$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer File: 305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer (raw, json) Hash identifier: CYVxlOoyffjGv0sxNcFh5doczCntUqy3j5FA/Z27wW4= Subject key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 100B3A5656EAC28AE8810630D22038515293F870 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:42:29 +0000 Certificate not after: Tue 04 Mar 2025 17:47:29 +0000 Subordinate resources: AS: 263740 IP: 138.99.36.0/22 IP: 143.137.164.0/22 IP: 161.0.0.0/19 IP: 168.205.160.0/22 IP: 170.246.52.0/22 IP: 186.65.112.0/20 IP: 2803:6c00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0b:3a:56:56:ea:c2:8a:e8:81:06:30:d2:20:38:51:52:93:f8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:42:29 2024 GMT Not After : Mar 4 17:47:29 2025 GMT Subject: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:fd:44:10:aa:9b:1e:12:ab:8d:f5:20:de: 76:a0:3f:e0:63:8d:85:23:9f:30:dc:f4:9a:07:91: 35:a6:ca:d3:d8:5b:66:d5:95:7d:11:d3:e6:c0:45: 4c:5a:cb:d1:6b:3f:cb:db:47:15:5d:6e:b0:a2:3d: 58:87:2f:a3:c8:91:65:b9:85:c0:e1:e2:c2:09:7c: 02:00:ef:11:b6:ee:63:d0:93:48:c6:c8:0b:7c:df: 4a:31:97:c4:fd:c3:5e:0e:f4:9e:1b:ce:2c:c1:67: 09:39:79:e2:82:81:e6:d9:c2:6a:ea:e8:96:06:76: 86:6c:cc:bd:af:fa:2f:bd:87:dd:f6:ff:59:19:7f: 41:c3:c5:e0:e7:16:01:7b:89:8b:36:75:59:c7:f0: e1:b9:8f:c7:98:cb:7e:7b:5a:5e:a8:2f:b7:9e:8a: 1b:02:14:fe:ea:77:f6:36:02:2a:a2:31:3d:10:c7: b5:97:00:7a:75:9e:0f:5f:b5:c1:c3:45:0b:e6:5f: e4:db:2d:02:de:de:86:9d:81:53:cb:98:93:26:48: 1c:8b:2c:09:1f:e1:74:a2:fa:b4:11:39:ad:4b:43: dc:04:dd:ac:d7:f6:d6:cc:49:dd:73:ea:06:5c:0a: 8d:23:38:8e:35:85:7f:8d:c3:03:10:48:0d:a3:de: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.36.0/22 143.137.164.0/22 161.0.0.0/19 168.205.160.0/22 170.246.52.0/22 186.65.112.0/20 IPv6: 2803:6c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263740 Signature Algorithm: sha256WithRSAEncryption 28:3f:51:87:8b:a7:f1:27:ef:f9:80:cd:84:c8:01:11:1e:bc: 68:c1:70:f1:4d:ba:ea:bb:91:02:a2:85:d7:b5:fd:0b:b4:d3: aa:be:2b:bd:3b:3d:c3:ba:4d:2f:0f:0e:5f:4d:3b:c7:73:be: 42:92:1e:c3:e3:ca:37:dd:7e:cb:b0:ff:52:72:59:ab:82:84: 73:d9:ca:60:37:46:36:f2:74:e8:b6:ff:d7:60:53:8e:a9:aa: 5c:38:44:4c:db:56:aa:31:2d:db:14:be:8e:83:47:91:12:4a: ba:7d:7f:1d:74:05:bf:5d:e8:a8:b6:a3:0e:95:10:27:63:6f: 3a:c0:c4:39:b2:f6:80:b1:a4:d4:6e:69:6d:93:72:ea:69:52: 45:11:ac:07:d5:df:ee:d3:c9:04:52:8d:7e:c7:53:7d:5e:68: f3:8d:c2:24:fa:4b:8b:61:8d:fc:17:69:6c:09:8c:56:46:84: 1b:26:b2:c0:cf:79:a8:6a:54:0a:1b:ba:b6:6b:a4:f0:7b:5d: 23:5b:bc:97:e3:c4:23:be:11:50:8f:3d:43:34:26:2d:f4:60: 88:44:be:c4:24:d1:3b:f8:f7:e9:f6:9a:ad:c2:bf:e4:d0:40: 8b:68:f3:51:61:f3:25:a6:04:89:ea:8d:b2:73:d7:4b:c7:ad: c5:4c:18:11 -----BEGIN CERTIFICATE----- MIIGwzCCBaugAwIBAgIUEAs6VlbqworogQYw0iA4UVKT+HAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQyMjlaFw0yNTAzMDQxNzQ3MjlaMDMxMTAvBgNV BAMTKDMwNTM3MEExOTk4QzZBRUY5Qjk0MjgzNTE3RjRCMUU2QkI1QUQwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Hf1EEKqbHhKrjfUg3nagP+Bj jYUjnzDc9JoHkTWmytPYW2bVlX0R0+bARUxay9FrP8vbRxVdbrCiPViHL6PIkWW5 hcDh4sIJfAIA7xG27mPQk0jGyAt830oxl8T9w14O9J4bzizBZwk5eeKCgebZwmrq 6JYGdoZszL2v+i+9h932/1kZf0HDxeDnFgF7iYs2dVnH8OG5j8eYy357Wl6oL7ee ihsCFP7qd/Y2AiqiMT0Qx7WXAHp1ng9ftcHDRQvmX+TbLQLe3oadgVPLmJMmSByL LAkf4XSi+rQROa1LQ9wE3azX9tbMSd1z6gZcCo0jOI41hX+NwwMQSA2j3jjdAgMB AAGjggPNMIIDyTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwU3ChmYxq75uU KDUX9LHmu1rQvDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTcwMUM0MzFBNTI5RUEyMEU5NTFDQ0Yw OTg3MjVCRUM3RjA1RDgxNzNBNDA1QzFBOURFQjY0MEJBOTdCRUU1QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NzAxQzQzMUE1MjlFQTIwRTk1MUNDRjA5ODcyNUJFQzdGMDVEODE3M0E0 MDVDMUE5REVCNjQwQkE5N0JFRTVBLzAvMzA1MzcwQTE5OThDNkFFRjlCOTQyODM1 MTdGNEIxRTZCQjVBRDBCQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCimMkAwQCj4mk AwQFoQAAAwQCqM2gAwQCqvY0AwQEukFwMA0EAgACMAcDBQAoA2wAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwQGPDANBgkqhkiG9w0BAQsFAAOCAQEAKD9Rh4un8Sfv +YDNhMgBER68aMFw8U266ruRAqKF17X9C7TTqr4rvTs9w7pNLw8OX007x3O+QpIe w+PKN91+y7D/UnJZq4KEc9nKYDdGNvJ06Lb/12BTjqmqXDhETNtWqjEt2xS+joNH kRJKun1/HXQFv13oqLajDpUQJ2NvOsDEObL2gLGk1G5pbZNy6mlSRRGsB9Xf7tPJ BFKNfsdTfV5o843CJPpLi2GN/BdpbAmMVkaEGyaywM95qGpUChu6tmuk8HtdI1u8 l+PEI74RUI89QzQmLfRgiES+xCTRO/j36faarcK/5NBAi2jzUWHzJaYEieqNsnPX S8etxUwYEQ== -----END CERTIFICATE-----Generated at Tue Jun 25 15:58:37 2024 by rpki-client on console-fra.rpki-client.org