$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer File: 1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer (raw, json) Hash identifier: tA+dcJ2Ot7D3pseQ5BKb15w87lV01Gw8sAlw5/51f+4= Subject key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1D0187AE487377A9B79597F9C1E067A3269937BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:34:48 +0000 Certificate not after: Tue 04 Mar 2025 17:39:48 +0000 Subordinate resources: AS: 28000 -- 28002 AS: 28119 AS: 52224 AS: 264845 -- 264846 IP: 45.6.248.0/21 IP: 168.121.184.0/22 IP: 170.247.168.0/22 IP: 179.0.156.0/22 IP: 190.112.52.0/22 IP: 200.0.86.0 -- 200.0.88.255 IP: 200.3.12.0/22 IP: 200.7.84.0/22 IP: 200.10.60.0/22 IP: 2001:13c7:7001:: -- 2001:13c7:7003:ffff:ffff:ffff:ffff:ffff IP: 2001:13c7:7010::/46 IP: 2001:13c7:7020::/44 IP: 2801::/48 IP: 2801:1b8::/43 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:01:87:ae:48:73:77:a9:b7:95:97:f9:c1:e0:67:a3:26:99:37:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:34:48 2024 GMT Not After : Mar 4 17:39:48 2025 GMT Subject: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:23:6e:1b:d8:84:fd:d7:b3:b3:6b:1e:a6: 47:d0:78:f4:04:8f:f2:10:33:03:40:99:e8:7f:53: 28:be:49:b5:10:04:c9:4f:fa:bb:7c:15:ea:ca:e8: c8:f4:4a:cf:e3:34:d6:ee:86:d3:ca:a1:8f:00:da: 41:81:da:68:20:e3:a0:df:e9:1b:72:33:46:7d:6b: 9e:f6:90:2e:fe:c8:a5:2e:6d:18:b1:8e:c7:97:7a: 0c:87:40:cc:c3:1f:96:89:fa:e1:ba:52:64:c7:26: e2:d5:28:60:9b:44:33:cf:b4:02:3a:46:29:e0:65: 5d:f5:de:af:ab:a5:5e:ec:fe:91:8b:31:50:2e:dd: 34:77:02:6d:f0:ef:b6:bc:e8:a1:7d:7c:0a:a0:62: a7:d0:9e:6f:2f:97:02:99:67:2e:be:c1:ad:6e:18: ad:2b:0a:8a:92:5c:56:71:10:aa:7b:f8:e8:58:93: 08:4b:1c:90:68:cd:08:55:ca:c5:49:da:3f:3f:59: 1d:9a:93:a7:4a:4e:82:fd:fc:52:37:d1:4a:d1:00: e5:c9:fd:92:e7:bb:18:f8:94:e2:66:3b:a4:4a:4b: 3b:29:11:b3:b3:c3:ed:bc:b9:c4:d3:f3:e7:36:52: 9e:98:05:83:2c:6f:ee:20:92:7e:ae:1e:59:f6:3b: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.248.0/21 168.121.184.0/22 170.247.168.0/22 179.0.156.0/22 190.112.52.0/22 200.0.86.0-200.0.88.255 200.3.12.0/22 200.7.84.0/22 200.10.60.0/22 IPv6: 2001:13c7:7001::-2001:13c7:7003:ffff:ffff:ffff:ffff:ffff 2001:13c7:7010::/46 2001:13c7:7020::/44 2801::/48 2801:1b8::/43 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28000-28002 28119 52224 264845-264846 Signature Algorithm: sha256WithRSAEncryption bd:5b:33:42:d3:22:28:5c:00:cb:f1:15:4b:7e:48:45:17:a1: 2c:a7:11:95:85:6e:13:34:c2:9c:50:a0:bf:90:b2:cc:ca:4d: 