$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer File: 9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer (raw, json) Hash identifier: F72qPgDytO5jxZFxn+Ybpr+SE++udud/glDuGfbV4q8= Subject key identifier: 9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 480E4839265303E4E6EE55AF2FCF03C54B064C69 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 07 Oct 2024 15:25:07 +0000 Certificate not after: Mon 06 Oct 2025 15:30:07 +0000 Subordinate resources: AS: 273871 IP: 103.111.40.0/22 IP: 2803:9d50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Oct 2024 22:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0e:48:39:26:53:03:e4:e6:ee:55:af:2f:cf:03:c5:4b:06:4c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 7 15:25:07 2024 GMT Not After : Oct 6 15:30:07 2025 GMT Subject: CN=9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:d5:66:ad:cb:b1:33:ed:87:64:8a:2d:39: d9:2f:ca:d3:c5:5a:0a:a2:f8:04:ec:71:01:f4:b8: a1:da:8b:91:5a:c3:31:f6:5f:ea:c6:1a:28:60:87: a8:8c:c7:6e:56:04:49:35:89:05:86:56:a7:e5:48: 02:09:9c:00:72:17:72:6f:57:61:02:07:a5:7c:02: 24:d6:28:9e:5c:0e:15:1c:8e:00:3e:04:9c:1f:9b: 72:ce:e1:48:10:73:2b:b0:77:e9:71:ea:a7:dc:88: 44:a1:9b:b8:fb:a6:7b:35:63:84:a6:0b:c7:ba:00: f5:96:57:c8:80:96:89:de:80:6d:2a:f0:71:c1:db: 00:6e:9d:70:6a:a1:42:b2:b8:c9:84:18:81:a0:2e: a9:5f:55:61:fa:33:61:1c:1a:9e:5a:cc:e3:b5:28: 83:ee:b0:11:4c:d2:41:47:28:7f:6e:08:13:ab:68: 7d:e7:f5:97:45:5a:e4:48:ad:0e:c6:21:3e:76:a0: 00:9f:fe:6c:4a:3c:d7:08:9a:a3:4b:3d:1b:a7:73: 37:09:8d:b1:a1:6a:d7:0b:af:5f:7d:eb:4f:49:b3: 05:dd:fa:ba:3d:2d:f6:af:0d:eb:e6:ca:e3:01:f9: 9a:21:de:51:f3:b9:60:1d:1d:0c:17:c8:87:4a:96: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.40.0/22 IPv6: 2803:9d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273871 Signature Algorithm: sha256WithRSAEncryption ba:36:a4:d3:9b:28:ad:52:0c:f0:a2:d3:43:58:d6:f7:73:7f: 50:e6:da:70:0c:5d:75:72:8c:c2:44:f8:18:51:26:4a:d5:03: 7a:45:81:ee:98:34:d3:c6:a5:74:36:fa:56:d0:1f:70:a8:43: 3e:4f:99:d8:97:f2:ba:d0:9d:24:a5:6b:68:5e:90:8c:99:82: 6d:20:59:82:46:1e:60:74:55:7d:07:96:4b:5a:f3:d7:af:18: 0d:6e:16:c3:67:04:83:67:1e:36:b7:ea:c5:e1:88:92:6f:c7: 8e:2d:e3:7f:25:a2:67:59:df:61:71:a7:fe:97:7b:ae:f2:e7: 3c:ec:23:52:48:bf:13:7e:d3:03:63:a5:b5:f3:c6:63:c0:46: 10:53:0d:bf:c6:5c:e4:7a:e4:f8:16:5b:ff:aa:fa:0d:33:7e: 1e:03:9a:59:69:1b:06:97:1e:51:e9:44:62:3f:57:23:44:f8: 95:49:ba:df:73:d1:e6:4e:32:fc:8c:05:7b:15:66:67:70:b8: 98:3c:ee:82:f3:8d:49:5f:f2:07:4c:aa:d5:9f:71:cf:10:89: 7e:ef:cc:4f:53:05:bc:e9:1e:8d:f6:d9:31:f5:c7:1b:51:4b: ae:83:5e:5f:8f:43:b2:7e:8d:3e:22:41:29:ec:d8:76:33:21: 98:c6:90:ae -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSA5IOSZTA+Tm7lWvL88DxUsGTGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDEwMDcxNTI1MDdaFw0yNTEwMDYxNTMwMDdaMDMxMTAvBgNV BAMTKDlDQjRFMzlDNEU0Nzk1RkIyRjZBMTE2Q0JBOUZENjZGMDZGNjRCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaNVmrcuxM+2HZIotOdkvytPF Wgqi+ATscQH0uKHai5FawzH2X+rGGihgh6iMx25WBEk1iQWGVqflSAIJnAByF3Jv V2ECB6V8AiTWKJ5cDhUcjgA+BJwfm3LO4UgQcyuwd+lx6qfciEShm7j7pns1Y4Sm C8e6APWWV8iAlonegG0q8HHB2wBunXBqoUKyuMmEGIGgLqlfVWH6M2EcGp5azOO1 KIPusBFM0kFHKH9uCBOraH3n9ZdFWuRIrQ7GIT52oACf/mxKPNcImqNLPRunczcJ jbGhatcLr199609JswXd+ro9LfavDevmyuMB+Zoh3lHzuWAdHQwXyIdKlv5BAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSctOOcTkeV+y9q EWy6n9ZvBvZLlzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkVEQzU3QTA2NjM1Njg2OEI4N0YxNDY4 NjRENTI3OEVGOThERDk0MDU1NDUwQTJCRjdBNkE3NzM1NUY5RTZDMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yRURDNTdBMDY2MzU2ODY4Qjg3RjE0Njg2NEQ1Mjc4RUY5OEREOTQwNTU0 NTBBMkJGN0E2QTc3MzU1RjlFNkMzLzAvOUNCNEUzOUM0RTQ3OTVGQjJGNkExMTZD QkE5RkQ2NkYwNkY2NEI5Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ28oMA0EAgAC MAcDBQAoA51QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQtzzANBgkqhkiG9w0B AQsFAAOCAQEAujak05sorVIM8KLTQ1jW93N/UObacAxddXKMwkT4GFEmStUDekWB 7pg008aldDb6VtAfcKhDPk+Z2JfyutCdJKVraF6QjJmCbSBZgkYeYHRVfQeWS1rz 168YDW4Ww2cEg2ceNrfqxeGIkm/Hji3jfyWiZ1nfYXGn/pd7rvLnPOwjUki/E37T A2OltfPGY8BGEFMNv8Zc5Hrk+BZb/6r6DTN+HgOaWWkbBpceUelEYj9XI0T4lUm6 33PR5k4y/IwFexVmZ3C4mDzugvONSV/yB0yq1Z9xzxCJfu/MT1MFvOkejfbZMfXH G1FLroNeX49Dsn6NPiJBKezYdjMhmMaQrg== -----END CERTIFICATE-----Generated at Mon Oct 21 18:17:08 2024 by rpki-client on console-ams.rpki-client.org