$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E71A68011C0812045A1DBBC6433B7791B5DDF0D2.cer File: E71A68011C0812045A1DBBC6433B7791B5DDF0D2.cer (raw, json) Hash identifier: x/L3Lvq9E4yTEw3elkPBq6MJxEPF124DUPR5ByGnEm0= Subject key identifier: E7:1A:68:01:1C:08:12:04:5A:1D:BB:C6:43:3B:77:91:B5:DD:F0:D2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7CD797596E0C48DA7512A104096F09B412E3D014 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/E71A68011C0812045A1DBBC6433B7791B5DDF0D2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 03 Dec 2024 18:00:01 +0000 Certificate not after: Tue 02 Dec 2025 18:05:01 +0000 Subordinate resources: AS: 13999 AS: 28541 AS: 262916 IP: 177.224.0.0/13 IP: 177.240.0.0/13 IP: 181.199.192.0/20 IP: 187.179.160.0 -- 187.179.255.255 IP: 187.191.128.0/17 IP: 187.240.0.0/13 IP: 189.192.0.0/13 IP: 190.110.0.0/19 IP: 200.52.160.0 -- 200.52.223.255 IP: 200.56.128.0/18 IP: 200.66.0.0/18 IP: 200.77.0.0/17 IP: 200.92.0.0/16 IP: 200.94.224.0/20 IP: 201.132.0.0/16 IP: 201.159.192.0 -- 201.159.215.255 IP: 201.164.0.0/15 IP: 201.169.0.0/16 IP: 2806:260::/28 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Dec 2024 14:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d7:97:59:6e:0c:48:da:75:12:a1:04:09:6f:09:b4:12:e3:d0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Dec 3 18:00:01 2024 GMT Not After : Dec 2 18:05:01 2025 GMT Subject: CN=E71A68011C0812045A1DBBC6433B7791B5DDF0D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:02:f9:a7:e6:d4:0f:f7:36:75:42:eb:6a:5b: 49:9d:b0:80:31:5c:df:9e:49:f0:40:34:0f:d9:cf: 3f:b6:5e:63:a0:9e:f1:b6:c5:04:72:fb:4c:ec:54: 8f:93:51:87:e7:8f:e2:05:7e:a7:a1:eb:78:01:da: 0e:02:80:22:b1:95:49:63:93:a1:79:20:fe:81:1f: bf:01:78:22:22:1c:39:c5:b0:8e:91:23:14:be:5d: b1:ef:8f:cc:44:dd:ce:e3:4d:d9:42:5d:34:84:08: 7e:fb:f5:6d:b4:4b:3c:7a:ba:1e:af:70:fb:91:4f: c8:c6:53:be:a1:66:8c:23:80:d7:c9:a8:5d:65:cc: 7d:e8:76:fb:05:8a:99:fe:5c:c4:1c:66:a6:a4:fe: 10:51:a7:3f:ad:31:de:e6:72:de:38:2b:47:e8:e3: a4:8b:df:59:aa:60:0b:f0:fe:ab:c8:28:46:00:24: 1e:f8:3f:0d:d3:51:10:8c:0d:66:a4:cd:59:a0:3f: 2f:05:c4:1f:f0:fc:27:26:74:2e:85:17:d8:f9:d8: 09:a7:42:7c:28:6a:b7:8d:cf:7f:42:86:53:33:bd: 4e:86:a2:3d:59:d4:ef:e9:7c:d6:92:c5:27:b0:e6: b3:c1:c8:82:ca:78:33:1d:7a:04:3d:6d:5b:2b:95: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:1A:68:01:1C:08:12:04:5A:1D:BB:C6:43:3B:77:91:B5:DD:F0:D2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/E71A68011C0812045A1DBBC6433B7791B5DDF0D2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.224.0.0/13 177.240.0.0/13 181.199.192.0/20 187.179.160.0-187.179.255.255 187.191.128.0/17 187.240.0.0/13 189.192.0.0/13 190.110.0.0/19 200.52.160.0-200.52.223.255 200.56.128.0/18 200.66.0.0/18 200.77.0.0/17 200.92.0.0/16 