$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer File: 725E298CCA0B840DB726F60EED140C37FDB23BD6.cer (raw, json) Hash identifier: 8y/doum0isivRPP2Sak506OZQJtrYRhaQkVMNvU0vh4= Subject key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1A13F82836A3E3F05CDD8F00FE80F8EC0568958E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:55:23 +0000 Certificate not after: Tue 04 Mar 2025 18:00:23 +0000 Subordinate resources: AS: 19114 IP: 181.188.192.0/18 IP: 186.65.0.0/18 IP: 200.7.192.0/18 IP: 200.24.192.0/19 IP: 2800:830::/31 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 May 2024 09:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:13:f8:28:36:a3:e3:f0:5c:dd:8f:00:fe:80:f8:ec:05:68:95:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:55:23 2024 GMT Not After : Mar 4 18:00:23 2025 GMT Subject: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:9b:88:ab:9b:a7:1c:17:47:1e:bc:be:7a: 94:05:73:72:5b:f8:eb:0d:95:24:57:df:6b:50:ac: 62:2a:d5:1c:1f:e7:04:79:4d:d1:4d:49:0b:c9:84: f7:6c:61:e3:28:38:68:d9:c2:70:77:99:49:76:32: 7d:d6:15:8e:ed:76:d1:91:3a:30:ae:67:9c:0e:21: 49:1e:d4:c5:63:8f:e7:c5:4f:9c:e7:f1:b9:e2:4e: 7a:b8:ca:59:d9:54:87:f8:ad:7e:15:b6:65:1a:1c: eb:fa:ea:23:b8:31:7c:09:ec:4a:21:cb:8d:d1:c8: 84:fe:88:29:be:ad:ae:7c:74:e6:63:e1:34:46:a9: de:39:19:9b:cb:13:bb:7c:f8:e0:77:21:4a:d5:a1: 7d:14:e5:9d:ae:95:a1:9c:26:ee:2f:ba:7b:55:ef: 99:3b:a6:14:8b:6d:ac:9e:6b:3f:d2:07:af:41:e0: 61:32:87:c1:3d:d7:7f:c4:b0:b3:46:0f:53:76:03: 1d:51:a1:8c:03:36:df:46:b1:16:de:77:4f:10:45: 86:45:73:bb:b3:80:24:d1:65:89:88:0a:96:ba:1f: 28:53:f9:2e:d4:65:7f:de:a5:f3:7d:01:c1:67:ac: f1:3d:a1:e9:a6:6a:7c:ec:4e:aa:f8:b8:3b:d0:10: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.188.192.0/18 186.65.0.0/18 200.7.192.0/18 200.24.192.0/19 IPv6: 2800:830::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19114 Signature Algorithm: sha256WithRSAEncryption 8a:f7:8e:b3:ad:f5:ba:70:29:52:9b:a3:34:70:25:7e:3f:32: 40:55:1c:d3:d9:7c:a6:9f:8b:69:10:fb:c9:92:e1:21:0d:68: 00:da:6b:10:a7:5b:d4:02:d0:1b:4a:d7:97:7c:de:62:ec:91: da:66:55:55:29:92:cb:ba:e8:07:dd:ee:15:5e:27:60:4e:b8: 28:79:7d:14:41:ab:0b:b0:02:22:79:c5:ad:b6:12:fc:4b:ba: 40:59:fe:bc:cd:aa:ad:e1:0e:a1:10:e2:29:a4:c1:f2:fe:f8: c4:5a:35:ae:19:3f:29:06:a5:bb:d3:3f:dd:ab:d7:d1:cf:de: fc:b0:d7:8e:84:e1:d7:0e:f0:7c:bb:0f:28:8b:07:3b:58:06: 8a:c7:47:30:88:56:02:4e:9d:0d:04:da:44:64:fd:53:03:c7: 18:7c:3e:85:3c:c3:11:76:ce:e8:7c:ad:c4:2f:ac:84:ed:5a: 84:9a:92:cc:11:b2:6e:ef:02:cb:5e:2c:58:26:de:e5:0d:61: 31:62:5a:fc:04:c4:a8:ed:3d:0c:8a:84:10:70:b2:81:d4:82: 4d:a8:d3:5f:77:1d:ba:d8:73:7a:ff:20:48:1c:e3:4c:27:9c: 72:94:1c:db:1c:b2:de:9c:6f:90:f5:d3:a2:d6:be:c7:12:ea: bc:93:f5:1c -----BEGIN CERTIFICATE----- MIIGtjCCBZ6gAwIBAgIUGhP4KDaj4/Bc3Y8A/oD47AVolY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU1MjNaFw0yNTAzMDQxODAwMjNaMDMxMTAvBgNV BAMTKDcyNUUyOThDQ0EwQjg0MERCNzI2RjYwRUVEMTQwQzM3RkRCMjNCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fpuIq5unHBdHHry+epQFc3Jb +OsNlSRX32tQrGIq1Rwf5wR5TdFNSQvJhPdsYeMoOGjZwnB3mUl2Mn3WFY7tdtGR OjCuZ5wOIUke1MVjj+fFT5zn8bniTnq4ylnZVIf4rX4VtmUaHOv66iO4MXwJ7Eoh y43RyIT+iCm+ra58dOZj4TRGqd45GZvLE7t8+OB3IUrVoX0U5Z2ulaGcJu4vuntV 75k7phSLbayeaz/SB69B4GEyh8E913/EsLNGD1N2Ax1RoYwDNt9GsRbed08QRYZF c7uzgCTRZYmICpa6HyhT+S7UZX/epfN9AcFnrPE9oemmanzsTqr4uDvQEPY3AgMB AAGjggPAMIIDvDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRyXimMyguEDbcm 9g7tFAw3/bI71jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUIwN0E0Q0Y5QzA5M0Q0NkIxNUU2QjFC MDk5NTRGRTlDODI3NjAwOTA3NEQwMzc3MkU0NTI2MUQ3NjkyNzFBQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4Mjc2MDA5MDc0 RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvNzI1RTI5OENDQTBCODQwREI3MjZGNjBF RUQxNDBDMzdGREIyM0JENi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGtbzAAwQGukEA AwQGyAfAAwQFyBjAMA0EAgACMAcDBQEoAAgwMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAkqqMA0GCSqGSIb3DQEBCwUAA4IBAQCK946zrfW6cClSm6M0cCV+PzJAVRzT 2Xymn4tpEPvJkuEhDWgA2msQp1vUAtAbSteXfN5i7JHaZlVVKZLLuugH3e4VXidg TrgoeX0UQasLsAIiecWtthL8S7pAWf68zaqt4Q6hEOIppMHy/vjEWjWuGT8pBqW7 0z/dq9fRz978sNeOhOHXDvB8uw8oiwc7WAaKx0cwiFYCTp0NBNpEZP1TA8cYfD6F PMMRds7ofK3EL6yE7VqEmpLMEbJu7wLLXixYJt7lDWExYlr8BMSo7T0MioQQcLKB 1IJNqNNfdx262HN6/yBIHONMJ5xylBzbHLLenG+Q9dOi1r7HEuq8k/Uc -----END CERTIFICATE-----Generated at Tue May 21 16:49:21 2024 by rpki-client on console-fra.rpki-client.org