$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer File: 26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.cer (raw, json) Hash identifier: wzLMESvFuajZy6OVwpkeZ/g1DA0YA1LJMY5p5vW0ozM= Subject key identifier: 26:AE:C4:B4:04:19:2D:27:7B:CF:3F:50:A0:DD:5E:7A:B8:EB:3E:1E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6CCDEB2FF654090320243D01763A617DE4731950 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:54:18 +0000 Certificate not after: Tue 04 Mar 2025 17:59:18 +0000 Subordinate resources: AS: 52428 IP: 170.238.240.0/22 IP: 200.115.48.0/20 IP: 2803:1900::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cd:eb:2f:f6:54:09:03:20:24:3d:01:76:3a:61:7d:e4:73:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:54:18 2024 GMT Not After : Mar 4 17:59:18 2025 GMT Subject: CN=26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:8d:7c:ca:3e:50:a4:cb:47:da:8e:e8:82: 50:0f:02:a2:d0:b4:84:7e:1a:b2:aa:ef:48:ba:be: ad:72:6b:a3:47:60:07:c8:9f:7e:f4:a5:d8:df:95: 48:3f:8c:71:95:9c:3d:19:48:f7:bb:81:77:58:73: b1:12:0d:fd:d3:4d:dd:43:3b:f0:d2:5f:ad:48:10: c1:8d:b6:9b:14:5b:6d:51:fb:bc:61:89:23:ba:04: 4c:14:38:09:66:e1:53:b1:0c:04:b8:bf:ee:b9:45: 74:f3:ff:be:b3:35:93:33:22:de:86:6b:4d:97:1b: d0:cc:ac:36:b9:7e:39:65:25:ac:95:31:af:12:89: ed:6a:1c:29:f5:1c:e6:19:f8:c2:ed:f4:f8:c2:e4: 6e:70:43:06:d9:5e:ab:e8:34:ec:24:1a:91:c4:71: 11:c7:50:99:86:a4:c6:b4:f4:15:23:a9:74:93:84: 1b:8e:c3:3a:4e:b0:20:61:57:48:d6:0f:e4:67:b5: 0d:ad:d0:e5:97:b8:0a:63:b6:cf:52:4a:ac:99:bc: ff:65:62:30:1b:6e:44:99:3e:8f:3a:17:d7:ed:3c: 8f:6a:f5:eb:54:9c:f3:0a:07:ab:c0:bc:19:45:f9: 16:50:c5:bf:30:63:0e:e3:a6:11:21:54:95:ca:04: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:AE:C4:B4:04:19:2D:27:7B:CF:3F:50:A0:DD:5E:7A:B8:EB:3E:1E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FBE99DF8D33AC2CA065D640BE69BE5F6EB0F4321A6FF41ECE29C275E0D8163B3/0/26AEC4B404192D277BCF3F50A0DD5E7AB8EB3E1E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.240.0/22 200.115.48.0/20 IPv6: 2803:1900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52428 Signature Algorithm: sha256WithRSAEncryption 10:b9:8a:38:56:01:1d:f5:60:a3:46:45:41:0d:ff:02:75:3b: 13:26:52:2b:20:80:46:98:63:09:d9:e8:71:a6:ff:eb:02:eb: 1a:a4:67:33:40:74:42:58:22:d9:72:cd:2e:2b:16:24:85:3d: 0a:07:81:8d:84:65:e2:ce:cf:6e:4b:8a:24:49:49:c2:9d:50: 07:6c:b5:db:a8:6f:f7:31:1d:64:81:89:3b:d5:ec:57:8d:6b: 6d:d9:c6:0d:fd:93:16:e1:42:61:a5:5d:b7:99:4c:f3:58:dc: 33:f9:31:b9:ac:cb:00:0b:3a:74:d7:1c:21:e9:43:b7:09:ff: 59:79:3b:b6:63:e6:46:1e:ad:24:f0:68:c7:7d:f3:f5:02:89: e1:fb:1b:98:b1:e2:fa:dd:93:e5:e7:f4:81:57:2a:dc:76:19: c8:64:3d:07:f8:d2:d5:04:12:10:84:12:ca:e0:fb:1e:4b:5a: 73:13:ff:51:a2:97:ce:0e:77:56:31:26:f8:de:06:09:f6:41: 44:e6:e3:03:28:a5:17:85:ec:ee:5f:4b:ab:e5:fa:5a:25:98: 83:aa:2a:6e:06:8e:5d:2a:8d:f5:d1:3a:eb:e2:a5:30:c6:c5: 3b:9e:0f:1a:75:28:f5:82:a3:b3:a2:b2:6a:2e:30:25:3c:fa: f5:73:1d:5d -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUbM3rL/ZUCQMgJD0BdjphfeRzGVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU0MThaFw0yNTAzMDQxNzU5MThaMDMxMTAvBgNV BAMTKDI2QUVDNEI0MDQxOTJEMjc3QkNGM0Y1MEEwREQ1RTdBQjhFQjNFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eY18yj5QpMtH2o7oglAPAqLQ tIR+GrKq70i6vq1ya6NHYAfIn370pdjflUg/jHGVnD0ZSPe7gXdYc7ESDf3TTd1D O/DSX61IEMGNtpsUW21R+7xhiSO6BEwUOAlm4VOxDAS4v+65RXTz/76zNZMzIt6G a02XG9DMrDa5fjllJayVMa8Sie1qHCn1HOYZ+MLt9PjC5G5wQwbZXqvoNOwkGpHE cRHHUJmGpMa09BUjqXSThBuOwzpOsCBhV0jWD+RntQ2t0OWXuApjts9SSqyZvP9l YjAbbkSZPo86F9ftPI9q9etUnPMKB6vAvBlF+RZQxb8wYw7jphEhVJXKBBfZAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQmrsS0BBktJ3vP P1Cg3V56uOs+HjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkJFOTlERjhEMzNBQzJDQTA2NUQ2NDBC RTY5QkU1RjZFQjBGNDMyMUE2RkY0MUVDRTI5QzI3NUUwRDgxNjNCMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQkU5OURGOEQzM0FDMkNBMDY1RDY0MEJFNjlCRTVGNkVCMEY0MzIxQTZG RjQxRUNFMjlDMjc1RTBEODE2M0IzLzAvMjZBRUM0QjQwNDE5MkQyNzdCQ0YzRjUw QTBERDVFN0FCOEVCM0UxRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqu7wAwQEyHMw MA0EAgACMAcDBQAoAxkAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMzDANBgkq hkiG9w0BAQsFAAOCAQEAELmKOFYBHfVgo0ZFQQ3/AnU7EyZSKyCARphjCdnocab/ 6wLrGqRnM0B0Qlgi2XLNLisWJIU9CgeBjYRl4s7PbkuKJElJwp1QB2y126hv9zEd ZIGJO9XsV41rbdnGDf2TFuFCYaVdt5lM81jcM/kxuazLAAs6dNccIelDtwn/WXk7 tmPmRh6tJPBox33z9QKJ4fsbmLHi+t2T5ef0gVcq3HYZyGQ9B/jS1QQSEIQSyuD7 HktacxP/UaKXzg53VjEm+N4GCfZBRObjAyilF4Xs7l9Lq+X6WiWYg6oqbgaOXSqN 9dE66+KlMMbFO54PGnUo9YKjs6Kyai4wJTz69XMdXQ== -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:39 2024 by rpki-client on console-ams.rpki-client.org