$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.cer File: 7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.cer (raw, json) Hash identifier: 6deWXMm1kSfXFOi0/DZEwJ1hEBvKBf8hIpZ3FV+S21k= Subject key identifier: 7D:EA:F2:4C:80:01:46:A2:F7:76:09:AE:E7:A4:83:30:BA:4A:AE:2B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 70E263B947FE8F0A467E4553A91F0C31DCB57D21 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 06 Dec 2024 13:30:01 +0000 Certificate not after: Fri 05 Dec 2025 13:35:01 +0000 Subordinate resources: AS: 273069 IP: 2803:7790::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Dec 2024 14:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e2:63:b9:47:fe:8f:0a:46:7e:45:53:a9:1f:0c:31:dc:b5:7d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Dec 6 13:30:01 2024 GMT Not After : Dec 5 13:35:01 2025 GMT Subject: CN=7DEAF24C800146A2F77609AEE7A48330BA4AAE2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:3f:f4:15:aa:80:e9:52:c8:16:b8:e4:76: 2d:c7:c1:51:3c:0b:eb:3f:01:cc:c9:1d:0b:f8:d8: ef:3c:80:ff:57:74:f0:a1:85:19:21:1c:23:f3:d1: 4f:6e:0a:ee:fd:c6:de:49:97:15:2a:7e:7a:f8:19: c7:10:9f:ed:2e:ff:6b:d2:88:68:d3:5a:e2:84:86: 1d:88:89:37:a1:2a:11:8b:00:2c:de:3f:a6:a0:38: ec:f3:f5:6a:b3:79:e4:ba:fb:eb:73:d1:d2:07:7b: 76:aa:25:e0:47:cc:0f:4d:d8:91:79:0c:8e:ba:3c: 5a:1e:bd:e5:19:9c:81:c8:3f:58:0a:b1:6a:62:95: 1e:67:42:e1:9e:e7:2f:6c:6a:d7:0d:1a:6f:fc:95: dd:dc:4a:b2:11:00:29:d1:cf:56:62:98:f8:93:5b: 24:ca:ab:37:63:2f:76:67:7e:0d:cc:a3:27:c6:31: 16:35:44:50:27:77:aa:02:d7:fc:2b:51:25:59:46: 30:88:1e:52:0f:25:81:79:97:78:4e:ef:40:77:b0: 78:e4:d6:4f:0e:0e:6c:5c:f8:26:53:67:30:c3:da: 0d:69:1b:c4:4c:5f:c8:0b:ce:96:3e:f2:0b:a5:48: 81:82:20:5e:88:b3:36:6e:ec:ba:02:d8:eb:f2:3f: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:EA:F2:4C:80:01:46:A2:F7:76:09:AE:E7:A4:83:30:BA:4A:AE:2B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D03E1671E25486BC2C4EA6EB019714C150FB413CDC3CB17322824E7017771D8F/0/7DEAF24C800146A2F77609AEE7A48330BA4AAE2B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273069 Signature Algorithm: sha256WithRSAEncryption a1:78:5f:21:30:e6:f9:30:4c:c7:9b:aa:5a:63:ce:3a:4d:8c: 9e:64:a2:7a:a7:c9:8e:3d:78:89:90:04:6c:99:4c:44:8a:6c: aa:c7:c9:21:fe:7c:23:e9:b5:f8:78:9a:75:a0:b8:46:e0:e5: 34:f2:8d:97:a1:29:ed:a5:f9:39:a2:51:f0:90:c5:26:2f:a9: fc:3e:65:ab:ae:15:1d:58:11:60:4c:c8:82:d4:21:94:da:50: 22:0e:a3:72:9a:42:42:1b:ee:17:37:e8:4a:e9:f5:24:19:c4: ba:bf:1c:39:41:09:4f:31:53:11:fa:36:7a:5a:e0:d0:34:ba: 6c:88:2d:ef:f6:db:16:10:47:8a:72:2b:38:5d:e8:50:a4:66: 6f:4b:c7:f1:c3:62:b2:52:98:e3:ba:ff:63:17:53:f6:2c:88: 6d:03:e5:25:af:3f:9c:ce:ce:b3:40:59:0c:cd:35:71:a4:53: cd:b4:1c:2f:9c:fe:58:80:da:98:c3:fa:0d:a5:a6:45:3c:02: be:27:57:3d:5b:70:83:5d:58:f6:03:39:3c:b4:b4:4a:2f:ef: 1d:8c:84:dd:3f:8d:ef:59:e3:5f:03:c0:cc:66:73:88:ad:70: 0d:0a:d8:be:f4:9e:cd:cb:aa:e3:0f:b0:fa:e5:56:f1:74:99: 11:d9:dc:79 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUcOJjuUf+jwpGfkVTqR8MMdy1fSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDEyMDYxMzMwMDFaFw0yNTEyMDUxMzM1MDFaMDMxMTAvBgNV BAMTKDdERUFGMjRDODAwMTQ2QTJGNzc2MDlBRUU3QTQ4MzMwQkE0QUFFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVj/0FaqA6VLIFrjkdi3HwVE8 C+s/AczJHQv42O88gP9XdPChhRkhHCPz0U9uCu79xt5JlxUqfnr4GccQn+0u/2vS iGjTWuKEhh2IiTehKhGLACzeP6agOOzz9WqzeeS6++tz0dIHe3aqJeBHzA9N2JF5 DI66PFoeveUZnIHIP1gKsWpilR5nQuGe5y9satcNGm/8ld3cSrIRACnRz1ZimPiT WyTKqzdjL3Znfg3MoyfGMRY1RFAnd6oC1/wrUSVZRjCIHlIPJYF5l3hO70B3sHjk 1k8ODmxc+CZTZzDD2g1pG8RMX8gLzpY+8gulSIGCIF6IszZu7LoC2OvyPwhFAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR96vJMgAFGovd2 Ca7npIMwukquKzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDAzRTE2NzFFMjU0ODZCQzJDNEVBNkVC MDE5NzE0QzE1MEZCNDEzQ0RDM0NCMTczMjI4MjRFNzAxNzc3MUQ4Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EMDNFMTY3MUUyNTQ4NkJDMkM0RUE2RUIwMTk3MTRDMTUwRkI0MTNDREMz Q0IxNzMyMjgyNEU3MDE3NzcxRDhGLzAvN0RFQUYyNEM4MDAxNDZBMkY3NzYwOUFF RTdBNDgzMzBCQTRBQUUyQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN3kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKq0wDQYJKoZIhvcNAQELBQADggEBAKF4XyEw 5vkwTMebqlpjzjpNjJ5konqnyY49eImQBGyZTESKbKrHySH+fCPptfh4mnWguEbg 5TTyjZehKe2l+TmiUfCQxSYvqfw+ZauuFR1YEWBMyILUIZTaUCIOo3KaQkIb7hc3 6Erp9SQZxLq/HDlBCU8xUxH6Nnpa4NA0umyILe/22xYQR4pyKzhd6FCkZm9Lx/HD YrJSmOO6/2MXU/YsiG0D5SWvP5zOzrNAWQzNNXGkU820HC+c/liA2pjD+g2lpkU8 Ar4nVz1bcINdWPYDOTy0tEov7x2MhN0/je9Z418DwMxmc4itcA0K2L70ns3LquMP sPrlVvF0mRHZ3Hk= -----END CERTIFICATE-----Generated at Thu Dec 26 18:35:01 2024 by rpki-client on console-fra.rpki-client.org