$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.cer File: 09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.cer (raw, json) Hash identifier: U0Hd0iko8dMUYcS/hP92NChNErUIQY2TCG4tlNZ80EA= Subject key identifier: 09:EE:93:0B:D4:EA:74:03:B6:5E:C5:4B:AD:15:9F:F4:B5:13:8C:A7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1BBA10153644EAF7BA278905028DA2CC147A59AB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:14:03 +0000 Certificate not after: Tue 04 Mar 2025 18:19:03 +0000 Subordinate resources: AS: 264848 IP: 45.235.88.0/22 IP: 2801:11:7000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 03:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ba:10:15:36:44:ea:f7:ba:27:89:05:02:8d:a2:cc:14:7a:59:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:14:03 2024 GMT Not After : Mar 4 18:19:03 2025 GMT Subject: CN=09EE930BD4EA7403B65EC54BAD159FF4B5138CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:e2:7a:7b:b4:79:49:dc:e8:9d:b5:ce:22: ca:ee:53:b9:50:7d:8f:e8:6b:bd:1f:c6:1e:e8:e1: b6:40:e2:67:e5:c2:a9:94:ef:cf:a8:03:38:67:6c: ef:21:97:cf:54:b0:d8:37:72:59:4c:c8:d4:95:25: ec:a9:97:5d:f9:3a:fc:52:ba:23:35:7d:45:49:92: 98:75:a8:b6:48:99:63:d3:4d:cd:78:eb:d5:1e:33: be:05:2d:87:41:94:b8:b0:90:97:28:77:13:00:ab: 7b:e1:2d:9b:2d:48:a4:7a:ec:a8:8f:0b:fc:b2:29: a3:f3:1a:55:03:09:e2:b2:f0:d1:d8:03:71:7b:9f: 4b:d7:d7:69:dc:db:c5:ba:cc:9c:3d:3c:25:c1:41: 68:dc:0f:88:57:2c:c3:1b:e8:92:12:32:25:b1:e0: 19:5b:cc:d2:9d:7e:f6:c6:52:59:13:69:fe:88:29: 98:2c:2f:cf:0e:e9:57:e9:41:d5:ce:ab:bb:dd:d6: d3:89:7d:77:40:b6:79:62:f6:f8:cd:7b:3a:bb:2c: a4:33:5f:6d:aa:ca:dd:de:4b:d8:9e:f5:6a:94:8b: 4e:35:ab:2f:ae:35:13:e4:c6:6d:37:6b:0e:7c:43: f5:33:f1:c6:da:68:13:27:f1:4f:24:8c:e6:34:56: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:EE:93:0B:D4:EA:74:03:B6:5E:C5:4B:AD:15:9F:F4:B5:13:8C:A7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.88.0/22 IPv6: 2801:11:7000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264848 Signature Algorithm: sha256WithRSAEncryption 7f:93:e8:27:62:50:fa:2a:f0:ed:1e:d3:76:75:b5:2e:01:73: 06:e7:49:bb:13:a6:40:7a:ed:23:38:c6:b4:45:90:1a:ec:7a: e5:88:af:2f:cd:0d:08:5a:c8:c3:c5:bb:3e:cd:15:1e:a3:71: 7e:78:6b:2b:a8:ff:3b:36:c4:32:8c:a7:37:85:ae:ca:35:e7: df:d9:46:42:59:d9:44:9d:fc:9b:3f:a4:8d:f3:af:3c:12:58: 58:dc:14:4d:f7:bb:03:27:bb:bb:b7:e7:cb:ba:27:70:84:da: ba:a8:6f:97:1c:07:f2:79:0d:a6:f0:a5:cc:e8:46:e3:77:b7: 92:f2:a2:2b:d7:8d:38:e3:eb:d8:fc:cb:4a:92:66:e8:33:a5: 9d:95:82:00:f3:c2:d5:d7:e7:ef:c4:98:6d:11:88:f6:dc:80: 93:17:97:f9:19:af:3e:c8:74:fd:61:8c:cf:80:7b:5c:35:74: dc:af:a0:43:67:af:e0:7e:18:96:3c:3f:6d:a6:77:e9:6b:dd: da:cd:30:5f:7c:f8:9d:0f:24:54:56:6f:59:ca:4e:c5:de:07: f4:ba:4f:d6:4f:0a:8a:d4:f8:d0:6e:96:0c:83:06:06:c4:25: 40:38:18:ed:be:ce:c8:8d:3d:97:1e:a8:a2:fe:32:fa:a7:70: db:f4:e6:8b -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUG7oQFTZE6ve6J4kFAo2izBR6WaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE0MDNaFw0yNTAzMDQxODE5MDNaMDMxMTAvBgNV BAMTKDA5RUU5MzBCRDRFQTc0MDNCNjVFQzU0QkFEMTU5RkY0QjUxMzhDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6uJ6e7R5SdzonbXOIsruU7lQ fY/oa70fxh7o4bZA4mflwqmU78+oAzhnbO8hl89UsNg3cllMyNSVJeypl135OvxS uiM1fUVJkph1qLZImWPTTc1469UeM74FLYdBlLiwkJcodxMAq3vhLZstSKR67KiP C/yyKaPzGlUDCeKy8NHYA3F7n0vX12nc28W6zJw9PCXBQWjcD4hXLMMb6JISMiWx 4BlbzNKdfvbGUlkTaf6IKZgsL88O6VfpQdXOq7vd1tOJfXdAtnli9vjNezq7LKQz X22qyt3eS9ie9WqUi041qy+uNRPkxm03aw58Q/Uz8cbaaBMn8U8kjOY0ViUDAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ7pML1Op0A7Ze xUutFZ/0tROMpzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjMyN0Y2QjBBRTgwRTM2OTI1ODJEMkZG N0M1QzJGNEE2RkU3QzFFNDU3RTY4NTEzMjA1RDUwRDc4M0Y1MDdDMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMzI3RjZCMEFFODBFMzY5MjU4MkQyRkY3QzVDMkY0QTZGRTdDMUU0NTdF Njg1MTMyMDVENTBENzgzRjUwN0MyLzAvMDlFRTkzMEJENEVBNzQwM0I2NUVDNTRC QUQxNTlGRjRCNTEzOENBNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLetYMA8EAgAC MAkDBwAoAQARcAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAqQMA0GCSqGSIb3 DQEBCwUAA4IBAQB/k+gnYlD6KvDtHtN2dbUuAXMG50m7E6ZAeu0jOMa0RZAa7Hrl iK8vzQ0IWsjDxbs+zRUeo3F+eGsrqP87NsQyjKc3ha7KNeff2UZCWdlEnfybP6SN 8688ElhY3BRN97sDJ7u7t+fLuidwhNq6qG+XHAfyeQ2m8KXM6Ebjd7eS8qIr1404 4+vY/MtKkmboM6WdlYIA88LV1+fvxJhtEYj23ICTF5f5Ga8+yHT9YYzPgHtcNXTc r6BDZ6/gfhiWPD9tpnfpa93azTBffPidDyRUVm9Zyk7F3gf0uk/WTwqK1PjQbpYM gwYGxCVAOBjtvs7IjT2XHqii/jL6p3Db9OaL -----END CERTIFICATE-----Generated at Thu Jun 27 21:49:55 2024 by rpki-client on console-ams.rpki-client.org