$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E987EE11A4D8C39E36727363E117EC929A11A78.cer File: 4E987EE11A4D8C39E36727363E117EC929A11A78.cer (raw, json) Hash identifier: rZ/hn5G4ai4GArnL4pXQlJDxFkn3SkSduPsU0gnH+7s= Subject key identifier: 4E:98:7E:E1:1A:4D:8C:39:E3:67:27:36:3E:11:7E:C9:29:A1:1A:78 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 76C3D5965C7D70E551AA21FA86A43F78130AE19E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/4E987EE11A4D8C39E36727363E117EC929A11A78.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 02:30:01 +0000 Certificate not after: Mon 30 Jun 2025 02:35:01 +0000 Subordinate resources: IP: 170.238.8.0/22 IP: 2803:d2c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c3:d5:96:5c:7d:70:e5:51:aa:21:fa:86:a4:3f:78:13:0a:e1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 1 02:30:01 2024 GMT Not After : Jun 30 02:35:01 2025 GMT Subject: CN=4E987EE11A4D8C39E36727363E117EC929A11A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:b8:dd:16:99:b7:ff:da:ad:57:fb:8d:0b: 97:50:85:71:3b:65:17:ce:20:ab:c3:8a:e4:85:6c: a1:f5:c9:35:69:51:5b:2a:c0:03:d6:9d:42:8c:f7: 47:30:50:b6:8c:46:92:3d:c4:ae:38:2a:25:7a:63: 0b:22:b1:2a:a7:9e:8d:85:e4:9b:b8:9a:37:4b:5a: a7:20:79:2a:11:46:0e:a5:61:e0:28:fa:57:81:c4: 6a:86:13:c5:04:7d:6a:5e:0a:e6:bf:15:2f:3f:94: 84:60:72:36:27:70:11:3d:0c:ae:6c:b8:09:90:b1: a3:c8:d4:c4:31:4e:39:b6:5c:cd:ae:ea:8e:77:33: 03:98:10:53:65:1c:2d:70:95:c4:7f:4c:51:aa:f8: b9:6b:03:af:6a:d8:6c:7e:60:3f:e2:66:2f:87:16: f4:36:fb:7d:bb:f9:1f:ba:cd:fc:3d:5a:ed:82:44: 19:cb:0c:b1:39:11:f0:dc:80:48:1c:a6:8c:78:0b: 76:dc:14:fd:09:69:87:6f:82:48:06:56:9c:86:93: 9f:72:8e:51:2a:71:71:64:f5:93:ba:0f:7e:4b:68: 69:9f:5a:7d:e0:8c:bf:a5:05:ba:7d:15:1a:4f:c6: 69:5c:89:4d:cb:5b:ce:ee:36:0a:2c:0f:9d:5e:1d: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:98:7E:E1:1A:4D:8C:39:E3:67:27:36:3E:11:7E:C9:29:A1:1A:78 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/4E987EE11A4D8C39E36727363E117EC929A11A78.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.8.0/22 IPv6: 2803:d2c0::/32 Signature Algorithm: sha256WithRSAEncryption 5a:cb:1a:24:52:83:85:24:bc:dd:cf:20:8e:d9:56:e6:d1:c2: a2:0c:94:37:23:8c:b4:d6:ec:f2:6d:4f:9b:6a:8b:4a:bd:38: e2:24:9b:ac:83:9a:fd:17:2c:56:5a:a1:c3:13:72:b2:68:c2: 80:60:85:05:fa:5d:a4:f6:74:36:0d:c2:46:a3:a3:89:f3:b7: f7:d5:62:05:b1:0d:d8:ee:59:7b:a8:9f:aa:f8:06:e7:d2:21: 73:d3:a7:85:94:e4:54:87:a8:29:75:3c:19:55:47:3a:31:1f: 12:bc:c5:82:df:34:f6:c1:e7:31:92:dd:8d:c8:19:23:f7:7d: 4d:b7:05:68:95:fd:52:b8:dd:6d:d0:c4:db:37:4e:c8:a4:0e: 72:8a:19:3e:3a:73:16:3f:5b:9a:5e:02:58:92:b4:82:a4:6c: 80:a1:e0:b9:1c:ea:57:b4:b1:f0:48:4a:aa:9b:9b:c1:91:5a: 6d:c0:6a:b9:e2:f9:dd:d0:79:7d:86:a6:d5:87:6f:eb:c8:c4: fb:63:07:58:52:6b:9e:eb:76:4b:e5:9b:0b:5c:a9:c3:16:55: 3e:87:5f:9c:98:50:2e:f9:42:82:98:af:7c:7e:55:fc:9e:bb: c9:41:b4:f7:cb:c3:aa:3b:c8:ce:4a:2f:d3:ec:77:be:69:40: a6:72:4d:26 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUdsPVllx9cOVRqiH6hqQ/eBMK4Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA3MDEwMjMwMDFaFw0yNTA2MzAwMjM1MDFaMDMxMTAvBgNV BAMTKDRFOTg3RUUxMUE0RDhDMzlFMzY3MjczNjNFMTE3RUM5MjlBMTFBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhLjdFpm3/9qtV/uNC5dQhXE7 ZRfOIKvDiuSFbKH1yTVpUVsqwAPWnUKM90cwULaMRpI9xK44KiV6YwsisSqnno2F 5Ju4mjdLWqcgeSoRRg6lYeAo+leBxGqGE8UEfWpeCua/FS8/lIRgcjYncBE9DK5s uAmQsaPI1MQxTjm2XM2u6o53MwOYEFNlHC1wlcR/TFGq+LlrA69q2Gx+YD/iZi+H FvQ2+327+R+6zfw9Wu2CRBnLDLE5EfDcgEgcpox4C3bcFP0JaYdvgkgGVpyGk59y jlEqcXFk9ZO6D35LaGmfWn3gjL+lBbp9FRpPxmlciU3LW87uNgosD51eHY8xAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROmH7hGk2MOeNn JzY+EX7JKaEaeDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzNDMENDQzFBOTRDRjgyMjQ3RDJGQTgz MDFGNDlBNzU0OUIzNEMwNzE1QjdFMTAwQzk5Q0VCQTI2NTUxM0M3Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DM0MwQ0NDMUE5NENGODIyNDdEMkZBODMwMUY0OUE3NTQ5QjM0QzA3MTVC N0UxMDBDOTlDRUJBMjY1NTEzQzcyLzAvNEU5ODdFRTExQTREOEMzOUUzNjcyNzM2 M0UxMTdFQzkyOUExMUE3OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqu4IMA0EAgAC MAcDBQAoA9LAMA0GCSqGSIb3DQEBCwUAA4IBAQBayxokUoOFJLzdzyCO2Vbm0cKi DJQ3I4y01uzybU+baotKvTjiJJusg5r9FyxWWqHDE3KyaMKAYIUF+l2k9nQ2DcJG o6OJ87f31WIFsQ3Y7ll7qJ+q+Abn0iFz06eFlORUh6gpdTwZVUc6MR8SvMWC3zT2 wecxkt2NyBkj931NtwVolf1SuN1t0MTbN07IpA5yihk+OnMWP1uaXgJYkrSCpGyA oeC5HOpXtLHwSEqqm5vBkVptwGq54vnd0Hl9hqbVh2/ryMT7YwdYUmue63ZL5ZsL XKnDFlU+h1+cmFAu+UKCmK98flX8nrvJQbT3y8OqO8jOSi/T7He+aUCmck0m -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:41 2024 by rpki-client on console-ams.rpki-client.org