$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer File: EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer (raw, json) Hash identifier: ZE0mY6Flmh2BTcrI2f0p3QITNhFoRE6n4jpp2jB5l1c= Subject key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 488F95D1B439EBF8F70FAF246DAACCC56C022097 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:11:15 +0000 Certificate not after: Tue 04 Mar 2025 18:16:15 +0000 Subordinate resources: AS: 23487 IP: 190.63.0.0/16 IP: 190.111.64.0/19 IP: 200.25.192.0/19 IP: 2800:430::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 May 2024 10:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8f:95:d1:b4:39:eb:f8:f7:0f:af:24:6d:aa:cc:c5:6c:02:20:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:11:15 2024 GMT Not After : Mar 4 18:16:15 2025 GMT Subject: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:ca:49:fb:09:ee:0c:76:bf:60:59:fe:d8: 6c:35:29:b1:26:aa:c6:31:1f:43:8e:ec:a9:1c:4e: 25:8d:11:50:e0:e6:04:38:55:58:2f:ed:b4:59:df: 85:95:a6:2f:6a:62:72:42:2e:cc:4c:53:7b:0a:0e: 80:e4:d0:ba:04:73:e8:ee:f9:a7:c8:4d:68:ef:63: 60:37:e7:bb:b6:1f:1f:57:70:9b:7e:5c:fa:8f:20: fd:4d:86:b2:3f:85:16:c8:d4:e5:e2:da:05:f0:72: 57:d4:df:16:5b:a8:c7:2f:4e:22:24:42:ae:84:94: d2:78:f0:89:cf:6e:eb:d0:95:42:f2:8f:f2:3c:96: da:f6:24:5f:9a:55:98:ad:7f:d0:1e:42:9f:a7:6d: cd:64:07:80:a3:4d:3e:41:36:64:60:6c:ca:68:93: fc:0b:9c:35:59:00:92:b2:d6:88:64:30:8c:a2:7b: cb:94:2f:c1:62:cf:ac:02:34:46:49:77:a0:3e:c8: 55:08:db:76:25:ab:7c:b2:ff:b7:7c:45:94:94:fd: 70:05:d3:b8:c8:b7:46:4c:6d:f6:25:c8:33:0c:59: 09:b8:40:0d:7d:4e:7e:68:83:24:0a:fd:80:b2:81: 68:bd:bc:fc:6a:84:40:9d:a2:28:e3:b1:2b:f0:ca: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.63.0.0/16 190.111.64.0/19 200.25.192.0/19 IPv6: 2800:430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23487 Signature Algorithm: sha256WithRSAEncryption 34:fc:50:ba:81:87:16:f0:26:e4:48:69:4b:76:18:0c:d2:e8: e5:47:d7:d9:9d:5d:85:24:48:02:56:1c:10:58:5e:72:b9:39: 8f:99:1d:50:63:d4:40:6a:c5:53:f9:a2:43:4b:c1:2a:a8:90: e2:a7:8b:53:b9:20:f6:ee:d2:c7:e2:7e:7b:53:be:41:16:fe: b4:ae:b3:a1:e4:f2:df:01:ac:40:25:74:76:c6:57:2e:cb:18: f5:4f:6e:88:6d:91:ca:b6:e5:d5:c1:bb:cc:55:c1:16:69:ba: fd:5c:6d:36:c1:aa:39:bc:97:32:07:09:15:b6:f9:c3:f4:ef: 58:03:27:a0:38:72:68:33:86:0b:ab:24:d8:da:1c:11:cd:0c: 0c:b7:d1:60:f9:b7:6a:57:13:1a:62:b4:0f:15:f9:1b:78:3c: 85:bd:ed:57:8e:7b:46:d4:e0:ee:33:ba:00:91:15:bf:55:67: de:4a:20:c4:bb:17:67:79:6c:17:bb:70:b4:91:1d:c6:a1:a3: 7e:f7:c5:fb:58:83:cc:62:47:17:75:42:e0:c3:d0:67:93:c3: c0:8c:39:0b:b7:21:dd:33:b7:37:4c:fe:e5:81:7a:3b:dc:94: d9:f5:ac:8c:7c:83:6c:a3:2b:21:72:7e:c5:9b:b9:62:f5:8b: d6:8c:8b:1c -----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIUSI+V0bQ56/j3D68kbarMxWwCIJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODExMTVaFw0yNTAzMDQxODE2MTVaMDMxMTAvBgNV BAMTKEVCRjlEQTRFOTlGQ0JBOTdDMUM1MEQ4QzBBQjVDM0I5QjlENjMzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfTMpJ+wnuDHa/YFn+2Gw1KbEm qsYxH0OO7KkcTiWNEVDg5gQ4VVgv7bRZ34WVpi9qYnJCLsxMU3sKDoDk0LoEc+ju +afITWjvY2A357u2Hx9XcJt+XPqPIP1NhrI/hRbI1OXi2gXwclfU3xZbqMcvTiIk Qq6ElNJ48InPbuvQlULyj/I8ltr2JF+aVZitf9AeQp+nbc1kB4CjTT5BNmRgbMpo k/wLnDVZAJKy1ohkMIyie8uUL8Fiz6wCNEZJd6A+yFUI23Ylq3yy/7d8RZSU/XAF 07jIt0ZMbfYlyDMMWQm4QA19Tn5ogyQK/YCygWi9vPxqhECdoijjsSvwyok/AgMB AAGjggO5MIIDtTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTr+dpOmfy6l8HF DYwKtcO5udYzpTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEY0MEExMjZDRjgyREYyMjIwNUFDNDk2 RkQ3NDJBQUZBQjJBRTFCQ0E0NzI5RDM1NDNCRDU5ODg0MTM3MDM5MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRjQwQTEyNkNGODJERjIyMjA1QUM0OTZGRDc0MkFBRkFCMkFFMUJDQTQ3 MjlEMzU0M0JENTk4ODQxMzcwMzkwLzAvRUJGOURBNEU5OUZDQkE5N0MxQzUwRDhD MEFCNUMzQjlCOUQ2MzNBNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAvj8DBAW+b0AD BAXIGcAwDQQCAAIwBwMFACgABDAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICW78w DQYJKoZIhvcNAQELBQADggEBADT8ULqBhxbwJuRIaUt2GAzS6OVH19mdXYUkSAJW HBBYXnK5OY+ZHVBj1EBqxVP5okNLwSqokOKni1O5IPbu0sfifntTvkEW/rSus6Hk 8t8BrEAldHbGVy7LGPVPbohtkcq25dXBu8xVwRZpuv1cbTbBqjm8lzIHCRW2+cP0 71gDJ6A4cmgzhgurJNjaHBHNDAy30WD5t2pXExpitA8V+Rt4PIW97VeOe0bU4O4z ugCRFb9VZ95KIMS7F2d5bBe7cLSRHcaho373xftYg8xiRxd1QuDD0GeTw8CMOQu3 Id0ztzdM/uWBejvclNn1rIx8g2yjKyFyfsWbuWL1i9aMixw= -----END CERTIFICATE-----Generated at Sat May 18 16:57:18 2024 by rpki-client on console-fra.rpki-client.org