$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer File: BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer (raw, json) Hash identifier: Kub5EvV/sT9dae61FsyAwRcwpU8ghpw58cRaxCwFI7A= Subject key identifier: BD:43:B3:A7:65:83:42:69:84:FF:C5:1B:90:7F:3F:D2:9E:2F:3B:B0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5D08F007FD844DA3DFCB6D0E67DE951A19F1EA79 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 09 Aug 2024 06:20:00 +0000 Certificate not after: Fri 08 Aug 2025 06:25:00 +0000 Subordinate resources: AS: 28552 IP: 201.159.224.0 -- 201.159.247.255 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Sep 2024 08:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:08:f0:07:fd:84:4d:a3:df:cb:6d:0e:67:de:95:1a:19:f1:ea:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 9 06:20:00 2024 GMT Not After : Aug 8 06:25:00 2025 GMT Subject: CN=BD43B3A76583426984FFC51B907F3FD29E2F3BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:9d:c6:42:6f:61:37:66:34:47:77:ad:36: 12:ad:7c:53:bf:b4:3e:f3:ca:00:0f:c0:84:76:58: 64:b1:ee:15:48:2f:54:51:dd:6b:d8:a2:52:95:d1: df:12:8f:83:b8:df:88:69:bd:86:9f:cc:29:47:3e: 55:b8:af:32:1d:41:2d:90:58:a1:11:37:94:f5:92: 4d:2b:dd:9c:6d:f2:bc:02:5d:f0:d2:14:34:c4:e8: a9:19:4c:ab:f3:a4:21:62:b6:90:23:7b:63:8d:b5: 3b:b7:16:3f:27:f6:9b:aa:48:37:8b:98:4c:9f:72: c5:e8:7a:1d:32:25:0b:5f:15:77:63:2e:ba:d1:60: 17:98:a0:8d:26:d9:b5:e3:35:a1:72:40:1d:b3:9d: 5e:8f:cc:fe:7d:26:b8:6b:be:d6:7c:43:c5:3f:8a: 62:12:43:cb:22:3e:33:87:d1:a8:08:06:08:c5:ec: 79:7a:2e:70:0c:c1:e1:1c:64:9d:c2:0d:e1:e5:69: 7e:24:99:a8:18:0d:29:42:7e:81:26:0e:7e:7f:c8: 94:1f:bb:8d:09:4e:b9:41:b5:5a:ba:83:43:b6:b2: 38:fe:5b:f2:fb:57:f5:17:54:fb:6b:89:ea:95:3d: 4f:14:09:69:53:fe:41:f8:cc:3e:36:2b:71:50:bd: f6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:43:B3:A7:65:83:42:69:84:FF:C5:1B:90:7F:3F:D2:9E:2F:3B:B0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.159.224.0-201.159.247.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28552 Signature Algorithm: sha256WithRSAEncryption 31:5f:1d:73:32:61:c5:1a:98:d5:33:7e:56:80:b9:5c:7f:8b: e5:bb:96:0d:17:ef:c2:d3:fa:16:ab:ad:4a:f9:aa:51:dd:a5: ca:82:89:4b:b8:5e:78:2d:f6:6a:13:7c:2b:2b:5f:a2:0d:0d: d4:a9:9b:fa:f5:cd:fa:64:0d:e3:86:6f:4c:47:63:05:85:00: 0d:f8:8f:58:4d:22:36:ee:33:e9:29:98:7d:70:05:c3:02:81: d2:0b:2c:47:4d:3f:6c:29:d7:91:9c:a1:36:d8:6b:b8:b2:bb: 5a:dd:63:c6:c9:b7:fc:61:c7:65:ee:ca:c5:82:12:0f:cd:13: 9d:61:1f:91:17:53:1c:ba:e4:ba:13:90:f3:11:83:d6:9c:c4: 70:d4:5b:21:bf:25:cc:7b:46:6f:8b:66:89:15:34:be:42:8a: a0:17:9c:53:9f:71:30:5b:54:fc:bf:47:04:9c:2d:6f:28:a3: 0d:14:ca:73:7b:ef:aa:7d:a4:43:d2:0a:c1:d9:2d:bf:c3:3c: f9:48:01:f2:bc:6b:ca:ec:7f:bb:8d:29:f3:a0:c9:50:f5:7d: aa:d0:f2:ff:6b:f7:d8:9f:37:d7:a6:be:5c:e6:26:f3:67:f0: 39:8c:2c:22:27:36:27:11:31:85:6d:0b:64:1f:9e:a2:67:1e: 5b:35:9b:0b -----BEGIN CERTIFICATE----- MIIGnTCCBYWgAwIBAgIUXQjwB/2ETaPfy20OZ96VGhnx6nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA4MDkwNjIwMDBaFw0yNTA4MDgwNjI1MDBaMDMxMTAvBgNV BAMTKEJENDNCM0E3NjU4MzQyNjk4NEZGQzUxQjkwN0YzRkQyOUUyRjNCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hZ3GQm9hN2Y0R3etNhKtfFO/ tD7zygAPwIR2WGSx7hVIL1RR3WvYolKV0d8Sj4O434hpvYafzClHPlW4rzIdQS2Q WKERN5T1kk0r3Zxt8rwCXfDSFDTE6KkZTKvzpCFitpAje2ONtTu3Fj8n9puqSDeL mEyfcsXoeh0yJQtfFXdjLrrRYBeYoI0m2bXjNaFyQB2znV6PzP59JrhrvtZ8Q8U/ imISQ8siPjOH0agIBgjF7Hl6LnAMweEcZJ3CDeHlaX4kmagYDSlCfoEmDn5/yJQf u40JTrlBtVq6g0O2sjj+W/L7V/UXVPtrieqVPU8UCWlT/kH4zD42K3FQvfZxAgMB AAGjggOnMIIDozAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9Q7OnZYNCaYT/ xRuQfz/Sni87sDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTY3MzE4MkI4OEJGNjExQzIxOUI4QUFB QUFCRkEwNzBENUQyMjlEOTRCNUMzOTU5RDY1RTBEMjdBQzAyQzA0My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNjczMTgyQjg4QkY2MTFDMjE5QjhBQUFBQUJGQTA3MEQ1RDIyOUQ5NEI1 QzM5NTlENjVFMEQyN0FDMDJDMDQzLzAvQkQ0M0IzQTc2NTgzNDI2OTg0RkZDNTFC OTA3RjNGRDI5RTJGM0JCMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXJn+ADBAPJ n/AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICb4gwDQYJKoZIhvcNAQELBQADggEB ADFfHXMyYcUamNUzflaAuVx/i+W7lg0X78LT+harrUr5qlHdpcqCiUu4Xngt9moT fCsrX6INDdSpm/r1zfpkDeOGb0xHYwWFAA34j1hNIjbuM+kpmH1wBcMCgdILLEdN P2wp15GcoTbYa7iyu1rdY8bJt/xhx2XuysWCEg/NE51hH5EXUxy65LoTkPMRg9ac xHDUWyG/Jcx7Rm+LZokVNL5CiqAXnFOfcTBbVPy/RwScLW8oow0UynN776p9pEPS CsHZLb/DPPlIAfK8a8rsf7uNKfOgyVD1farQ8v9r99ifN9emvlzmJvNn8DmMLCIn NicRMYVtC2QfnqJnHls1mws= -----END CERTIFICATE-----Generated at Thu Sep 19 01:10:40 2024 by rpki-client on console-fra.rpki-client.org