$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer File: CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer (raw, json) Hash identifier: QVdEIBfCqooo0Zrib4x1815kZS2bS8W9sLiK1u1jmmw= Subject key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 76FDAC1AF3DECC793CEE12682DB26033F4FF62EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:55:30 +0000 Certificate not after: Tue 04 Mar 2025 18:00:30 +0000 Subordinate resources: AS: 18678 IP: 179.1.0.0 -- 179.1.143.255 IP: 179.1.176.0 -- 179.1.255.255 IP: 190.90.0.0/16 IP: 2800:310::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 22:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fd:ac:1a:f3:de:cc:79:3c:ee:12:68:2d:b2:60:33:f4:ff:62:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:55:30 2024 GMT Not After : Mar 4 18:00:30 2025 GMT Subject: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:40:ca:65:0a:a7:bc:d2:fb:29:d4:bd:79: b5:46:03:16:2b:1f:48:ce:ca:be:f2:c7:d7:21:51: c5:dd:d6:c1:db:51:f6:23:ab:a8:04:6b:ba:4d:a7: 44:b7:34:e5:80:8e:7e:c9:6b:1d:64:17:06:01:ff: 58:92:4d:f9:cd:69:0e:8d:b5:7c:e3:1c:74:c3:3a: a2:c1:a8:92:11:51:28:e9:b6:a7:26:ec:03:28:0f: 66:f0:87:11:7e:dc:db:73:0b:cb:03:cf:d5:04:2f: cb:44:4c:3d:6c:65:5e:8f:84:e2:d2:b4:60:ee:7c: 63:29:cd:11:c4:f1:77:a1:53:36:54:69:90:56:12: d0:66:5e:df:bc:c4:28:87:cb:24:02:31:5c:cf:7a: f1:cb:dc:b1:8a:4f:58:82:8d:c3:b7:19:02:b7:03: 1d:31:d5:aa:13:c4:b5:9f:43:29:94:e6:9f:58:c4: 6f:2c:2c:a9:b9:03:6d:f5:9d:52:47:29:2e:d4:11: 5b:2f:6d:be:e0:d4:08:42:3b:ba:8c:31:bc:99:2c: c5:fe:fa:47:3a:45:28:b8:4f:be:93:b6:58:ba:bc: 38:56:f5:66:28:da:af:86:c8:34:fa:21:54:66:c6: 5f:d4:12:28:97:c9:2f:b3:ed:a8:f2:e1:73:80:08: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.1.0.0-179.1.143.255 179.1.176.0-179.1.255.255 190.90.0.0/16 IPv6: 2800:310::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18678 Signature Algorithm: sha256WithRSAEncryption 74:33:c5:0e:94:2a:ea:b7:6b:72:82:d6:d3:40:fe:9f:4e:86: 1b:ca:05:83:22:0a:84:37:09:21:ec:3c:21:01:dc:87:69:83: 4b:d1:05:53:92:88:34:69:8b:c4:1f:54:69:6f:92:5b:af:32: 37:ad:44:a5:1c:56:da:1b:bc:91:bf:ea:b8:05:29:d4:eb:44: 3f:18:7d:d2:15:44:4c:a4:d8:50:11:20:22:26:fa:fb:e4:a4: 32:a0:16:83:44:5f:59:26:40:63:e2:3b:f6:a3:00:39:d9:1b: 0e:d6:81:62:74:56:f4:46:2f:34:a4:fa:d4:1b:fa:25:dd:d7: 39:27:3b:ae:c5:15:22:57:b1:bb:6d:31:9f:f0:b6:d1:83:8c: bd:8e:6e:4d:31:55:98:65:ed:1c:3c:7a:4c:45:08:b6:e1:9a: 18:32:25:72:34:64:a2:36:80:4b:d2:e0:27:90:0f:3b:56:cf: 7b:88:91:c8:8d:5c:33:23:77:90:90:16:8e:84:30:67:f6:2c: 2f:0c:89:a8:7f:d1:33:01:0b:81:30:42:72:1f:4d:12:79:d1: cb:c6:ee:8d:bc:d8:9e:f2:0d:d6:5b:2f:00:0c:1c:bb:c4:38: 89:8e:46:d8:25:ee:5d:12:68:02:1c:6f:f9:8b:22:d8:ea:3a: 0e:fd:01:c9 -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIUdv2sGvPezHk87hJoLbJgM/T/YuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU1MzBaFw0yNTAzMDQxODAwMzBaMDMxMTAvBgNV BAMTKENCREU4OEM2NTMyMEQzRUJEOEVEMkY1NjhEODk2RjM5MzVFODdDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNKEDKZQqnvNL7KdS9ebVGAxYr H0jOyr7yx9chUcXd1sHbUfYjq6gEa7pNp0S3NOWAjn7Jax1kFwYB/1iSTfnNaQ6N tXzjHHTDOqLBqJIRUSjptqcm7AMoD2bwhxF+3NtzC8sDz9UEL8tETD1sZV6PhOLS tGDufGMpzRHE8XehUzZUaZBWEtBmXt+8xCiHyyQCMVzPevHL3LGKT1iCjcO3GQK3 Ax0x1aoTxLWfQymU5p9YxG8sLKm5A231nVJHKS7UEVsvbb7g1AhCO7qMMbyZLMX+ +kc6RSi4T76Ttli6vDhW9WYo2q+GyDT6IVRmxl/UEiiXyS+z7ajy4XOACIJFAgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTL3ojGUyDT69jt L1aNiW85Neh8xTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQz QkJENDk4QzNGMUNFRjFGODdGMzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0YxQ0VGMUY4N0Yz ODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2 OEQ4OTZGMzkzNUU4N0NDNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAlBAIAATAfMAsDAwCzAQMEBLMB gDALAwQEswGwAwMBswADAwC+WjANBAIAAjAHAwUAKAADEDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgJI9jANBgkqhkiG9w0BAQsFAAOCAQEAdDPFDpQq6rdrcoLW00D+ n06GG8oFgyIKhDcJIew8IQHch2mDS9EFU5KINGmLxB9UaW+SW68yN61EpRxW2hu8 kb/quAUp1OtEPxh90hVETKTYUBEgIib6++SkMqAWg0RfWSZAY+I79qMAOdkbDtaB YnRW9EYvNKT61Bv6Jd3XOSc7rsUVIlexu20xn/C20YOMvY5uTTFVmGXtHDx6TEUI tuGaGDIlcjRkojaAS9LgJ5APO1bPe4iRyI1cMyN3kJAWjoQwZ/YsLwyJqH/RMwEL gTBCch9NEnnRy8bujbzYnvIN1lsvAAwcu8Q4iY5G2CXuXRJoAhxv+Ysi2Oo6Dv0B yQ== -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:52 2024 by rpki-client on console-ams.rpki-client.org