58:e1:65:63:64:e4:1d:8c:e3:33:9a:39:2c:7e:9a:3c:af:f9: 54:22:66:7e:81:da:ac:9b:c7:b5:dc:63:6c:18:ef:d7:09:f7: 62:8a:77:b5:66:35:00:26:04:9f:3f:b2:30:19:cd:9b:7f:9e: 4e:22:f0:b7:5b:ab:bc:c5:ef:8f:ae:1f:78:8b:7b:6a:c0:88: 6d:52:db:66:24:ce:4c:20:41:91:f4:0a:cc:0f:b9:07:79:24: a7:1a:31:91:98:77:64:06:a4:de:23:b9:54:7c:e1:3c:05:e6: 34:8f:20:f2:9e:2e:cd:8f:8d:1a:76:76:cf:83:f6:86:57:fd: e9:45:9b:49:bb:0a:ed:39:89:e7:29:1e:5c:31:b7:93:4b:58: f0:a3:7d:a3:09:ff:fc:0e:db:d0:55:57:58:8b:ae:b9:be:ce: 13:a9:90:58:1f:c9:64:31:17:e7:80:88:ea:60:08:a9:32:8f: 2b:65:f0:cb:81:5e:48:a6:2a:38:f3:8d:bc:85:3c:ab:53:69: b9:0d:fd:8e:2e:0f:c0:83:94:5e:03:d9:59:3c:13:1a:52:77: 81:69:80:05 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUHQGHrkhzd6m3lZf5weBnoyaZN70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM0NDhaFw0yNTAzMDQxNzM5NDhaMDMxMTAvBgNV BAMTKDFGNTZCOTAxMUFFOEM5QURERDk2ODAzREVDRTFEMUY5MzA2RDgxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKiNuG9iE/dezs2sepkfQePQE j/IQMwNAmeh/Uyi+SbUQBMlP+rt8FerK6Mj0Ss/jNNbuhtPKoY8A2kGB2mgg46Df 6RtyM0Z9a572kC7+yKUubRixjseXegyHQMzDH5aJ+uG6UmTHJuLVKGCbRDPPtAI6 RingZV313q+rpV7s/pGLMVAu3TR3Am3w77a86KF9fAqgYqfQnm8vlwKZZy6+wa1u GK0rCoqSXFZxEKp7+OhYkwhLHJBozQhVysVJ2j8/WR2ak6dKToL9/FI30UrRAOXJ /ZLnuxj4lOJmO6RKSzspEbOzw+28ucTT8+c2Up6YBYMsb+4gkn6uHln2O4GbAgMB AAGjggQ1MIIEMTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfVrkBGujJrd2W gD3s4dH5MG2B3jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5 RjdCQjc4RjA2NDY4RTIyQzhCRjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0NjhFMjJDOEJG NTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlBREREOTY4MDNE RUNFMUQxRjkzMDZEODFERS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBEBAIAATA+AwQDLQb4AwQC qHm4AwQCqveoAwQCswCcAwQCvnA0MAwDBAHIAFYDBADIAFgDBALIAwwDBALIB1QD BALICjwwPgQCAAIwODASAwcAIAETx3ABAwcCIAETx3AAAwcCIAETx3AQAwcEIAET x3AgAwcAKAEAAAAAAwcFKAEBuAAAMDQGCCsGAQUFBwEIAQH/BCUwI6AhMB8wCAIC bWACAm1iAgJt1wIDAMwAMAoCAwQKjQIDBAqOMA0GCSqGSIb3DQEBCwUAA4IBAQC9 WzNC0yIoXADL8RVLfkhFF6EspxGVhW4TNMKcUKC/kLLMyk1Y4WVjZOQdjOMzmjks fpo8r/lUImZ+gdqsm8e13GNsGO/XCfdiine1ZjUAJgSfP7IwGc2bf55OIvC3W6u8 xe+Prh94i3tqwIhtUttmJM5MIEGR9ArMD7kHeSSnGjGRmHdkBqTeI7lUfOE8BeY0 jyDyni7Nj40adnbPg/aGV/3pRZtJuwrtOYnnKR5cMbeTS1jwo32jCf/8DtvQVVdY i665vs4TqZBYH8lkMRfngIjqYAipMo8rZfDLgV5Ipio48428hTyrU2m5Df2OLg/A g5ReA9lZPBMaUneBaYAF -----END CERTIFICATE-----Generated at Fri Oct 25 14:08:04 2024 by rpki-client on console-ams.rpki-client.org