$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer File: 665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer (raw, json) Hash identifier: 7BAXEnELgrQqGb9AN7vpWTfyUiwG7EH6YAaIbm+nkMU= Subject key identifier: 66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6A5DF49F44958EF4310C5F72A39CEE2983880CF4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:52:52 +0000 Certificate not after: Tue 04 Mar 2025 17:57:52 +0000 Subordinate resources: AS: 52372 IP: 170.254.164.0/22 IP: 186.5.228.0/22 IP: 190.110.184.0/21 IP: 2803:4400::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Oct 2024 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5d:f4:9f:44:95:8e:f4:31:0c:5f:72:a3:9c:ee:29:83:88:0c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:52:52 2024 GMT Not After : Mar 4 17:57:52 2025 GMT Subject: CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:b1:3f:81:1f:cc:c9:1a:71:b1:1c:c3:5f: 9f:54:dc:28:d0:13:40:07:0d:1d:b2:58:70:b0:5a: a4:5b:87:87:93:02:fd:57:b1:d7:f3:d8:f9:b5:15: 80:4c:77:28:ba:72:d9:86:6e:fd:04:89:dc:56:4c: 68:01:27:ff:4e:a4:a0:c7:4f:25:20:0b:5b:3e:99: 49:98:d8:fd:70:7b:d3:fb:60:e1:cf:83:38:2d:50: c7:4e:00:4f:b3:7c:05:9d:fa:61:7b:db:31:22:c8: f1:56:bd:88:e4:f6:7a:12:d1:f7:0d:f3:df:b1:d0: 59:5e:c0:05:8b:93:eb:9f:95:5e:3b:85:1b:94:96: 0a:89:fa:eb:7f:82:60:92:a9:7b:42:2b:e2:54:29: 19:32:9d:68:29:58:67:39:03:74:bf:c8:1b:a7:11: 8f:a2:9a:33:0c:b1:c1:ae:20:52:c1:75:b5:cb:90: 72:9c:29:76:bf:46:be:94:bc:13:8a:e7:04:ba:52: 3e:6d:15:ec:ff:ba:7a:1a:ff:99:ee:32:8e:bf:e7: 91:63:51:da:38:fa:f9:06:13:1e:00:d0:cb:bd:1b: 57:a3:ae:14:ff:72:0e:a8:e6:71:3f:77:41:73:68: e9:a4:84:84:c9:fa:07:be:25:a2:18:6e:c2:31:4c: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.164.0/22 186.5.228.0/22 190.110.184.0/21 IPv6: 2803:4400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52372 Signature Algorithm: sha256WithRSAEncryption a0:32:11:b0:65:f9:64:75:2c:1a:d3:8d:38:7e:4c:a5:e6:3d: 67:68:11:c2:78:90:bd:88:27:55:f1:91:39:f0:0c:dc:11:71: 8f:d6:cd:a1:f5:5d:d3:c8:0a:fb:57:1b:23:2f:0e:87:2f:eb: a6:76:ad:b2:f9:d5:d5:13:97:d3:a2:ef:4d:96:28:a0:31:36: f1:47:e3:b0:ee:5d:7c:c5:9a:62:4c:fe:33:0f:a4:cd:fc:51: 9c:20:0a:89:1c:58:1f:9b:56:7b:88:ba:67:ac:cb:4a:47:4a: d7:02:81:ce:0b:05:d0:b1:f5:3f:4d:fa:c1:a6:42:9b:6e:df: 2f:95:c4:ab:4c:53:36:06:da:fe:19:ae:9c:36:2c:19:71:84: 25:ff:12:57:48:3b:df:cd:0b:cf:f7:de:9d:d6:62:44:dc:cc: a7:6b:e6:68:41:1e:88:9b:dc:67:bf:f6:f2:2a:d9:2d:58:51: e4:fe:21:bf:7f:7b:a4:28:75:a1:b7:96:cd:20:fb:76:af:5c: 03:19:7d:18:fe:c1:01:9d:c0:38:b8:89:c3:6f:c5:83:0e:82: 89:46:19:09:7e:6c:45:cf:67:5b:a5:23:0f:eb:8c:b2:0f:9e: 09:65:eb:9b:a8:0a:15:b5:da:bc:42:57:2f:18:5c:aa:f8:7b: 50:d8:5c:23 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUal30n0SVjvQxDF9yo5zuKYOIDPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUyNTJaFw0yNTAzMDQxNzU3NTJaMDMxMTAvBgNV BAMTKDY2NUI2MkIwRDBGMUQwNThBNjlCMzBFREZERDUwQjgwOEEzQTkxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlbE/gR/MyRpxsRzDX59U3CjQ E0AHDR2yWHCwWqRbh4eTAv1Xsdfz2Pm1FYBMdyi6ctmGbv0EidxWTGgBJ/9OpKDH TyUgC1s+mUmY2P1we9P7YOHPgzgtUMdOAE+zfAWd+mF72zEiyPFWvYjk9noS0fcN 89+x0FlewAWLk+uflV47hRuUlgqJ+ut/gmCSqXtCK+JUKRkynWgpWGc5A3S/yBun EY+imjMMscGuIFLBdbXLkHKcKXa/Rr6UvBOK5wS6Uj5tFez/unoa/5nuMo6/55Fj Udo4+vkGEx4A0Mu9G1ejrhT/cg6o5nE/d0FzaOmkhITJ+ge+JaIYbsIxTHvbAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmW2Kw0PHQWKab MO391QuAijqR7jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEM1QTdENUNGQTU5RjUyRTY2NTlERkYx Mzc2MzBEMjBFNkRENTQ3RjcxNUU1QzA0QTREMjNFNDkyQzIwNDIxMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84QzVBN0Q1Q0ZBNTlGNTJFNjY1OURGRjEzNzYzMEQyMEU2REQ1NDdGNzE1 RTVDMDRBNEQyM0U0OTJDMjA0MjEyLzAvNjY1QjYyQjBEMEYxRDA1OEE2OUIzMEVE RkRENTBCODA4QTNBOTFFRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCqv6kAwQCugXk AwQDvm64MA0EAgACMAcDBQAoA0QAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDM lDANBgkqhkiG9w0BAQsFAAOCAQEAoDIRsGX5ZHUsGtONOH5MpeY9Z2gRwniQvYgn VfGROfAM3BFxj9bNofVd08gK+1cbIy8Ohy/rpnatsvnV1ROX06LvTZYooDE28Ufj sO5dfMWaYkz+Mw+kzfxRnCAKiRxYH5tWe4i6Z6zLSkdK1wKBzgsF0LH1P036waZC m27fL5XEq0xTNgba/hmunDYsGXGEJf8SV0g7380Lz/fendZiRNzMp2vmaEEeiJvc Z7/28irZLVhR5P4hv397pCh1obeWzSD7dq9cAxl9GP7BAZ3AOLiJw2/Fgw6CiUYZ CX5sRc9nW6UjD+uMsg+eCWXrm6gKFbXavEJXLxhcqvh7UNhcIw== -----END CERTIFICATE-----Generated at Fri Sep 27 23:38:22 2024 by rpki-client on console-ams.rpki-client.org