200.94.224.0/20 201.132.0.0/16 201.159.192.0-201.159.215.255 201.164.0.0/15 201.169.0.0/16 IPv6: 2806:260::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13999 28541 262916 Signature Algorithm: sha256WithRSAEncryption d4:7c:e9:c9:5f:47:0e:c2:13:9a:de:ac:00:3d:e4:84:2d:10: 17:cb:4c:ad:c7:d8:1b:a9:8b:5f:3a:e6:1e:48:4d:6f:e0:ab: d7:d3:f9:7b:c8:eb:a0:46:11:9f:93:d1:75:a5:9d:0e:da:32: 58:f0:f4:8c:3c:5e:e4:42:00:e7:1c:69:90:92:fb:a5:43:d4: 2f:ba:de:cb:8c:d2:65:57:5b:67:d5:24:fd:f2:4f:f4:c5:f1: 81:bc:90:96:82:63:7c:1c:0e:f2:06:3b:6e:0c:b7:ab:52:3b: 8a:ef:fc:1b:c6:4c:2f:f6:8e:92:47:2e:ee:9c:c2:f6:9a:13: c1:a6:92:ec:14:c9:36:58:74:36:39:16:fa:01:21:5c:ec:02: f7:e6:73:0d:cd:72:27:0f:d5:93:ff:b1:26:01:00:ed:62:48: f4:dc:e4:d0:05:f0:d1:56:85:bc:21:de:fc:9f:9b:2b:95:c6: 20:df:68:e3:4e:e9:1b:d5:09:93:6f:dd:19:2f:05:6b:75:bf: ab:42:58:af:fd:47:5e:12:c6:17:8b:e3:a3:51:3d:ff:59:f3: 8d:3e:d9:b2:2e:e4:6e:97:22:c9:4b:07:69:86:1d:48:02:77: 57:4c:b8:62:77:55:e8:ab:89:d6:93:f4:3e:d9:e9:17:66:d5: ec:70:fe:39 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUfNeXWW4MSNp1EqEECW8JtBLj0BQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDEyMDMxODAwMDFaFw0yNTEyMDIxODA1MDFaMDMxMTAvBgNV BAMTKEU3MUE2ODAxMUMwODEyMDQ1QTFEQkJDNjQzM0I3NzkxQjVEREYwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtAvmn5tQP9zZ1QutqW0mdsIAx XN+eSfBANA/Zzz+2XmOgnvG2xQRy+0zsVI+TUYfnj+IFfqeh63gB2g4CgCKxlUlj k6F5IP6BH78BeCIiHDnFsI6RIxS+XbHvj8xE3c7jTdlCXTSECH779W20Szx6uh6v cPuRT8jGU76hZowjgNfJqF1lzH3odvsFipn+XMQcZqak/hBRpz+tMd7mct44K0fo 46SL31mqYAvw/qvIKEYAJB74Pw3TURCMDWakzVmgPy8FxB/w/CcmdC6FF9j52Amn QnwoareNz39ChlMzvU6Goj1Z1O/pfNaSxSew5rPByILKeDMdegQ9bVsrlXJRAgMB AAGjggQwMIIELDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnGmgBHAgSBFod u8ZDO3eRtd3w0jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5 NzI3N0Q1Mzk2QjYzMTc0REIwQzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvRTcxQTY4MDExQzA4MTIwNDVBMURCQkM2 NDMzQjc3OTFCNURERjBEMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGmBggrBgEFBQcBBwEB/wSBljCBkzCBgQQCAAEwewMDA7HgAwMD sfADBAS1x8AwCwMEBbuzoAMDAruwAwQHu7+AAwMDu/ADAwO9wAMEBb5uADAMAwQF yDSgAwQFyDTAAwQGyDiAAwQGyEIAAwQHyE0AAwMAyFwDBATIXuADAwDJhDAMAwQG yZ/AAwQDyZ/QAwMByaQDAwDJqTANBAIAAjAHAwUEKAYCYDAiBggrBgEFBQcBCAEB /wQTMBGgDzANAgI2rwICb30CAwQDBDANBgkqhkiG9w0BAQsFAAOCAQEA1HzpyV9H DsITmt6sAD3khC0QF8tMrcfYG6mLXzrmHkhNb+Cr19P5e8jroEYRn5PRdaWdDtoy WPD0jDxe5EIA5xxpkJL7pUPUL7rey4zSZVdbZ9Uk/fJP9MXxgbyQloJjfBwO8gY7 bgy3q1I7iu/8G8ZML/aOkkcu7pzC9poTwaaS7BTJNlh0NjkW+gEhXOwC9+ZzDc1y Jw/Vk/+xJgEA7WJI9Nzk0AXw0VaFvCHe/J+bK5XGIN9o407pG9UJk2/dGS8Fa3W/ q0JYr/1HXhLGF4vjo1E9/1nzjT7Zsi7kbpciyUsHaYYdSAJ3V0y4YndV6KuJ1pP0 PtnpF2bV7HD+OQ== -----END CERTIFICATE-----Generated at Thu Dec 26 18:35:05 2024 by rpki-client on console-fra.rpki-client.org