$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer File: C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer (raw, json) Hash identifier: lhT0AXGbEnhp7nh76A+cnxOtvmp3K3Tlw5NamxQ9ue0= Subject key identifier: C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 56B85E807B177403A81AA24C525BC1CCDCD5E41A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 07 Oct 2024 17:55:01 +0000 Certificate not after: Mon 06 Oct 2025 18:00:01 +0000 Subordinate resources: AS: 265880 IP: 45.226.32.0/22 IP: 2803:3e20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Oct 2024 22:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b8:5e:80:7b:17:74:03:a8:1a:a2:4c:52:5b:c1:cc:dc:d5:e4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 7 17:55:01 2024 GMT Not After : Oct 6 18:00:01 2025 GMT Subject: CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:70:f4:08:9e:d6:1b:89:a8:27:21:1f:18:8c: 2b:67:cb:d0:9f:74:62:44:b0:ee:28:87:c1:d4:22: e8:54:63:f0:46:3c:d5:4d:fc:8b:b6:44:d4:cc:2e: 54:ad:6d:b7:07:e3:be:41:38:40:b7:88:3b:fb:99: 63:f9:c6:be:56:76:ca:9d:ff:b5:18:96:a5:bf:c1: 6d:34:c8:a4:56:75:e6:f1:af:96:e1:4d:e6:c2:26: 31:0a:68:6e:37:ed:2d:ec:8f:a5:07:c8:55:44:0e: e7:86:b9:96:f3:bd:5d:0e:83:8f:c9:d0:09:48:7d: 32:fd:4d:23:9b:8d:0d:3c:a5:f1:7b:f8:e7:93:b1: 5f:c8:a2:34:4a:a6:f1:de:6a:b2:97:d0:13:fa:5c: d6:f6:fa:cb:27:51:61:28:01:89:fc:b4:04:5d:71: c1:0a:70:75:62:96:1b:c6:f6:02:0a:5c:62:54:60: 3c:8b:10:a3:12:8c:9b:26:c4:99:8f:4a:72:35:12: 46:91:8e:a3:94:16:52:f3:4d:87:85:21:ea:74:fa: 49:27:e1:6a:20:6a:b6:ec:a8:aa:f1:0b:3d:7a:56: 84:82:72:ed:e5:ab:a8:ba:aa:2e:a8:d1:de:25:e6: 3f:70:f5:97:99:3b:c4:54:d6:77:62:79:eb:0f:09: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.32.0/22 IPv6: 2803:3e20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265880 Signature Algorithm: sha256WithRSAEncryption 0a:a4:d6:b5:5e:1d:77:e9:e7:b0:91:de:f7:1a:33:cc:88:4b: b1:52:28:7d:da:48:a2:45:fb:69:59:49:dd:67:2c:b7:b4:fe: e1:d1:47:a7:b6:c3:b9:3d:fd:e3:28:9c:2d:5b:cd:53:aa:b3: 19:c8:fb:05:ec:61:d3:97:d0:aa:79:7d:01:02:3e:6f:f6:99: 59:80:76:23:8a:ba:0d:e2:41:93:09:01:4b:18:2c:7e:0f:b8: 15:4d:14:eb:52:99:5e:1e:ea:80:7e:d1:31:3e:47:02:8e:64: 42:6e:46:3f:88:c3:48:8c:99:d2:ce:b2:2c:0a:88:4e:2b:75: fa:67:db:fc:38:48:cf:a2:b2:f0:0e:13:11:96:25:0b:a4:41: c7:9c:79:4c:59:90:fe:10:a7:c7:f1:19:56:9b:c3:09:90:da: 09:c9:2e:b3:09:db:87:b4:77:55:09:33:4d:49:da:5b:d6:17: 85:b8:42:a4:e5:05:9c:60:60:be:e0:3a:a6:94:33:df:43:ab: c6:97:33:39:6a:8d:9f:81:58:22:c0:77:a0:ab:e2:9c:e6:ca: 8c:2d:00:d2:f7:fe:98:0e:0f:af:be:fd:2e:69:d4:31:4f:d9: ce:43:ca:ad:e0:c0:b4:8c:ba:6f:cc:4a:b7:29:0c:8b:c3:21: b3:8f:d3:87 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVrhegHsXdAOoGqJMUlvBzNzV5BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDEwMDcxNzU1MDFaFw0yNTEwMDYxODAwMDFaMDMxMTAvBgNV BAMTKEM1NzU1MkUxOEFGRkM4NUQ5OTQ2OEYwMjdFQUZDRUQzMUM1RjZFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcPQIntYbiagnIR8YjCtny9Cf dGJEsO4oh8HUIuhUY/BGPNVN/Iu2RNTMLlStbbcH475BOEC3iDv7mWP5xr5Wdsqd /7UYlqW/wW00yKRWdebxr5bhTebCJjEKaG437S3sj6UHyFVEDueGuZbzvV0Og4/J 0AlIfTL9TSObjQ08pfF7+OeTsV/IojRKpvHearKX0BP6XNb2+ssnUWEoAYn8tARd ccEKcHVilhvG9gIKXGJUYDyLEKMSjJsmxJmPSnI1EkaRjqOUFlLzTYeFIep0+kkn 4WogarbsqKrxCz16VoSCcu3lq6i6qi6o0d4l5j9w9ZeZO8RU1ndieesPCZpvAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFdVLhiv/IXZlG jwJ+r87THF9upDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEQ0MkI3QzZCNDI2MzY3NDZEM0YxQ0RF MTQ3MEU4QUQyMDI3MkY1MzMzRTQyOTZDREQyNDk5RkQ5Mzg1Nzg2Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80RDQyQjdDNkI0MjYzNjc0NkQzRjFDREUxNDcwRThBRDIwMjcyRjUzMzNF NDI5NkNERDI0OTlGRDkzODU3ODZGLzAvQzU3NTUyRTE4QUZGQzg1RDk5NDY4RjAy N0VBRkNFRDMxQzVGNkVBNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeIgMA0EAgAC MAcDBQAoAz4gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOmDANBgkqhkiG9w0B AQsFAAOCAQEACqTWtV4dd+nnsJHe9xozzIhLsVIofdpIokX7aVlJ3Wcst7T+4dFH p7bDuT394yicLVvNU6qzGcj7Bexh05fQqnl9AQI+b/aZWYB2I4q6DeJBkwkBSxgs fg+4FU0U61KZXh7qgH7RMT5HAo5kQm5GP4jDSIyZ0s6yLAqITit1+mfb/DhIz6Ky 8A4TEZYlC6RBx5x5TFmQ/hCnx/EZVpvDCZDaCckuswnbh7R3VQkzTUnaW9YXhbhC pOUFnGBgvuA6ppQz30OrxpczOWqNn4FYIsB3oKvinObKjC0A0vf+mA4Pr779LmnU MU/ZzkPKreDAtIy6b8xKtykMi8Mhs4/Thw== -----END CERTIFICATE-----Generated at Mon Oct 21 18:17:10 2024 by rpki-client on console-ams.rpki-client.org