$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer File: E91120749BBFC9A09C6A5455EF3C216072739D2A.cer (raw, json) Hash identifier: 6iIeSTq3R8846eO60ohz/XVxRWTBhB1prSqBoNUwmCQ= Subject key identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4DB3BA214FB847DADADE9EB75AFA01238DC051A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:36:46 +0000 Certificate not after: Tue 04 Mar 2025 17:41:46 +0000 Subordinate resources: AS: 264831 IP: 181.114.60.0/22 IP: 2803:a080::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b3:ba:21:4f:b8:47:da:da:de:9e:b7:5a:fa:01:23:8d:c0:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:36:46 2024 GMT Not After : Mar 4 17:41:46 2025 GMT Subject: CN=E91120749BBFC9A09C6A5455EF3C216072739D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:f7:ba:71:89:14:22:f9:7d:98:05:63:54: 6e:7e:91:84:a4:e9:75:a0:67:9b:d8:35:90:c4:58: e4:62:f7:53:d4:44:8b:3f:57:40:df:49:60:70:50: 47:d8:73:3d:e2:32:2c:84:f2:ca:b1:bf:3d:b6:3f: 0b:47:4d:99:a5:d6:7b:b5:d7:58:9e:31:8e:5a:cd: 08:0a:79:de:47:61:65:05:c3:d8:bf:e8:92:76:bd: 52:ba:1a:64:2e:f9:09:7c:ef:cd:83:0a:06:f1:80: 45:ca:85:16:74:cf:ce:66:51:bc:b2:2c:46:ab:cb: 06:45:b9:7d:32:b1:dc:24:e5:3e:a1:d3:15:a6:08: 4b:12:40:2c:31:3c:a4:d4:41:1d:dc:1a:31:8d:a1: f5:11:0a:5c:50:1d:0b:05:29:26:c8:16:e0:c0:60: 76:b3:20:d9:e3:b9:32:3b:43:f0:cd:95:6d:a3:82: b4:e7:e4:77:98:f3:4e:66:64:6d:57:ed:d1:c2:64: b3:52:e3:a4:2b:92:e6:25:9a:a2:6d:ce:f4:5c:0c: 00:23:84:8f:88:79:a4:45:67:4f:f6:25:47:a9:74: 28:1f:33:13:0f:13:22:aa:0d:17:24:c0:b7:db:6f: 5c:33:79:9c:6f:9e:90:6c:b0:de:88:75:19:08:36: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.114.60.0/22 IPv6: 2803:a080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264831 Signature Algorithm: sha256WithRSAEncryption 86:0d:da:d7:ea:e9:cc:a8:33:b3:d8:34:23:1a:03:45:0c:de: d8:cc:68:91:d0:00:61:ad:7b:ea:9d:d4:ab:6d:1e:ed:59:bb: a2:4e:5f:ce:40:0f:46:9a:a0:57:8a:49:42:7e:08:a0:8f:17: 5d:56:f7:e1:8d:b4:0e:48:ee:28:41:07:da:e9:98:05:1a:31: 86:b4:64:ea:5a:24:a6:c4:94:1f:52:13:3d:0d:14:8c:c0:e1: db:47:b1:e8:c3:15:dd:c6:57:83:5a:38:64:e2:8f:55:66:aa: a5:b0:01:37:ce:80:53:d8:0f:7c:6e:c7:03:c6:35:0f:57:93: 74:52:40:93:e0:1f:9a:6e:6e:4e:02:70:2c:b5:dd:13:1c:ed: 13:0d:28:68:76:06:2f:85:39:2e:af:dc:25:e2:1b:d6:ce:71: 72:1d:5e:bf:35:43:9b:b2:d8:0c:24:37:7a:28:e4:a2:0e:13: 6e:9b:34:7f:9b:6c:ef:c3:52:11:aa:68:78:07:50:a9:03:ab: 5b:60:9a:82:21:c1:65:cb:e5:b5:5d:f1:df:fe:26:dc:41:42: e2:4f:cb:6e:e1:43:77:f1:21:e8:9d:a4:7b:f7:40:b7:84:2b: 87:40:30:a8:e1:4a:47:a7:3d:ed:2f:6c:06:db:8c:5d:95:4e: a3:af:03:b2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTbO6IU+4R9ra3p63WvoBI43AUaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM2NDZaFw0yNTAzMDQxNzQxNDZaMDMxMTAvBgNV BAMTKEU5MTEyMDc0OUJCRkM5QTA5QzZBNTQ1NUVGM0MyMTYwNzI3MzlEMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1Pe6cYkUIvl9mAVjVG5+kYSk 6XWgZ5vYNZDEWORi91PURIs/V0DfSWBwUEfYcz3iMiyE8sqxvz22PwtHTZml1nu1 11ieMY5azQgKed5HYWUFw9i/6JJ2vVK6GmQu+Ql8782DCgbxgEXKhRZ0z85mUbyy LEarywZFuX0ysdwk5T6h0xWmCEsSQCwxPKTUQR3cGjGNofURClxQHQsFKSbIFuDA YHazINnjuTI7Q/DNlW2jgrTn5HeY805mZG1X7dHCZLNS46QrkuYlmqJtzvRcDAAj hI+IeaRFZ0/2JUepdCgfMxMPEyKqDRckwLfbb1wzeZxvnpBssN6IdRkINkk3AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpESB0m7/JoJxq VFXvPCFgcnOdKjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTk2QzlBOEEwMzdFQTE0RUYzMTc5RkNB MTE4NUEwNDkwQ0M0NjQ2OEFEQkMyMkRDNTA4NDMzODlFOEM4Rjc3OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FOTZDOUE4QTAzN0VBMTRFRjMxNzlGQ0ExMTg1QTA0OTBDQzQ2NDY4QURC QzIyREM1MDg0MzM4OUU4QzhGNzc4LzAvRTkxMTIwNzQ5QkJGQzlBMDlDNkE1NDU1 RUYzQzIxNjA3MjczOUQyQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtXI8MA0EAgAC MAcDBQAoA6CAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKfzANBgkqhkiG9w0B AQsFAAOCAQEAhg3a1+rpzKgzs9g0IxoDRQze2MxokdAAYa176p3Uq20e7Vm7ok5f zkAPRpqgV4pJQn4IoI8XXVb34Y20DkjuKEEH2umYBRoxhrRk6lokpsSUH1ITPQ0U jMDh20ex6MMV3cZXg1o4ZOKPVWaqpbABN86AU9gPfG7HA8Y1D1eTdFJAk+Afmm5u TgJwLLXdExztEw0oaHYGL4U5Lq/cJeIb1s5xch1evzVDm7LYDCQ3eijkog4Tbps0 f5ts78NSEapoeAdQqQOrW2CagiHBZcvltV3x3/4m3EFC4k/LbuFDd/Eh6J2ke/dA t4Qrh0AwqOFKR6c97S9sBtuMXZVOo68Dsg== -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:13 2024 by rpki-client on console-fra.rpki-client.org