$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer File: 10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer (raw, json) Hash identifier: OdU6wcDwp9u0B/QW1apoYh8HpYKSp8Pl040fDEvpQmU= Subject key identifier: 10:E5:94:4B:62:A6:E9:D7:ED:E8:6F:CB:17:B8:82:2C:24:04:63:9F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 72B5E53503408949375A0829480E54C3D201EAF4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:05:43 +0000 Certificate not after: Tue 04 Mar 2025 18:10:43 +0000 Subordinate resources: AS: 263731 IP: 201.131.78.0/24 IP: 2801:1c:e000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b5:e5:35:03:40:89:49:37:5a:08:29:48:0e:54:c3:d2:01:ea:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:05:43 2024 GMT Not After : Mar 4 18:10:43 2025 GMT Subject: CN=10E5944B62A6E9D7EDE86FCB17B8822C2404639F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:25:32:64:f7:67:b5:c7:8e:9d:34:8b:a2: 06:99:02:06:04:d5:a8:5a:5b:6e:ad:cb:7b:46:66: cd:77:cb:92:b9:c4:d5:a8:5a:e6:38:c6:91:9d:d5: 8f:97:1f:a5:89:16:c1:4f:4c:4b:bc:6f:f1:11:ae: 3a:a2:4b:8a:44:d2:dd:f4:b4:ed:f4:02:80:84:b3: 7c:02:cb:f8:e9:7e:87:9b:d2:d7:b4:98:ee:39:c0: b7:c7:65:0f:cd:7b:20:d7:cc:6a:89:01:6f:2c:38: 06:ca:b6:a1:08:b7:03:32:2e:5a:86:f2:6f:3a:26: 7e:66:ca:05:64:a8:34:ae:f9:41:6d:de:dc:2c:a7: 53:8c:00:2a:3b:c4:b8:e2:1f:ad:f1:77:fa:8d:46: b2:cb:5e:f7:3a:b6:35:40:ee:2b:30:80:64:a2:7d: 59:18:16:12:bd:cd:01:08:25:8b:84:a4:30:ce:fb: 87:69:54:5c:be:b9:a6:59:c8:7c:4b:e6:d5:1b:1f: 51:b2:2a:48:13:1a:b8:12:93:0b:50:57:98:ac:3a: d8:44:8a:a0:48:0d:1e:4c:fb:01:91:ee:e7:85:ed: 9b:17:10:de:3b:a2:84:8b:dc:74:3d:b6:c0:11:53: b7:fa:4c:10:3c:6c:4c:8f:9e:6d:d0:c7:83:99:2b: d1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:E5:94:4B:62:A6:E9:D7:ED:E8:6F:CB:17:B8:82:2C:24:04:63:9F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.131.78.0/24 IPv6: 2801:1c:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263731 Signature Algorithm: sha256WithRSAEncryption 79:e1:23:0f:c1:5e:20:9e:6c:5e:ae:c3:fc:e4:79:6b:c9:c4: 3a:94:4c:4a:12:36:22:ce:7c:fc:50:d9:d1:6e:6c:cb:da:08: d7:77:73:bc:23:32:ad:69:49:10:0d:aa:c6:37:58:5f:c2:ba: 22:ee:a0:4d:6b:5d:37:04:7b:dd:ee:b0:79:02:7c:14:85:3a: 01:6f:20:3e:4a:b2:d6:dc:bf:2a:11:3a:39:48:81:96:55:7b: 41:c0:1c:f1:7c:a9:0a:f5:af:8c:dc:4d:3b:6c:a7:20:70:94: d2:0b:3f:3a:94:87:8f:69:7c:2b:e7:10:01:91:6c:22:02:ef: 4f:72:1b:2e:f0:8b:0e:a1:b5:b1:b4:de:b9:fe:35:89:fb:5f: 47:ce:3b:29:24:39:3d:03:77:b8:b1:92:a6:0b:d4:11:d8:fc: b4:60:12:46:cf:49:c1:56:3a:ab:a0:73:be:dd:56:f3:64:7f: 97:4f:51:72:92:1d:45:09:27:e8:42:6e:3b:09:eb:4a:ec:1c: 51:a6:31:02:fe:8f:fe:d8:71:c8:68:58:77:71:4c:47:13:4d: 06:c8:fc:33:a7:e3:51:bf:4a:d4:8c:6c:df:39:f0:55:c4:b6: ab:6d:28:b4:c3:00:fe:97:d7:70:24:bb:db:9c:f5:2f:79:6c: ce:68:f0:cd -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUcrXlNQNAiUk3WggpSA5Uw9IB6vQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA1NDNaFw0yNTAzMDQxODEwNDNaMDMxMTAvBgNV BAMTKDEwRTU5NDRCNjJBNkU5RDdFREU4NkZDQjE3Qjg4MjJDMjQwNDYzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI1CUyZPdntceOnTSLogaZAgYE 1ahaW26ty3tGZs13y5K5xNWoWuY4xpGd1Y+XH6WJFsFPTEu8b/ERrjqiS4pE0t30 tO30AoCEs3wCy/jpfoeb0te0mO45wLfHZQ/NeyDXzGqJAW8sOAbKtqEItwMyLlqG 8m86Jn5mygVkqDSu+UFt3twsp1OMACo7xLjiH63xd/qNRrLLXvc6tjVA7iswgGSi fVkYFhK9zQEIJYuEpDDO+4dpVFy+uaZZyHxL5tUbH1GyKkgTGrgSkwtQV5isOthE iqBIDR5M+wGR7ueF7ZsXEN47ooSL3HQ9tsARU7f6TBA8bEyPnm3Qx4OZK9FvAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQ5ZRLYqbp1+3o b8sXuIIsJARjnzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTYxMjMxRkM1MzQ0N0E3NzVCOUFBRUI1 MzU0NUYzNzZCQzlCMDc4RDNBMERBQTJENUE1NTJFQkFGQkVDNjc1My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNjEyMzFGQzUzNDQ3QTc3NUI5QUFFQjUzNTQ1RjM3NkJDOUIwNzhEM0Ew REFBMkQ1QTU1MkVCQUZCRUM2NzUzLzAvMTBFNTk0NEI2MkE2RTlEN0VERTg2RkNC MTdCODgyMkMyNDA0NjM5Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyYNOMA8EAgAC MAkDBwAoAQAc4AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAYzMA0GCSqGSIb3 DQEBCwUAA4IBAQB54SMPwV4gnmxersP85HlrycQ6lExKEjYiznz8UNnRbmzL2gjX d3O8IzKtaUkQDarGN1hfwroi7qBNa103BHvd7rB5AnwUhToBbyA+SrLW3L8qETo5 SIGWVXtBwBzxfKkK9a+M3E07bKcgcJTSCz86lIePaXwr5xABkWwiAu9Pchsu8IsO obWxtN65/jWJ+19HzjspJDk9A3e4sZKmC9QR2Py0YBJGz0nBVjqroHO+3VbzZH+X T1Fykh1FCSfoQm47CetK7BxRpjEC/o/+2HHIaFh3cUxHE00GyPwzp+NRv0rUjGzf OfBVxLarbSi0wwD+l9dwJLvbnPUveWzOaPDN -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:48 2024 by rpki-client on console-ams.rpki-client.org