$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer File: D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer (raw, json) Hash identifier: PXvUxpOcJpRXdPyKU0eirWHnuifuVs/DyoMYsKNXuK8= Subject key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 42BCD4AE7D773CFEE80CD705BEB18969E5516000 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:16:26 +0000 Certificate not after: Tue 04 Mar 2025 18:21:26 +0000 Subordinate resources: AS: 264690 IP: 200.10.156.0/23 IP: 2801:16:9000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bc:d4:ae:7d:77:3c:fe:e8:0c:d7:05:be:b1:89:69:e5:51:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:16:26 2024 GMT Not After : Mar 4 18:21:26 2025 GMT Subject: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:af:c3:b2:65:aa:f1:18:ff:89:64:71:42: 83:7f:6f:91:8d:8c:8c:ad:a8:5e:ff:ab:0d:80:d7: f9:a5:18:b0:f5:48:66:cd:56:34:c6:fd:c5:ed:e4: 8d:83:de:11:f4:ed:55:d4:88:ff:f5:e8:10:1f:fc: eb:e5:34:83:e9:9c:09:04:b8:5d:49:8d:38:11:66: a2:06:6a:0d:74:a4:ad:1c:d9:bd:09:bb:13:2f:56: 56:e1:de:a4:32:0c:3a:96:64:1a:cd:b0:7e:47:12: 29:c6:91:d4:a0:60:a0:29:e2:9f:f7:6e:c2:5d:63: 56:fe:34:7e:fe:2c:68:c2:40:3c:0d:5e:a3:b4:40: dd:60:5e:18:86:c2:72:b0:d8:66:ac:78:ac:7a:02: 9c:7d:ea:95:aa:6c:8b:a5:90:bf:16:ef:4d:2e:75: 12:94:c6:4e:92:9a:a5:e3:6a:a6:96:91:ec:8d:c7: 9a:66:f1:5c:68:54:e1:60:a4:f8:ce:2c:e5:e3:9a: ba:1c:da:cb:14:48:6f:76:b5:fd:61:43:4e:54:08: 62:63:02:ea:dd:38:82:80:71:f6:8a:e6:ff:c3:c4: 72:54:83:00:d9:60:79:8c:51:8e:92:b8:6b:4c:dd: f9:6b:6e:2c:20:18:df:8a:f0:98:f6:d3:f3:53:9f: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.156.0/23 IPv6: 2801:16:9000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264690 Signature Algorithm: sha256WithRSAEncryption a3:08:62:0c:74:47:d0:3c:ae:c9:a1:a6:ec:9d:86:03:69:30: 15:21:81:4f:7d:11:7c:f2:40:5d:08:75:b4:67:fc:cf:39:ab: 77:bd:b6:86:7e:9f:e1:2a:0a:a9:37:46:45:01:c3:54:6b:fe: fd:df:da:01:67:6f:62:0f:42:64:63:bc:54:2b:cb:73:80:07: 06:de:24:cb:37:50:66:d4:84:ec:ff:e3:f6:49:7f:e0:9c:47: 2e:02:2c:14:09:c4:bf:7d:ee:a0:f3:6f:d5:05:b5:4d:7e:48: 75:0a:e2:b9:11:77:54:19:a0:d6:f1:4b:60:cd:fa:da:dc:58: 03:5a:6b:99:24:5f:d9:e1:39:9d:ca:13:8e:59:51:d3:8c:69: 24:67:11:8f:11:c6:76:08:bf:1d:d3:a1:ac:93:86:16:72:df: 71:63:c9:8a:45:39:7b:12:a3:c0:3f:ee:05:7d:5d:07:ad:83: e0:95:1d:06:65:ed:89:7e:3c:19:a4:44:6c:10:b3:54:3c:ea: 15:91:00:e8:86:90:73:57:e6:6e:78:33:46:e9:93:63:8c:f5: 3e:1b:19:0d:62:1b:99:8f:87:36:33:2f:72:83:b3:77:e0:17: b3:53:bb:1b:eb:7d:8c:c7:0f:0a:50:35:d4:5e:99:aa:e7:0b: 49:09:a2:2d -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUQrzUrn13PP7oDNcFvrGJaeVRYAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE2MjZaFw0yNTAzMDQxODIxMjZaMDMxMTAvBgNV BAMTKEQ4QjRDMzYyNkU2RjY5MjhEQzM2NTVGMUVEMDVFQjc4MjdBNEZCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnga/DsmWq8Rj/iWRxQoN/b5GN jIytqF7/qw2A1/mlGLD1SGbNVjTG/cXt5I2D3hH07VXUiP/16BAf/OvlNIPpnAkE uF1JjTgRZqIGag10pK0c2b0JuxMvVlbh3qQyDDqWZBrNsH5HEinGkdSgYKAp4p/3 bsJdY1b+NH7+LGjCQDwNXqO0QN1gXhiGwnKw2GaseKx6Apx96pWqbIulkL8W700u dRKUxk6SmqXjaqaWkeyNx5pm8VxoVOFgpPjOLOXjmroc2ssUSG92tf1hQ05UCGJj AurdOIKAcfaK5v/DxHJUgwDZYHmMUY6SuGtM3flrbiwgGN+K8Jj20/NTn2PTAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYtMNibm9pKNw2 VfHtBet4J6T7uTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjIwN0NDRjk3RjQ0Q0RENjVCN0IxMzAz ODlGREJDOUUzMjIxM0Y4RTlFODY3MUQ1OUJBRDgxMDgwMjY0QTZEMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMjA3Q0NGOTdGNDRDREQ2NUI3QjEzMDM4OUZEQkM5RTMyMjEzRjhFOUU4 NjcxRDU5QkFEODEwODAyNjRBNkQxLzAvRDhCNEMzNjI2RTZGNjkyOERDMzY1NUYx RUQwNUVCNzgyN0E0RkJCOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByAqcMA8EAgAC MAkDBwAoAQAWkAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAnyMA0GCSqGSIb3 DQEBCwUAA4IBAQCjCGIMdEfQPK7JoabsnYYDaTAVIYFPfRF88kBdCHW0Z/zPOat3 vbaGfp/hKgqpN0ZFAcNUa/7939oBZ29iD0JkY7xUK8tzgAcG3iTLN1Bm1ITs/+P2 SX/gnEcuAiwUCcS/fe6g82/VBbVNfkh1CuK5EXdUGaDW8Utgzfra3FgDWmuZJF/Z 4TmdyhOOWVHTjGkkZxGPEcZ2CL8d06Gsk4YWct9xY8mKRTl7EqPAP+4FfV0HrYPg lR0GZe2JfjwZpERsELNUPOoVkQDohpBzV+ZueDNG6ZNjjPU+GxkNYhuZj4c2My9y g7N34BezU7sb632Mxw8KUDXUXpmq5wtJCaIt -----END CERTIFICATE-----Generated at Thu May 16 21:44:44 2024 by rpki-client on console-fra.rpki-client.org