$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer File: 7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer (raw, json) Hash identifier: 2U03Zqr/XTNB5pwIguvOheOpt/QEjE+qqMOx9Zb/WmI= Subject key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 23CA35F9483FBEBA0A6E14602D2258C06B8EADD9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:47:32 +0000 Certificate not after: Tue 04 Mar 2025 17:52:32 +0000 Subordinate resources: AS: 265741 IP: 128.201.80.0/22 IP: 2803:93c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 May 2024 10:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ca:35:f9:48:3f:be:ba:0a:6e:14:60:2d:22:58:c0:6b:8e:ad:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:47:32 2024 GMT Not After : Mar 4 17:52:32 2025 GMT Subject: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:dd:e3:8b:5d:7a:18:96:1a:73:a9:6b:a1: 21:c3:8f:b1:87:bd:2a:0e:2b:b7:de:2b:6c:9b:64: 67:b5:21:ae:79:f1:3e:2d:d6:21:76:4e:7c:44:ca: f9:16:ea:58:40:66:d9:6a:fe:3c:0d:03:87:c7:60: 33:52:9d:ab:15:bc:9f:67:ce:d8:27:ff:ac:05:05: 9c:75:56:6d:16:42:a0:d7:6f:bf:29:8b:58:4c:73: 93:79:13:e2:8b:3f:30:1b:65:4e:a5:d1:d7:2e:cd: 67:4e:ac:3b:3f:f3:9b:c0:3e:4b:a7:42:fe:24:79: 54:36:bf:1c:d3:09:23:b1:39:6d:6f:8d:78:2a:a6: 92:34:46:01:df:e9:c1:3d:2e:30:c6:b7:b8:b4:51: ea:c9:76:8f:9b:79:37:47:3d:5e:05:b8:2c:67:ee: 07:8f:b5:85:83:17:5e:e4:c2:15:7e:20:ab:e1:bf: 1b:b0:b3:49:1e:44:d9:1e:8b:9c:4a:e4:c9:d7:90: a7:cb:74:af:5b:32:6a:77:3e:3b:85:5d:9c:94:bc: 68:2c:5b:b3:57:f7:10:6a:71:d5:97:04:ed:0d:7a: 26:d6:c7:e6:fe:7b:e6:af:ac:f0:e0:c2:e4:c0:56: 72:5e:65:ee:0e:08:6e:b8:27:49:12:67:66:ab:5d: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.80.0/22 IPv6: 2803:93c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265741 Signature Algorithm: sha256WithRSAEncryption c8:07:65:3b:f3:71:ec:b0:fe:9c:93:50:f5:9f:4c:f3:83:48: d8:83:7a:36:2c:e8:9d:5f:c2:29:ba:e1:17:e9:8a:dd:f2:ed: 20:1c:6d:d5:98:4b:8e:60:7d:e1:32:ad:11:8c:38:84:25:cb: 2e:66:89:94:cf:a4:e5:d8:d7:ac:80:b2:23:ab:32:8c:92:06: d6:50:9c:65:8e:c9:b7:ce:68:5a:38:04:39:77:52:3d:5c:f0: 1f:1f:31:90:2d:0e:5c:ab:67:7a:7e:bc:99:bd:2e:75:d7:e1: 44:27:42:9c:4c:b1:02:8b:ee:7a:55:3f:0e:2b:f8:7d:57:7e: 89:79:dd:42:cb:85:18:39:3a:76:12:48:08:83:7f:10:2d:9f: 9a:81:f7:db:9a:2f:7d:81:aa:e2:ad:bc:85:f1:da:90:aa:a9: 96:21:7c:59:09:fc:05:71:3a:85:c5:ee:aa:9a:5f:c3:d5:d6: 55:99:de:89:c6:49:fd:80:e8:8e:0f:b3:90:b8:8b:4c:b6:f4: 74:e8:14:d1:42:58:61:a0:2b:3c:5b:2f:24:0a:6a:c8:f9:bc: cb:ea:d5:97:b3:aa:e8:35:80:19:d9:92:d9:2e:c3:82:08:81: 05:07:78:44:78:2d:4b:dd:2e:bd:2f:47:dc:82:3b:14:aa:9e: df:f4:f2:cb -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUI8o1+Ug/vroKbhRgLSJYwGuOrdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ3MzJaFw0yNTAzMDQxNzUyMzJaMDMxMTAvBgNV BAMTKDcxMTYyOTBEN0VCOTYxREJCMkFFN0M0RjEwNzA1NDNENkY4MDMwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEd3ji116GJYac6lroSHDj7GH vSoOK7feK2ybZGe1Ia558T4t1iF2TnxEyvkW6lhAZtlq/jwNA4fHYDNSnasVvJ9n ztgn/6wFBZx1Vm0WQqDXb78pi1hMc5N5E+KLPzAbZU6l0dcuzWdOrDs/85vAPkun Qv4keVQ2vxzTCSOxOW1vjXgqppI0RgHf6cE9LjDGt7i0UerJdo+beTdHPV4FuCxn 7gePtYWDF17kwhV+IKvhvxuws0keRNkei5xK5MnXkKfLdK9bMmp3PjuFXZyUvGgs W7NX9xBqcdWXBO0NeibWx+b+e+avrPDgwuTAVnJeZe4OCG64J0kSZ2arXQjdAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxFikNfrlh27Ku fE8QcFQ9b4AwqTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODhEN0IwNUU2OEEzNjNCNjA0QUExREJB OUIzNjY1RjhDM0Y1NUIxM0IyQjI4NDMxNzQ3MUY4NzcwOUVFQTBEOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84OEQ3QjA1RTY4QTM2M0I2MDRBQTFEQkE5QjM2NjVGOEMzRjU1QjEzQjJC Mjg0MzE3NDcxRjg3NzA5RUVBMEQ4LzAvNzExNjI5MEQ3RUI5NjFEQkIyQUU3QzRG MTA3MDU0M0Q2RjgwMzBBOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCgMlQMA0EAgAC MAcDBQAoA5PAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQODTANBgkqhkiG9w0B AQsFAAOCAQEAyAdlO/Nx7LD+nJNQ9Z9M84NI2IN6NizonV/CKbrhF+mK3fLtIBxt 1ZhLjmB94TKtEYw4hCXLLmaJlM+k5djXrICyI6syjJIG1lCcZY7Jt85oWjgEOXdS PVzwHx8xkC0OXKtnen68mb0uddfhRCdCnEyxAovuelU/Div4fVd+iXndQsuFGDk6 dhJICIN/EC2fmoH325ovfYGq4q28hfHakKqpliF8WQn8BXE6hcXuqppfw9XWVZne icZJ/YDojg+zkLiLTLb0dOgU0UJYYaArPFsvJApqyPm8y+rVl7Oq6DWAGdmS2S7D ggiBBQd4RHgtS90uvS9H3II7FKqe3/Tyyw== -----END CERTIFICATE-----Generated at Sat May 18 17:19:20 2024 by rpki-client on console-ams.rpki-client.org