$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer File: 18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer (raw, json) Hash identifier: VQBlK79Vqf2vuIEJbYFHE9e1UV+Ob137EFNVe69Zj4Q= Subject key identifier: 18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1A74D97F7FDEBF590A6C166F04C09BC848DC0F2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:09:48 +0000 Certificate not after: Tue 04 Mar 2025 18:14:48 +0000 Subordinate resources: AS: 271883 IP: 190.113.36.0/22 IP: 2803:bc10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:74:d9:7f:7f:de:bf:59:0a:6c:16:6f:04:c0:9b:c8:48:dc:0f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:09:48 2024 GMT Not After : Mar 4 18:14:48 2025 GMT Subject: CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:4c:bb:96:c8:65:f7:41:09:33:d4:68:62: d6:9c:dc:2d:d2:15:dd:92:d5:80:89:6c:b7:ef:6d: 36:c6:25:81:0c:00:e2:ae:3f:5d:c7:74:82:e0:0c: 14:98:bd:76:c9:03:69:42:fb:ee:d3:ba:99:17:e7: 97:df:de:71:22:ad:12:8d:c3:cf:71:b3:50:df:33: 11:4b:8e:6c:c2:7c:09:b2:16:33:8d:a6:8a:53:b0: 15:d9:8f:01:15:64:b5:e3:82:1d:d0:00:22:36:0a: 12:b6:24:0d:1f:2d:cd:df:3c:eb:fa:cc:14:b4:39: 27:e4:3b:5a:e9:ce:00:3d:69:5b:ba:a6:de:82:0b: 46:9c:60:bb:c8:d8:4c:c8:6e:22:61:aa:0f:8f:61: 85:58:fa:e3:7b:47:ea:08:df:05:ff:f6:11:e2:0f: 12:cf:17:32:3d:de:54:d7:be:10:53:bb:07:97:b2: 1f:9b:ad:8b:84:b7:92:f2:52:c0:cf:3c:80:87:85: 28:cf:4a:6e:ef:06:33:73:3a:98:7f:49:c3:5e:8b: 42:cd:fc:5b:9c:8b:7f:fc:92:c9:ea:13:24:29:d7: 1d:25:3c:fd:ed:7a:78:b6:09:00:f8:f3:9f:a7:00: 6a:36:45:f7:56:08:f3:14:23:22:c1:11:2f:88:b2: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.113.36.0/22 IPv6: 2803:bc10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271883 Signature Algorithm: sha256WithRSAEncryption 5d:88:ee:66:89:db:97:0b:a9:c2:d7:95:64:ca:88:c7:e9:15: e1:f7:1b:85:fa:5f:5f:b8:da:07:83:f4:d5:e9:cf:1a:7f:40: 5b:c2:44:7c:8f:44:b6:08:ec:73:8f:f4:12:43:f4:cc:2d:41: 12:e1:9c:95:64:98:bd:7d:ef:9c:10:62:d6:3e:c3:6e:67:82: 32:c2:85:56:43:63:9f:34:ab:c7:17:13:0d:4c:84:d4:62:1e: 00:93:35:8d:0f:ca:7e:e8:5b:3d:57:02:65:74:08:25:67:59: bd:c2:5e:c7:07:ea:c9:67:eb:dc:a2:b5:36:1d:3b:6c:19:0f: ed:8b:d5:9b:40:db:2a:8b:71:e5:d0:a8:cb:2f:53:5a:29:e8: 7a:a8:7f:50:d3:3b:22:0e:f4:8d:73:d4:30:41:00:69:e7:ab: 7b:61:e3:05:72:e6:04:6d:1a:7e:79:f1:18:9f:32:6d:64:28: d4:c8:40:de:da:e2:f1:5e:6d:bc:7b:62:48:e0:d7:12:21:47: 16:64:ec:2a:07:19:3b:56:e0:89:0a:fe:91:2d:75:c4:02:e2: 7d:45:20:f3:c4:2a:6e:ac:cb:05:34:de:92:f3:b0:2e:0f:be: b8:0f:55:d1:15:8c:3d:aa:35:da:72:7d:5b:88:a3:21:4c:6b: 7a:13:23:f1 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUGnTZf3/ev1kKbBZvBMCbyEjcDyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA5NDhaFw0yNTAzMDQxODE0NDhaMDMxMTAvBgNV BAMTKDE4RDAyNUU4ODhDOTMyRTM1RjlCMjIwMTVCNThGQzdDOUFGRDUwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdE0y7lshl90EJM9RoYtac3C3S Fd2S1YCJbLfvbTbGJYEMAOKuP13HdILgDBSYvXbJA2lC++7TupkX55ff3nEirRKN w89xs1DfMxFLjmzCfAmyFjONpopTsBXZjwEVZLXjgh3QACI2ChK2JA0fLc3fPOv6 zBS0OSfkO1rpzgA9aVu6pt6CC0acYLvI2EzIbiJhqg+PYYVY+uN7R+oI3wX/9hHi DxLPFzI93lTXvhBTuweXsh+brYuEt5LyUsDPPICHhSjPSm7vBjNzOph/ScNei0LN /Fuci3/8ksnqEyQp1x0lPP3teni2CQD485+nAGo2RfdWCPMUIyLBES+IsksfAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQY0CXoiMky41+b IgFbWPx8mv1QpTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTYxNTQ0OTExRTYxNUJFQzY0MTRDMEU2 MTNCRTZFMjE4RTQyQzk0RkI0RUYzQTMxQjZGNzBCNjAwMEY4OUIwNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNjE1NDQ5MTFFNjE1QkVDNjQxNEMwRTYxM0JFNkUyMThFNDJDOTRGQjRF RjNBMzFCNkY3MEI2MDAwRjg5QjA1LzAvMThEMDI1RTg4OEM5MzJFMzVGOUIyMjAx NUI1OEZDN0M5QUZENTBBNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvnEkMA0EAgAC MAcDBQAoA7wQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmCzANBgkqhkiG9w0B AQsFAAOCAQEAXYjuZonblwupwteVZMqIx+kV4fcbhfpfX7jaB4P01enPGn9AW8JE fI9Etgjsc4/0EkP0zC1BEuGclWSYvX3vnBBi1j7DbmeCMsKFVkNjnzSrxxcTDUyE 1GIeAJM1jQ/KfuhbPVcCZXQIJWdZvcJexwfqyWfr3KK1Nh07bBkP7YvVm0DbKotx 5dCoyy9TWinoeqh/UNM7Ig70jXPUMEEAaeere2HjBXLmBG0afnnxGJ8ybWQo1MhA 3tri8V5tvHtiSODXEiFHFmTsKgcZO1bgiQr+kS11xALifUUg88QqbqzLBTTekvOw Lg++uA9V0RWMPao12nJ9W4ijIUxrehMj8Q== -----END CERTIFICATE-----Generated at Tue Jun 25 15:58:36 2024 by rpki-client on console-fra.rpki-client.org