$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer File: CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer (raw, json) Hash identifier: 6RIwrg5xIc6PWN2AUwV3Kv3UqkV6EJRUXyn3Zl/dlrg= Subject key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5583073167947B16A96A19EB7745A9F57F1AA1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:11:59 +0000 Certificate not after: Tue 04 Mar 2025 18:16:59 +0000 Subordinate resources: AS: 6535 AS: 27978 IP: 181.72.0.0/14 IP: 186.34.0.0 -- 186.36.255.255 IP: 190.54.0.0/16 IP: 190.208.0.0/15 IP: 200.9.151.0/24 IP: 200.29.128.0/18 IP: 200.31.32.0/19 IP: 200.32.160.0/19 IP: 2800:3b0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 May 2024 09:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:83:07:31:67:94:7b:16:a9:6a:19:eb:77:45:a9:f5:7f:1a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:11:59 2024 GMT Not After : Mar 4 18:16:59 2025 GMT Subject: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:90:68:ac:bc:01:97:84:a6:35:49:9a:70: 79:88:77:0d:64:bb:86:5c:81:89:3b:9b:d1:7b:1e: 1b:af:12:0f:56:14:ff:dd:95:d2:d2:0a:01:0c:43: f8:45:b4:57:df:2b:28:dc:b9:7c:b1:8a:70:b6:e3: 13:a4:e0:f5:6f:9f:f1:82:c4:5e:2c:b1:2c:37:a5: 9c:4a:03:60:5a:8f:cd:b1:ce:ab:79:25:0b:b0:0b: 0d:36:ec:3e:82:16:51:e2:f0:2c:e0:7a:2a:0b:f1: 06:7f:7b:86:e6:af:51:af:eb:80:70:ed:dc:44:e7: 35:4a:82:7a:e7:53:8c:ea:72:60:a8:86:fb:22:bc: 7c:c1:7c:3b:a2:6c:fa:c8:4c:af:c1:71:60:8c:6d: 6e:0b:a6:79:12:b4:74:04:7b:fa:25:88:16:bc:72: 76:a0:bc:e2:cb:90:15:2b:18:93:5b:0e:67:87:b3: fd:b8:5b:63:51:82:c7:82:05:ab:dc:34:b4:2b:6f: 09:81:05:9d:c1:1f:4e:02:2d:03:c5:fb:fd:be:79: 40:a9:3d:28:87:ff:57:64:50:94:65:82:2b:4c:fc: 77:63:74:7e:62:48:f6:9f:7a:76:e8:9c:d6:54:10: 61:a8:d5:f5:a1:64:88:d3:00:c5:a7:49:00:7a:d9: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.72.0.0/14 186.34.0.0-186.36.255.255 190.54.0.0/16 190.208.0.0/15 200.9.151.0/24 200.29.128.0/18 200.31.32.0/19 200.32.160.0/19 IPv6: 2800:3b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6535 27978 Signature Algorithm: sha256WithRSAEncryption 3e:68:c9:cb:7f:37:4c:cb:ec:8b:fc:9c:e0:54:ff:f6:64:98: 46:03:ac:a5:ff:9b:42:ab:29:d3:aa:29:fe:96:da:f7:4e:24: da:01:81:1d:3c:e6:38:1e:06:24:c2:28:d7:e5:90:6f:68:bc: 48:fe:ea:8d:80:d9:c9:f8:e0:51:a1:fc:a4:c8:35:4c:6f:c0: 02:f3:a9:b0:23:f3:5d:70:7b:bf:37:7a:7a:71:0c:c0:d6:c0: 39:9d:47:b2:e8:f5:0f:d1:1d:f4:b2:21:72:ac:b8:e9:9a:78: 4e:dc:ce:5b:e7:03:5e:64:8d:60:21:d3:ad:fc:c3:4a:ad:d0: 8f:c6:7d:59:30:83:e1:2a:da:35:74:25:57:7c:5a:96:d5:2b: 0c:a3:7e:48:78:3a:9c:a3:86:39:91:1f:a1:6b:3d:22:86:e1: 35:62:16:8d:2a:9c:f0:f1:93:50:cb:68:3e:df:9e:d6:9b:e7: eb:a3:78:c6:dd:51:79:86:55:de:5a:1e:22:b5:ef:cf:2c:12: ef:f0:4a:85:44:46:92:e3:56:72:83:b2:e5:20:fe:06:12:cb: c9:19:3a:58:b8:bc:a4:df:e2:c6:51:98:1b:90:c7:aa:05:86: 95:23:7f:06:2d:35:7e:2f:e0:ab:b6:06:bf:45:04:20:64:bd: 2a:ce:aa:7b -----BEGIN CERTIFICATE----- MIIG1DCCBbygAwIBAgITVYMHMWeUexapahnrd0Wp9X8aoTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI0MDMwNTE4MTE1OVoXDTI1MDMwNDE4MTY1OVowMzExMC8GA1UE AxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4QjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ8UkGisvAGXhKY1SZpweYh3DWS7 hlyBiTub0XseG68SD1YU/92V0tIKAQxD+EW0V98rKNy5fLGKcLbjE6Tg9W+f8YLE XiyxLDelnEoDYFqPzbHOq3klC7ALDTbsPoIWUeLwLOB6KgvxBn97huavUa/rgHDt 3ETnNUqCeudTjOpyYKiG+yK8fMF8O6Js+shMr8FxYIxtbgumeRK0dAR7+iWIFrxy dqC84suQFSsYk1sOZ4ez/bhbY1GCx4IFq9w0tCtvCYEFncEfTgItA8X7/b55QKk9 KIf/V2RQlGWCK0z8d2N0fmJI9p96duic1lQQYajV9aFkiNMAxadJAHrZGIECAwEA AaOCA98wggPbMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFMrK1wz1ixcubTGa g9l+4321tD6LMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFC QjdEQUI5QTMxQkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzE3MDc4NDBEQ0Y1OUE4MzNGNUY5NzM1QUJCN0RBQjlBMzFCQzNBMzZBMzg4 NzE5QjIzOEU3OUNCRDI4NTg2OUIvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQzMTlBODNE OTdFRTM3REI1QjQzRThCLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwWwYIKwYBBQUHAQcBAf8ETDBKMDkEAgABMDMDAwK1SDAKAwMBuiID AwC6JAMDAL42AwMBvtADBADICZcDBAbIHYADBAXIHyADBAXIIKAwDQQCAAIwBwMF ACgAA7AwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICGYcCAm1KMA0GCSqGSIb3DQEB CwUAA4IBAQA+aMnLfzdMy+yL/JzgVP/2ZJhGA6yl/5tCqynTqin+ltr3TiTaAYEd POY4HgYkwijX5ZBvaLxI/uqNgNnJ+OBRofykyDVMb8AC86mwI/NdcHu/N3p6cQzA 1sA5nUey6PUP0R30siFyrLjpmnhO3M5b5wNeZI1gIdOt/MNKrdCPxn1ZMIPhKto1 dCVXfFqW1SsMo35IeDqco4Y5kR+haz0ihuE1YhaNKpzw8ZNQy2g+357Wm+fro3jG 3VF5hlXeWh4ite/PLBLv8EqFREaS41Zyg7LlIP4GEsvJGTpYuLyk3+LGUZgbkMeq BYaVI38GLTV+L+Crtga/RQQgZL0qzqp7 -----END CERTIFICATE-----Generated at Mon May 20 21:16:56 2024 by rpki-client on console-ams.rpki-client.org