$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer File: 98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer (raw, json) Hash identifier: OP6J2ZFy6xlm7gsp72Qc+5uILSJuuTrqFna9sKr1yU0= Subject key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 33C16BFCEB77081F8181BE253B4CC0D34EEBCB9E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:56:48 +0000 Certificate not after: Tue 04 Mar 2025 18:01:48 +0000 Subordinate resources: AS: 61471 IP: 201.130.82.0/23 IP: 2801:11:a000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c1:6b:fc:eb:77:08:1f:81:81:be:25:3b:4c:c0:d3:4e:eb:cb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:56:48 2024 GMT Not After : Mar 4 18:01:48 2025 GMT Subject: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:01:9a:d5:61:d4:d3:5e:03:49:a3:32:ba: 86:76:8c:29:d3:e2:92:96:bb:0a:61:4e:cf:c8:69: f4:20:ed:ce:c5:42:17:e2:5d:58:dc:d8:90:cb:51: 02:64:93:64:9b:c1:38:a1:a1:d2:e6:e3:34:31:52: b7:4f:65:60:92:f1:da:1d:dc:12:d2:29:e4:05:2f: 0e:dc:83:36:ca:b4:56:9d:26:c9:17:32:a9:d2:f4: 3a:35:25:15:6c:ea:20:43:22:52:2d:bd:b8:75:f1: d5:38:3e:a0:0c:f7:6e:fa:81:8f:15:2b:e2:1e:23: c5:54:e3:9c:dc:8e:1d:f4:2a:de:e7:34:e3:38:22: 13:e7:96:9f:d2:a4:8e:06:32:3c:56:79:0f:05:05: 96:c7:6c:31:13:58:e4:c8:67:28:71:79:28:4e:1d: 06:9f:2d:d7:ec:db:a5:46:92:f7:e9:86:cb:81:16: 19:11:d7:97:af:cd:5c:4d:4f:c9:c9:8b:bf:7b:69: 99:cd:96:b1:c4:62:e1:0a:c9:04:31:b1:8c:43:d5: 2a:40:4c:ca:22:a4:3b:24:37:04:ae:11:c1:70:8e: 92:94:0b:47:07:06:5b:00:1d:d4:70:7e:c4:33:e6: 5f:7f:75:69:8b:2c:df:0d:62:e2:9b:29:d0:1d:f9: 0f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.130.82.0/23 IPv6: 2801:11:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61471 Signature Algorithm: sha256WithRSAEncryption ac:ef:4e:7d:f2:5e:7c:83:53:54:9d:2c:68:8f:63:0a:96:a7: 23:44:30:dd:bb:fe:4d:2c:a3:fd:3b:62:df:09:3e:3a:8b:7a: d1:31:9d:f4:93:9d:e2:04:b7:34:74:d8:53:f8:18:92:b1:12: d4:4c:9e:8f:48:53:37:f0:f7:e6:ce:fe:aa:85:2e:f3:a1:b7: fb:13:59:38:ac:6b:90:a3:2c:c4:c9:0d:d5:86:e5:4d:1e:61: 1f:ac:d2:9b:ac:ca:7d:7e:57:3f:5f:fd:f9:56:8e:90:c2:f0: a8:d7:81:0e:6f:59:4e:91:05:7e:43:15:77:a0:27:f8:21:32: fa:38:2c:e2:f5:67:44:2b:49:16:db:8a:ba:c8:fe:4d:59:64: 9c:07:d7:53:8c:67:b9:63:cc:3e:95:7d:59:14:19:d9:57:5e: 13:da:a4:4b:22:cc:91:ef:86:5e:16:aa:d0:20:b7:c6:49:eb: 0b:e9:cc:e4:40:43:65:73:cb:de:f4:61:78:0d:c6:9e:88:db: ad:4c:d8:0d:0b:10:5e:b8:85:6d:9c:ee:ae:ac:ca:34:4b:ec: dd:81:d2:8f:66:4b:e5:6f:ac:ba:e1:54:ed:fa:f7:7e:e4:32: 4c:78:ae:70:b0:ef:94:5e:44:66:4a:a9:ac:c9:7e:7f:93:b5: 86:83:51:d9 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUM8Fr/Ot3CB+Bgb4lO0zA007ry54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU2NDhaFw0yNTAzMDQxODAxNDhaMDMxMTAvBgNV BAMTKDk4REI2QjNFMzYyQzU4OTdBOUE2QTM1QURDMTMzRTJENjUwNzlGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHgGa1WHU014DSaMyuoZ2jCnT 4pKWuwphTs/IafQg7c7FQhfiXVjc2JDLUQJkk2SbwTihodLm4zQxUrdPZWCS8dod 3BLSKeQFLw7cgzbKtFadJskXMqnS9Do1JRVs6iBDIlItvbh18dU4PqAM9276gY8V K+IeI8VU45zcjh30Kt7nNOM4IhPnlp/SpI4GMjxWeQ8FBZbHbDETWOTIZyhxeShO HQafLdfs26VGkvfphsuBFhkR15evzVxNT8nJi797aZnNlrHEYuEKyQQxsYxD1SpA TMoipDskNwSuEcFwjpKUC0cHBlsAHdRwfsQz5l9/dWmLLN8NYuKbKdAd+Q+LAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSY22s+NixYl6mm o1rcEz4tZQeflzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTQzMDNDQkMxRjM1NUU1NUMyMjNBREVC OEI1QkYyNUUwRUJDQkY3M0ZDMDQ2NjVCMDQyOEExQTkwQUUyOUMxNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NDMwM0NCQzFGMzU1RTU1QzIyM0FERUI4QjVCRjI1RTBFQkNCRjczRkMw NDY2NUIwNDI4QTFBOTBBRTI5QzE1LzAvOThEQjZCM0UzNjJDNTg5N0E5QTZBMzVB REMxMzNFMkQ2NTA3OUY5Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByYJSMA8EAgAC MAkDBwAoAQARoAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPAfMA0GCSqGSIb3 DQEBCwUAA4IBAQCs70598l58g1NUnSxoj2MKlqcjRDDdu/5NLKP9O2LfCT46i3rR MZ30k53iBLc0dNhT+BiSsRLUTJ6PSFM38Pfmzv6qhS7zobf7E1k4rGuQoyzEyQ3V huVNHmEfrNKbrMp9flc/X/35Vo6QwvCo14EOb1lOkQV+QxV3oCf4ITL6OCzi9WdE K0kW24q6yP5NWWScB9dTjGe5Y8w+lX1ZFBnZV14T2qRLIsyR74ZeFqrQILfGSesL 6czkQENlc8ve9GF4DcaeiNutTNgNCxBeuIVtnO6urMo0S+zdgdKPZkvlb6y64VTt +vd+5DJMeK5wsO+UXkRmSqmsyX5/k7WGg1HZ -----END CERTIFICATE-----Generated at Wed May 15 15:50:11 2024 by rpki-client on console-ams.rpki-client.org