$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer File: E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer (raw, json) Hash identifier: Pkzsv/RgFQkpfDCwRCu6XAFmPkrAzFpdXGDRNUDxAek= Subject key identifier: E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5DEAFA02BC83144701C65905646EED68AF13CC3A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:47:27 +0000 Certificate not after: Tue 04 Mar 2025 17:52:27 +0000 Subordinate resources: AS: 262255 IP: 45.185.128.0/22 IP: 2803:db60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ea:fa:02:bc:83:14:47:01:c6:59:05:64:6e:ed:68:af:13:cc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:47:27 2024 GMT Not After : Mar 4 17:52:27 2025 GMT Subject: CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:75:03:75:51:8e:2e:ef:17:d3:e9:46:d5: 03:47:3d:8a:cd:38:32:4f:be:5c:52:6c:99:1c:35: 8b:3b:da:b6:76:b3:12:1b:cf:c8:c0:52:ea:60:ba: 6c:f1:e0:89:e4:5f:19:a1:0c:7c:6b:60:8c:e3:88: dc:c5:89:ef:60:06:aa:0b:2d:8d:d8:e5:b0:b1:d4: 8c:62:ae:05:8c:7a:bf:9a:80:0e:3a:a3:66:20:32: 5e:c0:be:a5:97:b3:de:b2:b4:f2:c3:2f:e3:c2:92: a2:a4:e7:93:5f:7e:7e:75:15:fc:4b:0a:27:92:05: 32:e4:5a:44:60:1c:98:7e:9a:39:02:b3:df:82:e8: af:3f:97:3b:af:ee:f0:f4:e5:02:92:bd:c6:df:ab: ed:84:40:6d:e4:41:cd:be:f8:9c:14:fe:d8:aa:4f: 47:de:8d:c2:e5:8d:48:b6:07:0e:a7:fb:73:03:a6: 8c:06:9d:a2:96:5a:0b:c4:92:c2:73:4c:99:e5:dd: 61:e2:5e:d9:02:65:df:76:57:95:ee:55:ed:ba:49: dc:d9:2f:89:cb:07:8b:b2:05:4b:73:95:aa:a6:74: 2b:2b:0f:22:ca:df:de:f5:c7:39:5a:2c:17:16:56: bf:91:c1:8a:c8:ca:40:af:86:c7:13:2c:7e:8e:f8: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.128.0/22 IPv6: 2803:db60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262255 Signature Algorithm: sha256WithRSAEncryption 41:f2:11:38:dd:e0:da:32:a6:88:28:19:b5:4f:6e:cf:09:b2: 39:47:3e:a4:7c:b3:b1:df:b1:f2:60:55:9c:71:66:ac:bf:a8: 6a:68:c1:b1:67:9e:af:33:f0:be:94:7c:51:de:95:c3:09:4c: 9e:09:e7:c8:b5:c0:38:12:6a:ab:3e:1d:e1:d5:4a:19:7f:f8: 9e:4b:75:98:f1:c6:8f:9e:01:0e:9b:04:03:38:57:5b:84:5c: 9f:e4:bc:db:d3:69:be:60:fd:18:bf:f9:6b:ff:e3:24:65:d0: 93:6b:b8:00:95:91:45:01:d5:41:af:c9:78:f0:0f:e7:85:7f: c7:b4:fc:f8:5f:5b:ff:86:71:08:cd:e9:c9:b0:36:1d:13:08: 2c:42:cf:cc:11:d3:05:69:0d:89:ed:14:13:e2:53:35:96:b6: 04:21:da:57:af:05:8e:1a:f7:c9:0c:86:4d:0f:ae:4c:13:84: f9:4f:aa:cd:46:b3:1f:d9:25:59:c9:77:5e:e9:f6:3f:bf:b0: 27:d2:0a:79:7a:52:86:ca:11:cc:68:17:2f:9e:bf:16:fc:f7: 37:ed:cb:1b:98:77:b8:ec:64:54:9f:4c:14:7e:f4:f1:34:ec: 91:fe:a0:9b:ea:3b:cd:ec:21:fa:2c:47:83:51:b5:0e:d5:ed: 7d:55:68:ed -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXer6AryDFEcBxlkFZG7taK8TzDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ3MjdaFw0yNTAzMDQxNzUyMjdaMDMxMTAvBgNV BAMTKEU3OEFEMUNFQzg5MDA1Q0UzOTRENTNGMERGRThGNjNFNjUxODA0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0nUDdVGOLu8X0+lG1QNHPYrN ODJPvlxSbJkcNYs72rZ2sxIbz8jAUupgumzx4InkXxmhDHxrYIzjiNzFie9gBqoL LY3Y5bCx1IxirgWMer+agA46o2YgMl7AvqWXs96ytPLDL+PCkqKk55Nffn51FfxL CieSBTLkWkRgHJh+mjkCs9+C6K8/lzuv7vD05QKSvcbfq+2EQG3kQc2++JwU/tiq T0fejcLljUi2Bw6n+3MDpowGnaKWWgvEksJzTJnl3WHiXtkCZd92V5XuVe26SdzZ L4nLB4uyBUtzlaqmdCsrDyLK3971xzlaLBcWVr+RwYrIykCvhscTLH6O+L+tAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnitHOyJAFzjlN U/Df6PY+ZRgEdTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODI5RUJFOTY0QkVDM0MyOEFDREQwNzEy NDFBRjZBNTUyQ0Y3NkUwNTcyOURFMUFFRDU4N0YwMEUzQkYxMDJGNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84MjlFQkU5NjRCRUMzQzI4QUNERDA3MTI0MUFGNkE1NTJDRjc2RTA1NzI5 REUxQUVENTg3RjAwRTNCRjEwMkY3LzAvRTc4QUQxQ0VDODkwMDVDRTM5NEQ1M0Yw REZFOEY2M0U2NTE4MDQ3NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbmAMA0EAgAC MAcDBQAoA9tgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAbzANBgkqhkiG9w0B AQsFAAOCAQEAQfIRON3g2jKmiCgZtU9uzwmyOUc+pHyzsd+x8mBVnHFmrL+oamjB sWeerzPwvpR8Ud6VwwlMngnnyLXAOBJqqz4d4dVKGX/4nkt1mPHGj54BDpsEAzhX W4Rcn+S829NpvmD9GL/5a//jJGXQk2u4AJWRRQHVQa/JePAP54V/x7T8+F9b/4Zx CM3pybA2HRMILELPzBHTBWkNie0UE+JTNZa2BCHaV68Fjhr3yQyGTQ+uTBOE+U+q zUazH9klWcl3Xun2P7+wJ9IKeXpShsoRzGgXL56/Fvz3N+3LG5h3uOxkVJ9MFH70 8TTskf6gm+o7zewh+ixHg1G1DtXtfVVo7Q== -----END CERTIFICATE-----Generated at Fri Nov 22 04:00:15 2024 by rpki-client on console-ams.rpki-client.org