$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer File: DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer (raw, json) Hash identifier: 6SALKZEvMxFaZkraH3RBd20ofSnLmExZXzbo00ILdJ4= Subject key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0116417B23A673B04579B7E25032F1DF6CF8E430 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:16:24 +0000 Certificate not after: Tue 04 Mar 2025 18:21:24 +0000 Subordinate resources: AS: 263681 IP: 45.236.172.0/23 IP: 138.204.12.0/22 IP: 2803:c240::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 29 Nov 2024 03:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:16:41:7b:23:a6:73:b0:45:79:b7:e2:50:32:f1:df:6c:f8:e4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:16:24 2024 GMT Not After : Mar 4 18:21:24 2025 GMT Subject: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:fa:d4:af:ac:fc:58:a2:90:25:30:81:66: 23:13:0b:00:6f:72:8c:26:4f:4a:d3:cf:97:e3:93: 08:3f:5a:88:c0:1c:9a:4e:f0:23:e1:27:43:f7:ba: b1:fc:c8:ab:f8:9e:fc:c3:01:a4:8a:be:5d:98:05: 6b:ef:4a:7c:e1:11:cf:b2:83:82:9f:9a:97:e3:b9: 35:b1:4a:0a:4d:a9:16:a7:2b:02:4d:c1:3b:fa:7a: 42:f9:85:2f:a5:b5:bb:6b:90:2e:0c:58:34:97:ea: b4:c9:d8:92:12:d2:1e:d8:6d:66:d0:90:9b:f5:17: ad:a3:49:90:ba:2e:8e:71:66:34:17:13:41:80:64: a0:2f:6b:52:c7:fd:a3:cf:a4:f1:8f:fd:39:86:5d: 12:fe:c5:69:20:88:8b:cb:ae:73:be:14:a4:3a:68: 1a:07:ac:5d:0d:12:5b:65:9f:f3:ec:41:35:cb:e3: e8:a3:6b:a2:be:c7:30:62:73:fa:3b:1f:2c:7c:9d: 5c:b6:93:f8:22:56:40:3b:51:b2:7b:1b:76:b3:64: a2:17:96:47:09:75:4d:f4:cd:60:fb:ce:ab:ad:25: 6d:c1:eb:1b:71:34:a7:19:d4:ad:b1:2b:4e:1b:05: 56:9d:4a:d0:7d:54:c0:27:09:71:0a:c5:a2:dd:e0: 94:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.172.0/23 138.204.12.0/22 IPv6: 2803:c240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263681 Signature Algorithm: sha256WithRSAEncryption 03:42:20:2d:5b:27:f3:40:d8:a5:e9:ea:88:21:c8:2a:b9:66: d0:39:c0:e0:e5:70:d0:9b:72:bd:84:b6:0c:cc:db:e9:00:3f: 71:ee:b5:99:8c:24:79:db:4c:6e:f2:d1:56:9a:6b:12:91:be: b8:43:af:e4:d7:0c:2a:bc:28:52:f8:cf:c0:07:ad:06:97:3d: 53:ef:12:e1:e6:2a:10:e5:00:40:e7:f1:59:1a:24:30:a0:75: 96:0f:b1:c4:74:07:fe:81:68:70:38:c5:75:80:5a:6a:41:b8: 39:14:a9:55:ed:fc:e8:e0:75:08:86:99:6c:88:de:49:5a:ac: 8e:88:f3:a6:63:b8:92:6e:10:5f:bf:dd:43:fb:3c:12:5a:21: 06:c0:f3:00:7f:d9:f4:8e:c2:ea:19:ac:a8:72:66:22:3f:4f: 27:cc:fb:ea:de:db:d1:9e:38:b9:34:b7:1d:6e:6a:01:bb:63: 8f:ca:6f:c1:0d:e4:1f:60:64:49:07:12:14:cc:33:ef:4b:db: c3:e5:01:91:6d:92:7d:2a:e6:8e:c4:a9:bf:a0:d0:80:5c:5d: 05:8b:04:10:08:f4:c1:6a:e8:6c:70:98:97:ea:f5:85:db:1f: c1:43:37:0a:24:d7:74:da:d5:c7:58:09:83:0f:db:50:0a:82: f7:64:01:9f -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUARZBeyOmc7BFebfiUDLx32z45DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE2MjRaFw0yNTAzMDQxODIxMjRaMDMxMTAvBgNV BAMTKERDRDNGMEU0RUUwNDNDNUJBOTg1OEE4OUI1QTYwRTdGRjJEMzU1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8vrUr6z8WKKQJTCBZiMTCwBv cowmT0rTz5fjkwg/WojAHJpO8CPhJ0P3urH8yKv4nvzDAaSKvl2YBWvvSnzhEc+y g4KfmpfjuTWxSgpNqRanKwJNwTv6ekL5hS+ltbtrkC4MWDSX6rTJ2JIS0h7YbWbQ kJv1F62jSZC6Lo5xZjQXE0GAZKAva1LH/aPPpPGP/TmGXRL+xWkgiIvLrnO+FKQ6 aBoHrF0NEltln/PsQTXL4+ija6K+xzBic/o7Hyx8nVy2k/giVkA7UbJ7G3azZKIX lkcJdU30zWD7zqutJW3B6xtxNKcZ1K2xK04bBVadStB9VMAnCXEKxaLd4JRxAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTc0/Dk7gQ8W6mF iom1pg5/8tNVxjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTUyRkQ2QTZBNDZCNzgyOEI0NEQ2MkY3 RTBBQjUyMjE2QzVFNkVFQUQ4REU4Rjc4OUY5QTBDOEQxMTk1QTk0Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNTJGRDZBNkE0NkI3ODI4QjQ0RDYyRjdFMEFCNTIyMTZDNUU2RUVBRDhE RThGNzg5RjlBMEM4RDExOTVBOTRDLzAvRENEM0YwRTRFRTA0M0M1QkE5ODU4QTg5 QjVBNjBFN0ZGMkQzNTVDNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLeysAwQCiswM MA0EAgACMAcDBQAoA8JAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGATANBgkq hkiG9w0BAQsFAAOCAQEAA0IgLVsn80DYpenqiCHIKrlm0DnA4OVw0JtyvYS2DMzb 6QA/ce61mYwkedtMbvLRVpprEpG+uEOv5NcMKrwoUvjPwAetBpc9U+8S4eYqEOUA QOfxWRokMKB1lg+xxHQH/oFocDjFdYBaakG4ORSpVe386OB1CIaZbIjeSVqsjojz pmO4km4QX7/dQ/s8ElohBsDzAH/Z9I7C6hmsqHJmIj9PJ8z76t7b0Z44uTS3HW5q Abtjj8pvwQ3kH2BkSQcSFMwz70vbw+UBkW2SfSrmjsSpv6DQgFxdBYsEEAj0wWro bHCYl+r1hdsfwUM3CiTXdNrVx1gJgw/bUAqC92QBnw== -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:10 2024 by rpki-client on console-ams.rpki-client.org