$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer File: 1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer (raw, json) Hash identifier: xiQx2i0fTd/w9hygggJzOTpQxjeyxUDqETHLLaQ9g40= Subject key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1799950E4AA69894D11D027C81D6BED82BF44CB6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:35:19 +0000 Certificate not after: Tue 04 Mar 2025 17:40:19 +0000 Subordinate resources: IP: 190.109.192.0/19 IP: 191.103.64.0/19 IP: 2803:3a80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:99:95:0e:4a:a6:98:94:d1:1d:02:7c:81:d6:be:d8:2b:f4:4c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:35:19 2024 GMT Not After : Mar 4 17:40:19 2025 GMT Subject: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:97:db:d3:ac:21:35:1a:e7:3b:5e:32:45: d9:ed:a5:6b:c1:d3:e0:35:64:f2:5d:be:eb:ff:ed: 21:d1:38:fd:fb:c6:6e:56:c9:76:e5:4b:30:1f:33: 30:48:3f:7d:2b:61:a0:a7:20:f2:fa:4c:35:81:d6: 8e:4a:e4:e7:17:6f:aa:ad:aa:77:04:57:72:0d:98: 06:fe:d5:a2:9c:15:b7:7a:15:85:ca:0a:cf:dd:64: de:df:73:30:9e:c6:84:6e:a6:03:c5:56:6c:4f:84: b9:6e:e5:8d:3e:de:db:71:77:e5:22:1a:2f:f8:b1: ab:37:78:64:8c:58:fd:36:d6:38:d2:3d:a7:f1:e6: f4:3f:03:87:fb:a0:52:bc:f8:f8:12:a8:23:ec:e1: 20:e1:5a:76:3d:f1:59:f4:63:66:53:35:0a:f4:44: fc:ba:2a:40:d4:ea:8c:53:92:20:d7:fb:fb:24:d2: 35:16:ba:f1:fd:ab:8d:4b:2f:8a:de:7e:fa:66:60: 16:3d:b5:11:bf:b5:93:8e:82:a7:3d:7f:de:41:1a: 3b:05:d0:d2:d5:3e:9b:cd:68:49:64:d3:ef:d5:9b: 3d:14:eb:82:cd:8b:0b:02:2d:cd:c7:28:35:10:8c: 24:8f:af:1e:e7:20:df:ce:a3:20:bd:0d:0b:fb:60: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.109.192.0/19 191.103.64.0/19 IPv6: 2803:3a80::/32 Signature Algorithm: sha256WithRSAEncryption be:f7:69:3d:71:69:9e:13:9c:73:74:2c:7c:9b:1a:93:f0:95: 43:fe:5f:33:38:0f:8a:8c:a6:74:17:ca:2e:3e:42:f4:7f:b0: a3:65:0a:0f:67:81:ed:e3:d7:b2:99:2f:fe:1c:2e:8a:07:9a: f7:e7:c9:a1:d9:09:c0:a7:fc:2a:de:0a:88:eb:c9:75:83:5f: db:6b:52:f7:f8:a4:9f:d9:98:40:b3:c4:e6:d9:01:23:b5:cd: 5a:40:2b:50:c6:45:7e:a5:14:31:7b:a3:01:14:6d:5e:ba:c8: a0:7d:f0:4f:27:ba:74:c9:21:79:dc:a8:fd:42:d9:12:75:76: 63:66:9b:f7:02:a6:d5:31:ad:90:30:84:51:e7:3f:9d:74:d2: 04:95:9f:e0:24:ab:64:fe:20:c8:70:f5:2e:87:0c:99:22:ab: f7:7e:4f:d0:85:a3:35:26:36:e4:32:14:f7:d9:f9:c4:72:94: 8a:00:38:5f:15:69:23:f2:8a:ef:26:35:74:5b:86:a7:40:7e: 4f:0b:41:a6:58:83:91:25:71:2e:02:6f:aa:3d:74:e9:8c:47: 3b:de:36:ef:28:e2:1e:eb:4d:e3:2d:0d:6a:4e:9e:f9:96:43: 30:fb:10:13:9b:71:ef:09:7b:7b:2c:a2:36:66:9a:8f:46:9a: 6b:d0:82:5d -----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgIUF5mVDkqmmJTRHQJ8gda+2Cv0TLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM1MTlaFw0yNTAzMDQxNzQwMTlaMDMxMTAvBgNV BAMTKDEzNDdCREQ3RjYxOUVDQUQ3QTkxQ0ZEQTI3M0U4MUVEODgzNkY3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Jpfb06whNRrnO14yRdntpWvB 0+A1ZPJdvuv/7SHROP37xm5WyXblSzAfMzBIP30rYaCnIPL6TDWB1o5K5OcXb6qt qncEV3INmAb+1aKcFbd6FYXKCs/dZN7fczCexoRupgPFVmxPhLlu5Y0+3ttxd+Ui Gi/4sas3eGSMWP021jjSPafx5vQ/A4f7oFK8+PgSqCPs4SDhWnY98Vn0Y2ZTNQr0 RPy6KkDU6oxTkiDX+/sk0jUWuvH9q41LL4refvpmYBY9tRG/tZOOgqc9f95BGjsF 0NLVPpvNaElk0+/Vmz0U64LNiwsCLc3HKDUQjCSPrx7nIN/OoyC9DQv7YH97AgMB AAGjggOZMIIDlTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTR73X9hnsrXqR z9onPoHtiDb36DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTVDODVCNjk3MUQ4RDg5MDJCNzA1QzU2 NEQxNjYwRDM3MDAxQzE0MEJGM0VENjc1RjFCMjhDMjQwMkFEMkM4Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNUM4NUI2OTcxRDhEODkwMkI3MDVDNTY0RDE2NjBEMzcwMDFDMTQwQkYz RUQ2NzVGMUIyOEMyNDAyQUQyQzg3LzAvMTM0N0JERDdGNjE5RUNBRDdBOTFDRkRB MjczRTgxRUQ4ODM2RjdFOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFvm3AAwQFv2dA MA0EAgACMAcDBQAoAzqAMA0GCSqGSIb3DQEBCwUAA4IBAQC+92k9cWmeE5xzdCx8 mxqT8JVD/l8zOA+KjKZ0F8ouPkL0f7CjZQoPZ4Ht49eymS/+HC6KB5r358mh2QnA p/wq3gqI68l1g1/ba1L3+KSf2ZhAs8Tm2QEjtc1aQCtQxkV+pRQxe6MBFG1eusig ffBPJ7p0ySF53Kj9QtkSdXZjZpv3AqbVMa2QMIRR5z+ddNIElZ/gJKtk/iDIcPUu hwyZIqv3fk/QhaM1JjbkMhT32fnEcpSKADhfFWkj8orvJjV0W4anQH5PC0GmWIOR JXEuAm+qPXTpjEc73jbvKOIe603jLQ1qTp75lkMw+xATm3HvCXt7LKI2ZpqPRppr 0IJd -----END CERTIFICATE-----Generated at Thu May 16 22:33:53 2024 by rpki-client on console-ams.rpki-client.org