$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.cer File: C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.cer (raw, json) Hash identifier: 51zWmMA18S8Mek1woZ3Yrl+7Vvv4Z1JvmISHG9mpR00= Subject key identifier: C5:AD:C6:88:41:2E:A1:04:3B:CC:91:74:E3:54:CE:7B:CE:AE:2F:FE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 01A1619809130EE0EC3A76BFBE9FC58F89B1258D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 06 Aug 2024 02:00:01 +0000 Certificate not after: Tue 05 Aug 2025 02:05:01 +0000 Subordinate resources: AS: 273826 IP: 2803:d150::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Oct 2024 22:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:61:98:09:13:0e:e0:ec:3a:76:bf:be:9f:c5:8f:89:b1:25:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 6 02:00:01 2024 GMT Not After : Aug 5 02:05:01 2025 GMT Subject: CN=C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:01:60:4b:3b:49:fc:a2:2e:3d:d0:d0:88:1a: 0e:f7:87:ba:d9:f5:9f:38:18:11:7c:32:0c:5c:91: fd:cb:00:60:20:32:42:c1:ab:f2:20:1f:b0:4c:97: 70:20:1f:26:57:c5:f6:24:6d:f3:91:80:1a:6e:2d: dc:e4:f3:2d:8a:01:a3:bc:d3:14:19:78:4b:9c:01: 84:92:e4:29:b6:d1:40:6d:fe:60:a6:3a:5b:33:89: 82:d5:ef:c8:5f:d6:5b:f3:37:9c:7e:b8:f6:f9:b8: a6:ef:fa:13:bd:6a:26:9c:cf:83:0c:2d:e6:18:2b: a0:e0:bb:22:1a:6f:aa:58:81:69:d6:a8:bb:50:a3: 31:05:fb:7c:09:6f:a5:f7:18:f2:5a:d4:17:ae:c1: f2:fd:40:53:35:56:b7:5a:e6:c8:c0:55:fb:ed:6a: 72:68:6c:64:77:ed:0f:fa:68:44:e2:34:d1:64:aa: a5:bb:13:76:4f:83:b1:36:ed:3c:e7:0e:c4:12:03: 9b:d4:71:95:ec:ed:af:65:7c:87:b9:fc:d9:4b:5e: ce:37:d2:28:9e:97:80:0b:43:3e:d9:42:b9:5c:fe: bc:cb:3f:38:9a:b5:d8:48:e5:25:51:ad:8d:e6:11: 1a:c4:81:6f:27:92:55:cd:a7:ec:bb:c1:58:d2:90: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:AD:C6:88:41:2E:A1:04:3B:CC:91:74:E3:54:CE:7B:CE:AE:2F:FE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E5B8B7E9F6F76F4A262AE5C283E9A7FFA5BC73B39193FB5855B46EDE4DC44CC0/0/C5ADC688412EA1043BCC9174E354CE7BCEAE2FFE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d150::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273826 Signature Algorithm: sha256WithRSAEncryption 00:f8:3b:20:25:36:8e:89:6c:cb:1b:87:04:27:38:58:ba:27: b3:94:63:50:f5:6b:f4:08:a1:68:d8:3e:30:9a:6b:be:ff:b5: 56:44:bc:e2:97:2f:be:ca:a2:d9:90:27:c6:35:85:ff:a7:f5: 8b:99:24:64:82:7e:cc:e4:9d:f1:0f:ba:1a:09:32:66:06:e6: 67:53:b5:5a:51:e0:50:58:3b:d4:7a:87:94:ff:bb:69:bc:7e: 25:cd:a8:1f:25:8c:84:ed:f8:cf:a1:81:7b:00:26:da:3a:6f: 56:d5:69:cb:63:43:4f:a2:08:24:b5:fb:4b:d5:37:e7:7a:a1: a1:73:93:cc:6e:b3:2d:90:cc:da:d1:01:d8:fa:db:52:97:49: 64:55:fd:29:df:ba:2f:d7:72:97:c1:3d:ec:7d:46:a9:5f:39: b8:d0:6a:e9:d4:b3:30:07:24:a3:44:fb:9c:ca:45:97:77:9a: 5b:7a:27:9a:d3:15:b5:d4:3a:1e:e7:a3:ed:aa:fb:c7:2f:d2: e8:a9:3d:b7:93:ba:52:7a:25:48:b7:55:a3:1e:35:6d:fb:c9: 19:58:7e:80:6e:6c:a6:de:9f:50:95:8a:98:5a:90:5d:88:9d: d7:22:6a:cd:13:a6:b9:02:b7:95:d2:67:90:72:64:93:a3:0d: e6:f4:97:cc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAaFhmAkTDuDsOna/vp/Fj4mxJY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA4MDYwMjAwMDFaFw0yNTA4MDUwMjA1MDFaMDMxMTAvBgNV BAMTKEM1QURDNjg4NDEyRUExMDQzQkNDOTE3NEUzNTRDRTdCQ0VBRTJGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAWBLO0n8oi490NCIGg73h7rZ 9Z84GBF8Mgxckf3LAGAgMkLBq/IgH7BMl3AgHyZXxfYkbfORgBpuLdzk8y2KAaO8 0xQZeEucAYSS5Cm20UBt/mCmOlsziYLV78hf1lvzN5x+uPb5uKbv+hO9aiacz4MM LeYYK6DguyIab6pYgWnWqLtQozEF+3wJb6X3GPJa1BeuwfL9QFM1Vrda5sjAVfvt anJobGR37Q/6aETiNNFkqqW7E3ZPg7E27TznDsQSA5vUcZXs7a9lfIe5/NlLXs43 0iiel4ALQz7ZQrlc/rzLPziatdhI5SVRrY3mERrEgW8nklXNp+y7wVjSkL0bAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFrcaIQS6hBDvM kXTjVM57zq4v/jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVCOEI3RTlGNkY3NkY0QTI2MkFFNUMy ODNFOUE3RkZBNUJDNzNCMzkxOTNGQjU4NTVCNDZFREU0REM0NENDMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNUI4QjdFOUY2Rjc2RjRBMjYyQUU1QzI4M0U5QTdGRkE1QkM3M0IzOTE5 M0ZCNTg1NUI0NkVERTREQzQ0Q0MwLzAvQzVBREM2ODg0MTJFQTEwNDNCQ0M5MTc0 RTM1NENFN0JDRUFFMkZGRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPRUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELaIwDQYJKoZIhvcNAQELBQADggEBAAD4OyAl No6JbMsbhwQnOFi6J7OUY1D1a/QIoWjYPjCaa77/tVZEvOKXL77KotmQJ8Y1hf+n 9YuZJGSCfszknfEPuhoJMmYG5mdTtVpR4FBYO9R6h5T/u2m8fiXNqB8ljITt+M+h gXsAJto6b1bVactjQ0+iCCS1+0vVN+d6oaFzk8xusy2QzNrRAdj621KXSWRV/Snf ui/XcpfBPex9RqlfObjQaunUszAHJKNE+5zKRZd3mlt6J5rTFbXUOh7no+2q+8cv 0uipPbeTulJ6JUi3VaMeNW37yRlYfoBubKben1CViphakF2Indcias0TprkCt5XS Z5ByZJOjDeb0l8w= -----END CERTIFICATE-----Generated at Mon Oct 21 16:44:41 2024 by rpki-client on console-fra.rpki-client.org