$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.cer File: E953CDEAA14862B46A8E001F1AD070187A8B1BF0.cer (raw, json) Hash identifier: 3XcE2wKvC20cJWzUYCEQTy0j0u+b2r2GgjIIJX2LSm8= Subject key identifier: E9:53:CD:EA:A1:48:62:B4:6A:8E:00:1F:1A:D0:70:18:7A:8B:1B:F0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 591F65F3F9DCDDAB8631C13B2F983DC8D3C6B251 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 06 Dec 2024 12:35:01 +0000 Certificate not after: Fri 05 Dec 2025 12:40:01 +0000 Subordinate resources: AS: 266874 IP: 45.239.92.0/22 IP: 2803:5aa0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Dec 2024 14:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1f:65:f3:f9:dc:dd:ab:86:31:c1:3b:2f:98:3d:c8:d3:c6:b2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Dec 6 12:35:01 2024 GMT Not After : Dec 5 12:40:01 2025 GMT Subject: CN=E953CDEAA14862B46A8E001F1AD070187A8B1BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:7d:62:f6:e4:38:3a:9e:3c:4a:46:7e:d7: 5e:92:33:4d:b5:36:26:14:34:d7:a9:bf:d8:8f:e3: b1:89:52:bb:95:30:8b:29:ac:66:1e:2f:f8:8c:5d: ff:9d:f8:34:f5:bd:3a:c2:b0:c5:07:da:56:e0:6f: 25:79:db:6d:c8:ef:4b:8c:f2:ae:f0:f5:47:6f:52: 3d:9a:eb:17:a8:99:da:30:cd:63:ce:d1:63:36:fb: 07:1c:dc:3c:69:a9:b7:fd:b0:ae:cf:85:45:0d:c2: d3:d2:df:42:3b:55:e6:1c:50:60:36:c9:80:24:a7: 85:c4:88:72:52:b5:9c:0c:d3:1f:b1:cf:be:40:61: a6:e1:5e:63:d0:d0:c1:05:e9:b1:b9:b2:8c:2a:fd: d2:d1:99:ce:47:80:29:e8:d8:b0:80:7f:48:05:3b: 3d:0c:28:06:f4:70:33:a7:03:ca:83:e2:9c:b9:e1: 07:66:53:b9:f6:01:55:11:90:82:4c:c1:71:3c:ca: 46:c4:99:42:86:a1:c6:2d:4a:89:7d:aa:07:d9:dd: 4b:22:e4:d0:66:47:3a:b1:bc:ef:44:7c:48:90:14: 4e:c6:d9:ac:1d:d9:e1:23:3e:b2:09:3d:22:e1:2a: 0a:f1:e1:e5:43:32:6c:99:2b:4c:84:38:bf:ef:7c: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:53:CD:EA:A1:48:62:B4:6A:8E:00:1F:1A:D0:70:18:7A:8B:1B:F0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.92.0/22 IPv6: 2803:5aa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266874 Signature Algorithm: sha256WithRSAEncryption 6d:9d:71:00:1f:ae:11:0c:ec:9f:b9:a9:7f:1d:48:97:d9:29: c0:03:95:88:13:b9:90:43:45:57:6b:10:1e:cd:8b:b1:67:11: 4a:f2:91:b6:31:62:c2:e4:48:25:4b:d5:f8:34:4c:a1:de:2e: 4d:7f:47:47:68:f6:30:46:7b:f9:d8:d1:5e:1e:04:a3:7f:73: 40:34:eb:cd:d7:35:20:ac:99:48:9e:09:8e:42:b3:45:02:64: 8e:b7:ec:19:91:33:d3:95:c5:a8:b3:97:90:59:fc:f1:47:d8: 87:c3:51:97:08:11:f0:0f:54:83:a1:42:30:3a:f1:aa:3a:52: f8:24:09:a5:e1:1f:7b:c0:49:bc:af:45:db:88:cd:77:e1:57: d9:66:43:dc:f0:8a:09:f0:69:98:d6:cc:d2:b5:ed:62:ba:5c: 7f:be:e3:31:b5:6e:38:45:23:8b:31:86:b8:8a:5e:a0:fc:f0: 0f:18:4d:3e:bf:67:00:aa:89:58:b2:26:c3:f6:e0:1a:d5:1d: 5b:d6:39:9f:49:b6:f3:1c:55:ec:80:11:df:b1:ee:12:1a:33: 11:c9:9d:f9:f5:4d:14:6e:2c:2c:55:ea:83:a7:6f:f2:84:0b: 73:70:b8:83:9d:8f:dd:da:52:4b:b5:7d:e0:97:f4:30:a1:b3: 30:db:f0:d3 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUWR9l8/nc3auGMcE7L5g9yNPGslEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDEyMDYxMjM1MDFaFw0yNTEyMDUxMjQwMDFaMDMxMTAvBgNV BAMTKEU5NTNDREVBQTE0ODYyQjQ2QThFMDAxRjFBRDA3MDE4N0E4QjFCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBA31i9uQ4Op48SkZ+116SM021 NiYUNNepv9iP47GJUruVMIsprGYeL/iMXf+d+DT1vTrCsMUH2lbgbyV5223I70uM 8q7w9UdvUj2a6xeomdowzWPO0WM2+wcc3Dxpqbf9sK7PhUUNwtPS30I7VeYcUGA2 yYAkp4XEiHJStZwM0x+xz75AYabhXmPQ0MEF6bG5sowq/dLRmc5HgCno2LCAf0gF Oz0MKAb0cDOnA8qD4py54QdmU7n2AVURkIJMwXE8ykbEmUKGocYtSol9qgfZ3Usi 5NBmRzqxvO9EfEiQFE7G2awd2eEjPrIJPSLhKgrx4eVDMmyZK0yEOL/vfB/dAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpU83qoUhitGqO AB8a0HAYeosb8DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDMxMjZDM0E3OTU3REJFQzlBQ0E0Mzcx MjVBNTBGNzlDRDNERjdDREUwNUZDODk4MjJCQUUwQkU2MjI3RDU2NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMzEyNkMzQTc5NTdEQkVDOUFDQTQzNzEyNUE1MEY3OUNEM0RGN0NERTA1 RkM4OTgyMkJBRTBCRTYyMjdENTY1LzAvRTk1M0NERUFBMTQ4NjJCNDZBOEUwMDFG MUFEMDcwMTg3QThCMUJGMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe9cMA0EAgAC MAcDBQAoA1qgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSejANBgkqhkiG9w0B AQsFAAOCAQEAbZ1xAB+uEQzsn7mpfx1Il9kpwAOViBO5kENFV2sQHs2LsWcRSvKR tjFiwuRIJUvV+DRMod4uTX9HR2j2MEZ7+djRXh4Eo39zQDTrzdc1IKyZSJ4JjkKz RQJkjrfsGZEz05XFqLOXkFn88UfYh8NRlwgR8A9Ug6FCMDrxqjpS+CQJpeEfe8BJ vK9F24jNd+FX2WZD3PCKCfBpmNbM0rXtYrpcf77jMbVuOEUjizGGuIpeoPzwDxhN Pr9nAKqJWLImw/bgGtUdW9Y5n0m28xxV7IAR37HuEhozEcmd+fVNFG4sLFXqg6dv 8oQLc3C4g52P3dpSS7V94Jf0MKGzMNvw0w== -----END CERTIFICATE-----Generated at Thu Dec 26 19:26:21 2024 by rpki-client on console-ams.rpki-client.org