$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer File: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer (raw, json) Hash identifier: MWYhYcA8WYVVNg3kRkKMFHigE9uGfxuAK2pVXm2/BeQ= Subject key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 46A03476FC7407E79E241BB767CB85172431DB7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:49:37 +0000 Certificate not after: Tue 04 Mar 2025 17:54:37 +0000 Subordinate resources: AS: 263697 IP: 132.255.4.0/22 IP: 2801:16:6000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 May 2024 09:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a0:34:76:fc:74:07:e7:9e:24:1b:b7:67:cb:85:17:24:31:db:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:49:37 2024 GMT Not After : Mar 4 17:54:37 2025 GMT Subject: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:cd:94:94:de:a2:7c:d4:85:fc:b0:19:cc: e0:81:6b:eb:66:2a:74:ab:55:66:48:93:85:e5:72: a0:28:ca:d7:2f:e1:6e:03:50:3c:14:be:16:b8:90: 82:e0:5f:e3:f9:31:25:16:e2:3f:45:a2:de:37:99: dc:97:be:3b:e7:c5:22:98:f6:da:92:bb:d6:7b:f9: 23:0c:e9:14:6d:e4:7d:92:94:dc:fc:1d:6e:5a:6c: d2:4f:d6:a6:2c:d8:91:e1:a8:3b:b0:bf:60:42:af: fb:2a:b5:76:c7:07:ab:d1:70:68:14:bb:24:05:7d: 00:53:96:23:f4:09:1e:84:5a:e9:54:f2:92:88:7a: 30:9e:f2:1e:dd:7c:5e:21:d1:9c:1d:5a:bf:e3:21: 9a:3c:96:50:e3:73:cf:1e:9a:af:61:7a:07:57:1c: c0:e8:2a:89:68:28:58:66:bd:ea:79:89:52:74:bc: e7:ee:f9:33:05:d0:c3:bd:0e:06:ff:84:54:0f:b2: cb:7b:64:57:5b:43:99:2e:e1:27:0e:69:31:ee:ef: eb:cb:e8:2e:f7:10:1e:95:c1:ce:72:82:6e:a0:b0: fb:da:6f:82:4f:3a:81:83:ad:29:9e:8d:dc:c8:95: 34:70:75:69:9a:f8:36:e2:f1:dc:26:f7:fa:dc:5d: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.4.0/22 IPv6: 2801:16:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263697 Signature Algorithm: sha256WithRSAEncryption 61:61:2c:3e:be:05:d7:29:0d:37:b2:b4:fa:70:84:87:87:18: 87:ec:c3:3b:b1:8a:1d:8e:a3:7d:d9:f2:6b:87:d2:3c:8a:40: 7c:09:e6:45:4d:e4:32:1e:3b:ed:87:b2:e5:e5:08:ad:52:06: 06:b2:36:3f:56:c2:e8:0a:0d:d0:b2:05:c4:ef:d7:af:cc:6e: ef:b4:5b:2d:fd:34:9d:d9:b5:0b:ab:59:55:8b:a0:42:02:6e: bc:74:01:95:ed:63:a5:e0:87:57:bb:6f:e4:e1:a6:b9:66:00: 71:db:65:80:4a:91:82:8a:4b:ca:b8:c1:af:4a:6c:c3:e4:14: cc:11:ff:cc:e0:44:49:3f:92:7a:79:e1:46:85:24:a3:84:d2: 0d:c1:1e:d1:3c:03:f1:27:8d:16:c5:65:37:a3:64:33:f8:37: 9a:e4:9e:16:6c:d2:fc:2a:37:4c:81:3c:03:f4:dc:00:d5:ca: d6:5d:46:19:a6:d6:ba:9d:cf:f7:ad:aa:48:e9:b0:78:01:d4: 96:e2:b3:43:70:72:6a:4a:62:f3:3b:1f:68:4f:e2:07:f1:0e: 4c:b4:84:ed:25:11:15:e4:07:8a:5e:cc:5f:f1:4b:f6:fe:d6: 55:f3:6b:8b:c7:66:b6:04:d1:43:10:f1:9d:7c:a3:6d:ae:97: 35:14:7a:f0 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIURqA0dvx0B+eeJBu3Z8uFFyQx238wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ5MzdaFw0yNTAzMDQxNzU0MzdaMDMxMTAvBgNV BAMTKDBEMTIzQUU4QzlGREVENDZFNUY3RDNCNDg4Nzg4NTFFMUU4Qjc0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdM2UlN6ifNSF/LAZzOCBa+tm KnSrVWZIk4XlcqAoytcv4W4DUDwUvha4kILgX+P5MSUW4j9Fot43mdyXvjvnxSKY 9tqSu9Z7+SMM6RRt5H2SlNz8HW5abNJP1qYs2JHhqDuwv2BCr/sqtXbHB6vRcGgU uyQFfQBTliP0CR6EWulU8pKIejCe8h7dfF4h0ZwdWr/jIZo8llDjc88emq9hegdX HMDoKoloKFhmvep5iVJ0vOfu+TMF0MO9Dgb/hFQPsst7ZFdbQ5ku4ScOaTHu7+vL 6C73EB6Vwc5ygm6gsPvab4JPOoGDrSmejdzIlTRwdWma+Dbi8dwm9/rcXQ1zAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNEjroyf3tRuX3 07SIeIUeHot0mDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjNEMzk5QzNCNzc2MjI0MEQzM0M2RDRG M0YyMTNBNjZFMDYxQUNBRTI3OEI0NDE1MERDMjRDOTc4QzAwRTBGOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CM0QzOTlDM0I3NzYyMjQwRDMzQzZENEYzRjIxM0E2NkUwNjFBQ0FFMjc4 QjQ0MTUwREMyNEM5NzhDMDBFMEY4LzAvMEQxMjNBRThDOUZERUQ0NkU1RjdEM0I0 ODg3ODg1MUUxRThCNzQ5OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQChP8EMA8EAgAC MAkDBwAoAQAWYAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAYRMA0GCSqGSIb3 DQEBCwUAA4IBAQBhYSw+vgXXKQ03srT6cISHhxiH7MM7sYodjqN92fJrh9I8ikB8 CeZFTeQyHjvth7Ll5QitUgYGsjY/VsLoCg3QsgXE79evzG7vtFst/TSd2bULq1lV i6BCAm68dAGV7WOl4IdXu2/k4aa5ZgBx22WASpGCikvKuMGvSmzD5BTMEf/M4ERJ P5J6eeFGhSSjhNINwR7RPAPxJ40WxWU3o2Qz+Dea5J4WbNL8KjdMgTwD9NwA1crW XUYZpta6nc/3rapI6bB4AdSW4rNDcHJqSmLzOx9oT+IH8Q5MtITtJREV5AeKXsxf 8Uv2/tZV82uLx2a2BNFDEPGdfKNtrpc1FHrw -----END CERTIFICATE-----Generated at Tue May 21 14:38:10 2024 by rpki-client on console-fra.rpki-client.org