$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer File: 4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer (raw, json) Hash identifier: sZ4/eUj3EGBOa0qOGj2NvB6siSRudng7irXC1HOrjEQ= Subject key identifier: 4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 67FADDDDF84C89596D89428F09FD2E1C65294C08 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:09:57 +0000 Certificate not after: Tue 04 Mar 2025 18:14:57 +0000 Subordinate resources: AS: 27876 IP: 186.5.160.0/20 IP: 190.7.192.0/19 IP: 2800:f0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:dd:dd:f8:4c:89:59:6d:89:42:8f:09:fd:2e:1c:65:29:4c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:09:57 2024 GMT Not After : Mar 4 18:14:57 2025 GMT Subject: CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:67:7e:5e:85:e7:76:bf:c9:e0:72:e5:c3:50: ed:93:60:e8:ae:ec:fd:c8:1f:f7:57:25:cd:c6:06: 51:72:06:ec:73:fa:18:3c:e3:29:c5:f3:60:51:bb: 41:e0:43:59:d3:d7:9f:a2:09:c8:cf:a6:cb:74:e1: 52:95:65:55:8b:47:f6:2b:31:0e:1c:e6:5a:a8:ad: 3d:2f:e1:e6:a3:f0:35:25:b1:1f:16:68:5a:82:e2: 2c:c7:43:16:cd:6d:02:73:09:c2:48:47:74:01:f6: 5f:84:4b:5b:4d:6e:fd:f8:cd:ba:fa:de:58:af:27: c3:83:50:fa:26:83:0b:be:5e:f3:3c:c7:76:df:82: ac:55:17:49:86:ce:53:40:8a:a6:74:0c:b6:7d:60: 91:0d:0c:ed:3e:50:d9:3f:49:0c:1a:bc:c2:c9:af: da:14:79:24:05:6b:66:92:9f:d1:2f:23:cc:1c:45: e7:9c:f8:fe:00:10:42:81:10:00:38:a3:c4:8e:e7: 22:1a:27:ca:3c:b8:d2:3e:04:6a:ba:57:b6:1a:fb: c3:7e:af:5d:e0:5c:ae:bb:a4:be:b0:aa:3e:e9:f7: 54:3c:65:20:79:23:c1:d2:37:45:a5:e9:69:f3:7f: 08:e2:a4:ca:2d:a4:c2:02:9f:b0:2c:77:93:4b:46: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.5.160.0/20 190.7.192.0/19 IPv6: 2800:f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27876 Signature Algorithm: sha256WithRSAEncryption d8:2e:85:12:d4:fa:5e:0f:82:5f:49:34:a1:d8:f1:89:4e:75: b9:63:00:5f:54:ea:8d:83:2f:32:9d:0a:ff:a4:88:b0:87:e9: 61:c5:0c:b5:cf:d3:6d:e8:f0:e0:ba:e4:2b:4b:37:fa:41:b4: 78:c1:79:b0:b0:9a:5c:14:56:4f:f6:6f:59:44:89:83:bd:5f: 94:b1:e1:23:eb:1f:0c:74:53:dc:40:c8:90:d9:ac:44:bd:a3: 6d:e6:ba:fe:2c:20:b1:4b:29:91:0f:cf:b3:be:8e:b9:76:19: 9a:b7:17:74:ab:fa:63:1b:e6:1a:65:bb:90:0e:c3:ea:21:86: cc:34:73:b7:02:7a:86:b0:13:8b:ea:55:bf:23:8c:06:16:b3: 44:7f:07:d2:b1:d1:d7:04:34:fe:c8:41:15:a7:84:b6:41:5d: dc:36:7e:82:75:cb:93:56:6c:b0:aa:52:69:10:45:4c:b6:09: 6c:4f:86:6b:ea:05:8c:92:3b:54:5d:0e:ec:39:1b:8e:72:18: 64:96:e2:87:1c:e2:f2:ab:99:fc:c6:8f:b5:1a:65:79:80:aa: b4:be:dc:a3:42:2e:2a:2d:d4:72:3d:39:9d:4f:17:62:4f:97: 55:7e:1c:94:2c:dc:13:d5:d6:f6:30:1b:09:79:ac:2e:d9:e7: f1:25:9f:dc -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUZ/rd3fhMiVltiUKPCf0uHGUpTAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA5NTdaFw0yNTAzMDQxODE0NTdaMDMxMTAvBgNV BAMTKDRDQzBGNkY1NUUyRDhFQzE3QjAxMzFBMDdGQTJFOEMwNURFNjJFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZ35ehed2v8ngcuXDUO2TYOiu 7P3IH/dXJc3GBlFyBuxz+hg84ynF82BRu0HgQ1nT15+iCcjPpst04VKVZVWLR/Yr MQ4c5lqorT0v4eaj8DUlsR8WaFqC4izHQxbNbQJzCcJIR3QB9l+ES1tNbv34zbr6 3livJ8ODUPomgwu+XvM8x3bfgqxVF0mGzlNAiqZ0DLZ9YJENDO0+UNk/SQwavMLJ r9oUeSQFa2aSn9EvI8wcReec+P4AEEKBEAA4o8SO5yIaJ8o8uNI+BGq6V7Ya+8N+ r13gXK67pL6wqj7p91Q8ZSB5I8HSN0Wl6WnzfwjipMotpMICn7Asd5NLRtldAgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMwPb1Xi2OwXsB MaB/oujAXeYuMTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjg0ODhCMzdFMzA2MThBMUI1QzdBM0I1 RUVBQTU0MDFBNEE0RjdGQjU4REU4NDM5RDI2QjY2RUJEMkEyNjgzQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CODQ4OEIzN0UzMDYxOEExQjVDN0EzQjVFRUFBNTQwMUE0QTRGN0ZCNThE RTg0MzlEMjZCNjZFQkQyQTI2ODNBLzAvNENDMEY2RjU1RTJEOEVDMTdCMDEzMUEw N0ZBMkU4QzA1REU2MkUzMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEugWgAwQFvgfA MA0EAgACMAcDBQAoAADwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmzkMA0GCSqG SIb3DQEBCwUAA4IBAQDYLoUS1PpeD4JfSTSh2PGJTnW5YwBfVOqNgy8ynQr/pIiw h+lhxQy1z9Nt6PDguuQrSzf6QbR4wXmwsJpcFFZP9m9ZRImDvV+UseEj6x8MdFPc QMiQ2axEvaNt5rr+LCCxSymRD8+zvo65dhmatxd0q/pjG+YaZbuQDsPqIYbMNHO3 AnqGsBOL6lW/I4wGFrNEfwfSsdHXBDT+yEEVp4S2QV3cNn6CdcuTVmywqlJpEEVM tglsT4Zr6gWMkjtUXQ7sORuOchhkluKHHOLyq5n8xo+1GmV5gKq0vtyjQi4qLdRy PTmdTxdiT5dVfhyULNwT1db2MBsJeawu2efxJZ/c -----END CERTIFICATE-----Generated at Fri May 31 19:47:16 2024 by rpki-client on console-fra.rpki-client.org