$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer File: 04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer (raw, json) Hash identifier: rMwvHDv6YzQC8XP6GacVPQEVaoyUH6//blyqPi9KN8Y= Subject key identifier: 04:E7:B9:D3:71:6A:07:CC:64:BF:4B:F1:35:59:3D:FC:1B:D5:5B:4D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1E5CEA4C1032AC51FCF77B57DEFB7FA414ECB576 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 01 Nov 2024 17:55:11 +0000 Certificate not after: Fri 31 Oct 2025 18:00:11 +0000 Subordinate resources: AS: 273971 IP: 179.51.200.0/22 IP: 2803:57e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5c:ea:4c:10:32:ac:51:fc:f7:7b:57:de:fb:7f:a4:14:ec:b5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Nov 1 17:55:11 2024 GMT Not After : Oct 31 18:00:11 2025 GMT Subject: CN=04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:76:86:42:24:51:95:00:64:06:43:25:20: ec:99:7d:48:7a:36:6e:50:b5:39:67:ac:27:bb:7e: 7e:f7:50:64:00:01:39:9e:0e:56:c3:b7:1a:3e:ee: 03:ff:e8:30:34:44:a2:c3:73:c2:e2:2e:ef:16:b1: 6d:9e:ea:2c:4d:bf:ea:13:f1:f4:9d:98:ac:34:95: 26:5d:88:8e:db:ae:98:44:9f:7e:d5:06:af:67:63: a6:7c:0c:73:59:dc:0e:77:6c:f2:e3:5d:bb:fe:25: 21:c4:d9:b1:e8:94:c2:1a:34:bd:a4:20:72:c8:be: ed:07:92:49:61:0d:1f:e3:63:48:ff:8a:e6:2f:a8: fd:e5:b1:d1:87:fe:b5:14:2f:9a:a1:a2:98:3d:fa: 13:13:49:ab:07:bd:62:0d:3b:e1:cd:01:53:0f:7f: 93:90:d7:8d:93:3a:1f:96:92:e4:6d:4a:62:49:36: 39:06:67:4f:72:95:6a:e7:bd:3c:87:4b:c1:00:04: fa:78:40:64:d4:8d:23:20:b0:71:02:69:16:5e:e0: 2c:97:70:b2:99:06:e7:ce:f5:e5:cc:bb:d1:2c:17: 91:3e:d0:ef:e2:d3:14:60:46:7a:5b:6e:22:3a:60: fd:60:a4:09:f6:24:0b:1d:5d:f4:48:57:85:f6:68: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:E7:B9:D3:71:6A:07:CC:64:BF:4B:F1:35:59:3D:FC:1B:D5:5B:4D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.51.200.0/22 IPv6: 2803:57e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273971 Signature Algorithm: sha256WithRSAEncryption 05:3e:56:99:79:63:60:f8:a5:6e:5f:08:9a:bf:0b:fc:38:f3: 33:e6:60:08:eb:5e:45:19:44:d8:0b:45:81:2c:f3:23:77:3e: 4a:0b:3a:fb:ca:10:27:03:08:9a:00:a7:ea:cd:3d:0a:49:f4: 9a:75:84:24:98:5e:45:df:84:61:0b:8f:fa:d4:2f:aa:43:0b: 50:f6:91:35:26:67:a6:72:4f:18:40:a6:d6:0f:73:05:74:29: 35:15:aa:22:01:60:f8:29:0e:5b:2f:16:02:8e:a9:6c:a5:6a: 9a:88:48:df:09:41:ad:9a:38:b9:d8:72:46:b0:5e:48:15:48: 92:59:57:81:36:2d:be:58:75:62:f9:b8:70:32:90:ec:94:70: e1:2d:9f:a5:1d:83:27:92:e7:05:91:5d:2b:be:b0:13:ae:ec: 68:5f:e5:68:37:77:a0:29:7b:40:cb:f2:76:09:a9:7c:91:db: 1f:c8:03:0d:41:62:b0:ab:e8:00:6a:0e:1e:cb:dc:0c:ed:51: ce:90:0a:c1:f5:eb:1a:a9:4d:23:fe:73:14:02:52:47:c3:53: de:49:9d:e4:cf:93:29:97:52:6f:76:cd:3e:86:42:81:9c:36: 7e:26:08:f1:8f:c9:8f:2e:d1:a0:48:e7:5e:9e:67:8c:55:fc: 6d:6d:da:34 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHlzqTBAyrFH893tX3vt/pBTstXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDExMDExNzU1MTFaFw0yNTEwMzExODAwMTFaMDMxMTAvBgNV BAMTKDA0RTdCOUQzNzE2QTA3Q0M2NEJGNEJGMTM1NTkzREZDMUJENTVCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5XaGQiRRlQBkBkMlIOyZfUh6 Nm5QtTlnrCe7fn73UGQAATmeDlbDtxo+7gP/6DA0RKLDc8LiLu8WsW2e6ixNv+oT 8fSdmKw0lSZdiI7brphEn37VBq9nY6Z8DHNZ3A53bPLjXbv+JSHE2bHolMIaNL2k IHLIvu0HkklhDR/jY0j/iuYvqP3lsdGH/rUUL5qhopg9+hMTSasHvWINO+HNAVMP f5OQ142TOh+WkuRtSmJJNjkGZ09ylWrnvTyHS8EABPp4QGTUjSMgsHECaRZe4CyX cLKZBufO9eXMu9EsF5E+0O/i0xRgRnpbbiI6YP1gpAn2JAsdXfRIV4X2aD6dAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQE57nTcWoHzGS/ S/E1WT38G9VbTTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUYwMzhGREZCQjdCMUU0OUQ5RDg2REM3 RTM1RDc5RTAwNjI5QzJFOEIzNUZGQTg0RjA2OUVFNUZDODJFMjQ5RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85RjAzOEZERkJCN0IxRTQ5RDlEODZEQzdFMzVENzlFMDA2MjlDMkU4QjM1 RkZBODRGMDY5RUU1RkM4MkUyNDlFLzAvMDRFN0I5RDM3MTZBMDdDQzY0QkY0QkYx MzU1OTNERkMxQkQ1NUI0RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCszPIMA0EAgAC MAcDBQAoA1fgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQuMzANBgkqhkiG9w0B AQsFAAOCAQEABT5WmXljYPilbl8Imr8L/DjzM+ZgCOteRRlE2AtFgSzzI3c+Sgs6 +8oQJwMImgCn6s09Ckn0mnWEJJheRd+EYQuP+tQvqkMLUPaRNSZnpnJPGECm1g9z BXQpNRWqIgFg+CkOWy8WAo6pbKVqmohI3wlBrZo4udhyRrBeSBVIkllXgTYtvlh1 Yvm4cDKQ7JRw4S2fpR2DJ5LnBZFdK76wE67saF/laDd3oCl7QMvydgmpfJHbH8gD DUFisKvoAGoOHsvcDO1RzpAKwfXrGqlNI/5zFAJSR8NT3kmd5M+TKZdSb3bNPoZC gZw2fiYI8Y/Jjy7RoEjnXp5njFX8bW3aNA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:00:02 2024 by rpki-client on console-ams.rpki-client.org