg3OUUwQUNBQjgzRjQyRjZDMjY3NEE0MTY2RUY4N0FDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82NEIwQTQwRjExNTQ3QTE4ODBDQjQ0NjVGNTcyNzBCODc5RTBBQ0FCODNG NDJGNkMyNjc0QTQxNjZFRjg3QUNDLzAvREY3QkE2Njc0QTFDNkM0RDJDQzE4RTkx NEJDNkEzQUQ4QTAxNzU1Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP+UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK1MwDQYJKoZIhvcNAQELBQADggEBAFYaO0Qt l8fORvmOPPS0dhEWLW2ZqTpmwTeFurwyIuJbWdRM892ra1l6svMqJU9/MWplMhOs HTKb4Pz0mFq7K/VLpwq/Rbe/DeGG4Ti1lbIPRiaJei+3l8lqNHeKK9nEyNd6CM3b Q6Eq4msNveeOfEeR52Qm9X7XvzWkMa9+eGe9B5S8NUY44JwOnktNJCktYxIkhN8Z NSlSG7azVZFb9GB/vWafMcdip0/gdnpMBoju72/XnnUZSqA0t7whmT57hPS4u2cC 6s+zwi5pmtS++DQphCOYvqCekrC5o2MPF8kjH5q+hRUx1DoGbNJ9kcG1spgrOyE2 zi8RhrREP2PlnE0= -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:54 2024 by rpki-client on console-ams.rpki-client.org