$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.cer File: 13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.cer (raw, json) Hash identifier: oT+rX9k98tE7P+BDrhQufj4k/jKCgPO39P63hIVdMgY= Subject key identifier: 13:C8:52:CF:CA:9A:BE:0A:EF:8B:EC:9A:91:49:65:B8:25:0C:CA:3D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5A05D556AA7B45741A2DCCD10AE7F5F88EA8D78C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:55:50 +0000 Certificate not after: Tue 04 Mar 2025 18:00:50 +0000 Subordinate resources: AS: 11514 IP: 190.111.112.0/21 IP: 2800:920::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:05:d5:56:aa:7b:45:74:1a:2d:cc:d1:0a:e7:f5:f8:8e:a8:d7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:55:50 2024 GMT Not After : Mar 4 18:00:50 2025 GMT Subject: CN=13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:06:e9:c5:fe:e3:ef:6b:1e:c7:a1:c8:d6: a5:93:fe:8d:69:aa:8f:e1:f9:20:27:d6:36:2d:bc: 65:29:5d:83:a3:f8:e5:9f:3d:ae:40:b2:3d:1d:f5: 0f:bf:be:26:5c:62:61:21:93:a9:30:53:d6:d2:50: 36:1a:5d:31:7b:09:00:d0:ac:a2:73:15:78:7f:57: 7f:ec:d6:4c:31:d6:52:a5:05:af:59:65:29:8a:a3: 0e:a5:c9:c2:c5:fe:64:71:50:15:9d:a4:fb:dc:1b: b7:29:e8:84:9d:92:d0:9f:88:ae:ec:6b:24:78:71: 3f:03:47:8e:fd:62:09:81:f3:d8:83:9f:61:31:a0: 6f:1d:4d:fb:9e:0d:66:3d:4f:56:50:31:9e:e9:c6: f0:ce:1d:ef:fd:6a:1e:62:6e:78:0b:63:d1:2e:7b: 5f:f4:8f:dd:f8:0f:6d:d7:7d:b0:d2:9c:93:c5:05: 62:71:57:83:bb:04:af:94:9b:1e:40:db:6a:ac:46: f1:df:4b:7c:28:12:99:a7:54:73:1c:49:be:63:34: 98:36:c9:35:90:60:a7:68:5d:79:f5:d7:09:1f:56: fa:55:70:5f:30:ba:e5:28:61:3a:ec:4d:6d:5c:88: 58:a8:d7:21:54:62:20:d3:be:56:57:de:8a:63:53: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:C8:52:CF:CA:9A:BE:0A:EF:8B:EC:9A:91:49:65:B8:25:0C:CA:3D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A713886D18D213FAA1EC0D146DAB4A80C20EF94CCD3635B75EDE935D7F9E369E/0/13C852CFCA9ABE0AEF8BEC9A914965B8250CCA3D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.112.0/21 IPv6: 2800:920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11514 Signature Algorithm: sha256WithRSAEncryption 87:27:78:00:5e:3f:36:f5:0f:86:40:7c:5f:eb:28:96:96:9b: e3:b2:51:2f:1d:01:dd:42:2c:7b:28:d7:19:f1:1e:55:9c:ca: bc:2d:a6:82:7b:54:d4:1e:95:a3:2e:d2:b5:0e:41:1a:ef:fa: cc:28:d6:b7:c0:9d:74:95:26:7b:32:4e:d8:27:fe:62:72:56: 5f:3f:7c:c8:c8:3c:81:c0:34:c2:9c:f5:8c:bb:0c:30:53:6f: 77:d7:8c:4e:c8:b0:9a:23:8f:46:df:02:46:08:57:e5:63:f6: ac:7d:50:94:dd:2a:de:34:1c:4b:d8:e6:9a:3b:48:71:72:16: 23:8b:7d:d9:9d:e8:cf:53:ba:0a:2f:7b:e3:17:43:14:d4:5c: 14:7b:89:5e:cf:4b:81:a8:de:6d:a0:ca:d2:89:bc:d7:21:a0: bb:f2:1b:1f:42:c9:e7:82:74:5b:0d:68:f3:ea:9c:42:91:1f: e4:75:f4:94:1c:c1:b9:1b:51:15:2e:3c:14:e0:8c:4c:1a:32: 12:f3:fd:a8:5f:0a:dd:f1:e3:36:79:5c:c1:2c:da:4e:d5:8c: 2b:e4:97:38:7a:b0:e1:41:e6:97:53:1e:32:86:2e:e5:49:30: f8:24:cb:f3:f7:db:0c:d9:b0:36:e8:3c:d2:c0:ca:ae:7b:f4: a6:d1:63:ed -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUWgXVVqp7RXQaLczRCuf1+I6o14wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU1NTBaFw0yNTAzMDQxODAwNTBaMDMxMTAvBgNV BAMTKDEzQzg1MkNGQ0E5QUJFMEFFRjhCRUM5QTkxNDk2NUI4MjUwQ0NBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY4gbpxf7j72sex6HI1qWT/o1p qo/h+SAn1jYtvGUpXYOj+OWfPa5Asj0d9Q+/viZcYmEhk6kwU9bSUDYaXTF7CQDQ rKJzFXh/V3/s1kwx1lKlBa9ZZSmKow6lycLF/mRxUBWdpPvcG7cp6ISdktCfiK7s ayR4cT8DR479YgmB89iDn2ExoG8dTfueDWY9T1ZQMZ7pxvDOHe/9ah5ibngLY9Eu e1/0j934D23XfbDSnJPFBWJxV4O7BK+Umx5A22qsRvHfS3woEpmnVHMcSb5jNJg2 yTWQYKdoXXn11wkfVvpVcF8wuuUoYTrsTW1ciFio1yFUYiDTvlZX3opjU4tJAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTyFLPypq+Cu+L 7JqRSWW4JQzKPTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTcxMzg4NkQxOEQyMTNGQUExRUMwRDE0 NkRBQjRBODBDMjBFRjk0Q0NEMzYzNUI3NUVERTkzNUQ3RjlFMzY5RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNzEzODg2RDE4RDIxM0ZBQTFFQzBEMTQ2REFCNEE4MEMyMEVGOTRDQ0Qz NjM1Qjc1RURFOTM1RDdGOUUzNjlFLzAvMTNDODUyQ0ZDQTlBQkUwQUVGOEJFQzlB OTE0OTY1QjgyNTBDQ0EzRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvm9wMA0EAgAC MAcDBQAoAAkgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiz6MA0GCSqGSIb3DQEB CwUAA4IBAQCHJ3gAXj829Q+GQHxf6yiWlpvjslEvHQHdQix7KNcZ8R5VnMq8LaaC e1TUHpWjLtK1DkEa7/rMKNa3wJ10lSZ7Mk7YJ/5iclZfP3zIyDyBwDTCnPWMuwww U29314xOyLCaI49G3wJGCFflY/asfVCU3SreNBxL2OaaO0hxchYji33ZnejPU7oK L3vjF0MU1FwUe4lez0uBqN5toMrSibzXIaC78hsfQsnngnRbDWjz6pxCkR/kdfSU HMG5G1EVLjwU4IxMGjIS8/2oXwrd8eM2eVzBLNpO1Ywr5Jc4erDhQeaXUx4yhi7l STD4JMvz99sM2bA26DzSwMque/Sm0WPt -----END CERTIFICATE-----Generated at Fri Oct 25 14:08:03 2024 by rpki-client on console-ams.rpki-client.org