$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer File: 5D6C01932C342063BFD909811E1D18892BDD422B.cer (raw, json) Hash identifier: pHPAfIFHqU/V5VbMJ4BKZUZ7F8zBycN5g+kV+Ulyqfc= Subject key identifier: 5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4D362EB7F1E9E5045B802E527A7E1DC68A277322 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:14:00 +0000 Certificate not after: Tue 04 Mar 2025 18:19:00 +0000 Subordinate resources: AS: 263221 IP: 161.0.176.0/21 IP: 2803:a680::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Oct 2024 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:36:2e:b7:f1:e9:e5:04:5b:80:2e:52:7a:7e:1d:c6:8a:27:73:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:14:00 2024 GMT Not After : Mar 4 18:19:00 2025 GMT Subject: CN=5D6C01932C342063BFD909811E1D18892BDD422B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:6f:15:5a:a8:7c:a6:d6:7f:20:69:d9:d5: 1d:bb:6f:6c:01:39:89:41:8c:5c:8e:a7:77:a8:cb: 6f:4b:1e:f5:c7:b9:71:15:fc:1f:30:9b:74:de:73: 82:22:33:54:e4:c7:7e:0b:24:e6:75:ea:68:79:c7: 9d:5a:d2:d3:c0:d9:a6:5f:be:4c:4b:d5:79:b6:c6: bd:7e:e4:98:cc:1d:9d:6a:f1:74:fd:00:f9:13:33: 75:0a:84:73:88:05:3c:ab:04:97:85:bc:96:4a:0a: 0e:60:6e:da:03:16:c2:30:f0:24:20:11:71:bf:d0: 0f:8f:ef:60:95:f8:ef:fa:64:66:c0:cf:0b:d1:f4: 88:fc:26:4d:b5:c5:2d:5b:ad:48:7f:80:fb:7a:0a: 8c:10:e4:5e:08:2b:3e:6c:e1:04:ee:cd:f7:4b:25: c8:38:aa:32:61:47:21:65:e9:b1:01:c1:7c:80:3b: 33:75:b1:43:17:d8:c4:e9:94:56:dc:b9:75:9b:b0: 0f:eb:12:42:98:76:a2:7d:0b:07:6d:9e:de:26:b1: cb:a9:ae:86:73:2a:a4:fb:90:46:29:96:2c:0d:f2: 04:f5:a3:c7:f5:a5:01:77:f8:06:65:9a:fb:6e:74: ef:3c:8a:52:75:9b:8a:cf:8d:b7:6b:7c:0c:af:1f: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.0.176.0/21 IPv6: 2803:a680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263221 Signature Algorithm: sha256WithRSAEncryption 32:8d:9c:05:8c:11:83:89:7b:2e:79:9c:b1:d9:68:58:44:25: 38:01:67:8c:4f:a5:58:d1:20:91:ef:d9:7d:0e:d5:b7:42:3c: 81:cc:64:35:5f:e3:9c:5d:20:c2:7c:52:4d:78:a4:4b:cb:e9: 8b:33:a2:a6:89:98:a0:f2:43:3d:5b:ac:a4:52:7a:4a:97:2e: 51:99:55:a1:1b:6d:12:df:2e:c1:59:ed:8f:25:92:83:81:50: 3c:27:0a:b2:d0:25:22:26:6d:93:f8:a8:89:48:ce:49:4a:97: c4:b8:90:5f:61:16:49:4d:ac:f5:7a:ad:7d:89:c1:16:a4:ac: 16:e2:37:f1:39:96:be:22:0d:40:87:ad:2d:bf:7c:e5:fc:cd: 69:25:e6:4b:52:e1:cb:45:2c:41:f0:1f:9f:e3:62:db:21:8b: 97:87:f7:a7:ca:52:bc:ec:5a:b3:11:97:f3:fa:66:3c:a4:dc: 77:8a:01:fc:f6:32:57:50:0d:c3:6b:dc:75:85:f1:d1:a0:4c: ce:de:20:5e:df:2d:d9:0b:ad:a9:c1:77:a0:fc:b6:f2:8e:d2: 9f:29:59:7f:3f:bd:5b:95:21:e5:12:32:36:02:81:06:52:a9: 40:50:24:82:fa:2d:ca:52:f8:e6:f0:94:18:f2:ae:da:94:ae: 10:fe:ca:f7 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTTYut/Hp5QRbgC5Sen4dxooncyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE0MDBaFw0yNTAzMDQxODE5MDBaMDMxMTAvBgNV BAMTKDVENkMwMTkzMkMzNDIwNjNCRkQ5MDk4MTFFMUQxODg5MkJERDQyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlm8VWqh8ptZ/IGnZ1R27b2wB OYlBjFyOp3eoy29LHvXHuXEV/B8wm3Tec4IiM1Tkx34LJOZ16mh5x51a0tPA2aZf vkxL1Xm2xr1+5JjMHZ1q8XT9APkTM3UKhHOIBTyrBJeFvJZKCg5gbtoDFsIw8CQg EXG/0A+P72CV+O/6ZGbAzwvR9Ij8Jk21xS1brUh/gPt6CowQ5F4IKz5s4QTuzfdL Jcg4qjJhRyFl6bEBwXyAOzN1sUMX2MTplFbcuXWbsA/rEkKYdqJ9Cwdtnt4mscup roZzKqT7kEYpliwN8gT1o8f1pQF3+AZlmvtudO88ilJ1m4rPjbdrfAyvH3O1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdbAGTLDQgY7/Z CYEeHRiJK91CKzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkVBOEMxN0MxRDA1NENCQUQ1NzYyQkJB Qzg2QUQ5Rjc3MEFFRDUzOTMxQzNBQTc1NzQxRTQ2Q0Y1MjkwMUYwNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRUE4QzE3QzFEMDU0Q0JBRDU3NjJCQkFDODZBRDlGNzcwQUVENTM5MzFD M0FBNzU3NDFFNDZDRjUyOTAxRjA0LzAvNUQ2QzAxOTMyQzM0MjA2M0JGRDkwOTgx MUUxRDE4ODkyQkRENDIyQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDoQCwMA0EAgAC MAcDBQAoA6aAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQENTANBgkqhkiG9w0B AQsFAAOCAQEAMo2cBYwRg4l7LnmcsdloWEQlOAFnjE+lWNEgke/ZfQ7Vt0I8gcxk NV/jnF0gwnxSTXikS8vpizOipomYoPJDPVuspFJ6SpcuUZlVoRttEt8uwVntjyWS g4FQPCcKstAlIiZtk/ioiUjOSUqXxLiQX2EWSU2s9XqtfYnBFqSsFuI38TmWviIN QIetLb985fzNaSXmS1Lhy0UsQfAfn+Ni2yGLl4f3p8pSvOxasxGX8/pmPKTcd4oB /PYyV1ANw2vcdYXx0aBMzt4gXt8t2QutqcF3oPy28o7SnylZfz+9W5Uh5RIyNgKB BlKpQFAkgvotylL45vCUGPKu2pSuEP7K9w== -----END CERTIFICATE-----Generated at Fri Sep 27 23:38:21 2024 by rpki-client on console-ams.rpki-client.org