$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer File: 2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer (raw, json) Hash identifier: ZbNfgFFy9LmYqNfAuVhxDrDe3Fb2Q75dCZjM93jnFo4= Subject key identifier: 2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 49D61DFA45BB97BA896B000ADB0778C7944B0BA7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:43:54 +0000 Certificate not after: Tue 04 Mar 2025 17:48:54 +0000 Subordinate resources: AS: 264787 IP: 168.197.196.0/22 IP: 2803:d8c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d6:1d:fa:45:bb:97:ba:89:6b:00:0a:db:07:78:c7:94:4b:0b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:43:54 2024 GMT Not After : Mar 4 17:48:54 2025 GMT Subject: CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:15:12:6c:8c:82:cd:0f:61:f8:bc:12:15: f1:88:86:44:fc:bf:7a:24:6f:88:a0:2d:c2:81:69: b6:67:be:da:95:63:99:6b:46:f5:74:38:e1:10:63: 99:38:9c:f1:27:4f:7d:c7:cc:6b:0b:0e:93:bd:9d: 60:7a:08:41:a5:18:81:fc:b1:dc:0f:02:39:8d:57: 05:9d:9c:e8:90:d2:55:b6:ed:a6:3c:ce:da:b4:90: 7c:21:dc:b3:23:b8:6a:5e:d8:9d:26:71:41:f0:a5: 76:3f:f4:54:4e:08:54:99:82:76:0d:5e:a4:d1:1a: 88:b6:81:8d:22:27:df:51:96:6e:62:44:9d:81:9d: 99:a0:ef:03:ec:54:e5:14:6f:a5:17:32:13:6c:50: 01:39:4f:6e:60:5e:ed:6c:f7:a9:59:c6:86:1c:96: a8:6f:93:b0:07:e2:af:cb:79:b8:5a:a5:a9:0a:c0: 51:28:a5:d5:00:45:72:2a:51:53:57:13:4c:5d:89: 92:e8:c8:07:f2:7c:5a:be:ff:47:b6:00:b0:33:76: 18:dc:58:92:a9:d2:e2:5e:e4:d2:23:c0:21:73:df: 23:32:39:10:32:4a:28:a1:f0:93:73:88:c1:87:36: 82:2b:b4:91:35:fe:71:b1:b9:f6:1f:c4:13:24:b3: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.196.0/22 IPv6: 2803:d8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264787 Signature Algorithm: sha256WithRSAEncryption c4:83:38:e5:47:56:fa:dc:01:84:2c:da:eb:69:9f:85:75:66: 50:1d:be:e9:52:68:74:73:e6:13:76:4b:2d:52:c8:ae:73:de: 20:72:c4:15:19:ed:48:aa:d1:9f:1e:cb:8f:75:5c:4a:14:d3: b0:95:99:8d:c5:cd:08:fe:bd:ff:ce:3e:00:5f:ca:5b:20:c8: 4e:9d:fe:ef:76:dd:e7:9b:4d:49:0a:78:ec:9b:34:d9:81:fc: bc:d6:a2:8a:3c:27:d0:32:c6:76:93:98:87:56:74:ed:23:d1: e5:20:11:56:a9:13:18:fc:5c:6f:b3:f8:f3:72:6f:24:0b:87: f2:5a:46:4b:22:2e:2d:19:78:b3:00:47:c0:33:f3:fd:75:b8: 2f:5c:20:64:ea:19:22:7b:c9:21:89:b6:9a:16:8c:17:c7:01: b6:e1:8e:08:1f:ce:8d:58:bf:46:c0:b0:ae:fa:cf:c3:95:20: 37:8d:b8:4d:4d:95:8b:64:12:3f:8d:34:fe:6c:be:a9:76:26: a0:d2:98:19:a5:10:42:93:d3:c6:1f:2a:8e:8b:a7:fc:cc:02: 7f:99:9e:f1:29:9d:5a:b5:b9:b0:bc:f3:c7:9b:70:97:56:12: e8:0e:f4:12:9a:1f:4d:71:81:45:36:10:07:c4:bc:2f:df:17: b6:5d:55:e2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSdYd+kW7l7qJawAK2wd4x5RLC6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQzNTRaFw0yNTAzMDQxNzQ4NTRaMDMxMTAvBgNV BAMTKDJFNjVDRTZCRjBBN0E2RDExRDQ3MThGQUE2MzdCMDhDM0I1OTJGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxBUSbIyCzQ9h+LwSFfGIhkT8 v3okb4igLcKBabZnvtqVY5lrRvV0OOEQY5k4nPEnT33HzGsLDpO9nWB6CEGlGIH8 sdwPAjmNVwWdnOiQ0lW27aY8ztq0kHwh3LMjuGpe2J0mcUHwpXY/9FROCFSZgnYN XqTRGoi2gY0iJ99Rlm5iRJ2BnZmg7wPsVOUUb6UXMhNsUAE5T25gXu1s96lZxoYc lqhvk7AH4q/LebhapakKwFEopdUARXIqUVNXE0xdiZLoyAfyfFq+/0e2ALAzdhjc WJKp0uJe5NIjwCFz3yMyORAySiih8JNziMGHNoIrtJE1/nGxufYfxBMks+edAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuZc5r8Kem0R1H GPqmN7CMO1kviDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODE5NzREQ0FENTMyNzg5NDFDMEM4M0Yx OUZCQzZFRkEzREMwNDE4RDVDQkY1M0NDREE2MzAyNDI5OEIzRDM4Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84MTk3NERDQUQ1MzI3ODk0MUMwQzgzRjE5RkJDNkVGQTNEQzA0MThENUNC RjUzQ0NEQTYzMDI0Mjk4QjNEMzgyLzAvMkU2NUNFNkJGMEE3QTZEMTFENDcxOEZB QTYzN0IwOEMzQjU5MkY4OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqMXEMA0EAgAC MAcDBQAoA9jAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKUzANBgkqhkiG9w0B AQsFAAOCAQEAxIM45UdW+twBhCza62mfhXVmUB2+6VJodHPmE3ZLLVLIrnPeIHLE FRntSKrRnx7Lj3VcShTTsJWZjcXNCP69/84+AF/KWyDITp3+73bd55tNSQp47Js0 2YH8vNaiijwn0DLGdpOYh1Z07SPR5SARVqkTGPxcb7P483JvJAuH8lpGSyIuLRl4 swBHwDPz/XW4L1wgZOoZInvJIYm2mhaMF8cBtuGOCB/OjVi/RsCwrvrPw5UgN424 TU2Vi2QSP400/my+qXYmoNKYGaUQQpPTxh8qjoun/MwCf5me8SmdWrW5sLzzx5tw l1YS6A70EpofTXGBRTYQB8S8L98Xtl1V4g== -----END CERTIFICATE-----Generated at Tue Jun 25 14:08:44 2024 by rpki-client on console-ams.rpki-client.org