$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.cer File: 7875A88BF2213772A3637B8BD1F775EC98F2275F.cer (raw, json) Hash identifier: Vbt9dYgVAk+BT1Cn8pY/wsUyb3yGpHxEWJLgfbkCcmI= Subject key identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 046922EF1641CD9EAFDD22E9035358E23626399C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:37:12 +0000 Certificate not after: Tue 04 Mar 2025 17:42:12 +0000 Subordinate resources: AS: 11556 IP: 186.72.0.0/14 IP: 190.32.0.0/14 IP: 201.224.0.0/14 IP: 2800:350::/29 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:69:22:ef:16:41:cd:9e:af:dd:22:e9:03:53:58:e2:36:26:39:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:37:12 2024 GMT Not After : Mar 4 17:42:12 2025 GMT Subject: CN=7875A88BF2213772A3637B8BD1F775EC98F2275F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:2a:58:94:a2:3b:27:a1:b1:62:87:1f:55: 63:2e:ee:1b:cf:d8:71:6a:eb:6c:48:23:37:ce:fe: 42:20:3b:f2:f6:c7:b7:fe:75:9d:1c:4d:f0:2d:c2: 76:fd:56:75:08:d7:0c:18:46:b7:0a:37:ba:28:99: 4c:a6:14:f0:2d:e9:d3:ab:56:52:06:38:62:8d:60: 10:b7:e5:8d:a6:54:7d:a2:71:6a:3a:10:eb:e7:41: ba:ed:fb:be:d8:59:da:76:2c:3a:ef:29:0b:7c:4e: 38:c9:f7:2f:1b:4f:c6:fa:65:1e:47:2e:56:8b:9c: aa:e4:1b:99:08:5c:8d:7c:81:68:45:86:c2:4c:f2: b6:83:b5:a2:62:84:19:52:96:6e:b1:72:f1:ed:47: 3c:e6:55:56:07:4c:58:b5:49:e1:fc:39:6a:93:9d: e4:a2:8d:56:a6:fc:17:79:4a:77:6d:ef:43:02:59: 75:2c:e8:0f:a0:99:4c:f7:9c:2c:ec:c2:58:1b:c5: 98:eb:aa:d2:22:bf:6f:9f:b0:44:13:62:07:3d:c8: b2:44:b5:77:33:48:0e:39:5a:10:c3:44:7e:3c:70: 00:e3:86:3f:f9:5a:74:73:27:65:d0:44:31:52:0d: 79:27:bc:e4:b7:5c:e7:db:e0:af:4e:5e:77:4f:7b: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:75:A8:8B:F2:21:37:72:A3:63:7B:8B:D1:F7:75:EC:98:F2:27:5F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B5FC9E51DE269D28DCDE0BB2283871F26D778B804513332767F2F0AE391FA9BD/0/7875A88BF2213772A3637B8BD1F775EC98F2275F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.72.0.0/14 190.32.0.0/14 201.224.0.0/14 IPv6: 2800:350::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11556 Signature Algorithm: sha256WithRSAEncryption b0:81:29:68:13:56:05:35:5a:5f:e2:24:de:b5:d0:eb:12:39: b1:a5:01:5a:79:95:b2:2e:b5:93:d6:94:67:e2:40:ea:47:c2: 0a:7d:13:7c:20:b8:b1:25:83:70:af:38:22:71:f4:7c:dc:6a: 7a:8c:04:58:2a:cd:ee:c0:ab:da:2e:fb:e3:ab:9c:a2:5c:89: 56:2b:7e:8c:ae:32:d2:ed:9d:ea:67:26:fe:93:de:ab:9f:32: 3d:c4:de:85:6e:63:dd:18:1f:c8:72:b8:97:0d:70:bc:0b:8a: 41:3d:53:08:24:6d:5d:02:59:25:17:e9:e0:37:37:44:32:2e: 7b:72:56:95:0d:1c:b4:78:af:f2:3d:f1:d7:1a:67:40:04:80: 47:65:1e:51:0f:9d:d1:ba:c3:87:9e:32:2c:74:96:42:0a:e1: 94:b6:62:35:7e:9f:e7:b4:67:9c:1a:75:a6:a0:11:8e:20:d9: a2:f6:e6:68:e9:87:f9:a8:bc:39:86:97:fe:54:19:72:9f:31: 55:a9:37:10:e4:24:37:23:85:d9:ab:46:83:12:35:c5:d8:68: 74:41:dd:2e:27:73:6c:90:b3:b9:f0:ca:ce:b1:6b:29:7a:cc: de:e9:9c:10:cb:a5:e5:68:3f:5b:f1:15:94:1b:2c:dc:46:14: db:48:c5:06 -----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgIUBGki7xZBzZ6v3SLpA1NY4jYmOZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM3MTJaFw0yNTAzMDQxNzQyMTJaMDMxMTAvBgNV BAMTKDc4NzVBODhCRjIyMTM3NzJBMzYzN0I4QkQxRjc3NUVDOThGMjI3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCREypYlKI7J6GxYocfVWMu7hvP 2HFq62xIIzfO/kIgO/L2x7f+dZ0cTfAtwnb9VnUI1wwYRrcKN7oomUymFPAt6dOr VlIGOGKNYBC35Y2mVH2icWo6EOvnQbrt+77YWdp2LDrvKQt8TjjJ9y8bT8b6ZR5H LlaLnKrkG5kIXI18gWhFhsJM8raDtaJihBlSlm6xcvHtRzzmVVYHTFi1SeH8OWqT neSijVam/Bd5Sndt70MCWXUs6A+gmUz3nCzswlgbxZjrqtIiv2+fsEQTYgc9yLJE tXczSA45WhDDRH48cADjhj/5WnRzJ2XQRDFSDXknvOS3XOfb4K9OXndPe4ZzAgMB AAGjggO3MIIDszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4daiL8iE3cqNj e4vR93XsmPInXzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjVGQzlFNTFERTI2OUQyOERDREUwQkIy MjgzODcxRjI2RDc3OEI4MDQ1MTMzMzI3NjdGMkYwQUUzOTFGQTlCRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNUZDOUU1MURFMjY5RDI4RENERTBCQjIyODM4NzFGMjZENzc4QjgwNDUx MzMzMjc2N0YyRjBBRTM5MUZBOUJELzAvNzg3NUE4OEJGMjIxMzc3MkEzNjM3QjhC RDFGNzc1RUM5OEYyMjc1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAVBAIAATAPAwMCukgDAwK+IAMD AsngMA0EAgACMAcDBQMoAANQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAi0kMA0G CSqGSIb3DQEBCwUAA4IBAQCwgSloE1YFNVpf4iTetdDrEjmxpQFaeZWyLrWT1pRn 4kDqR8IKfRN8ILixJYNwrzgicfR83Gp6jARYKs3uwKvaLvvjq5yiXIlWK36MrjLS 7Z3qZyb+k96rnzI9xN6FbmPdGB/IcriXDXC8C4pBPVMIJG1dAlklF+ngNzdEMi57 claVDRy0eK/yPfHXGmdABIBHZR5RD53RusOHnjIsdJZCCuGUtmI1fp/ntGecGnWm oBGOINmi9uZo6Yf5qLw5hpf+VBlynzFVqTcQ5CQ3I4XZq0aDEjXF2Gh0Qd0uJ3Ns kLO58MrOsWspesze6ZwQy6XlaD9b8RWUGyzcRhTbSMUG -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:42 2024 by rpki-client on console-ams.rpki-client.org