$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer File: EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer (raw, json) Hash identifier: /chvpe0akTQP4bwh2b5OR7Y9RQfXniEf5o6jjbNVBsI= Subject key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 404E9530C55927758160F198DE3BE1771F6B889F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:52:26 +0000 Certificate not after: Tue 04 Mar 2025 17:57:26 +0000 Subordinate resources: IP: 200.90.144.0/21 IP: 200.110.48.0/20 IP: 2803:5c00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 May 2024 10:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4e:95:30:c5:59:27:75:81:60:f1:98:de:3b:e1:77:1f:6b:88:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:52:26 2024 GMT Not After : Mar 4 17:57:26 2025 GMT Subject: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:3c:10:0a:e1:ce:47:53:10:bc:4b:c1:4e: 7d:59:4e:19:8f:82:24:74:ce:18:3f:2a:0d:cb:b8: f4:25:77:b6:2e:1c:cd:eb:92:a0:c3:9b:fc:d8:39: f8:a4:8b:df:47:d1:a7:eb:36:ce:37:10:52:c0:1b: ca:12:80:85:f9:d1:5b:d4:b1:f7:2e:6d:3d:86:4f: 73:32:08:28:7f:0c:22:5b:08:19:9a:fc:58:39:c1: a2:c2:bf:f2:da:b6:2d:97:13:6c:8c:0b:ba:59:d7: 4c:37:00:a7:b4:c9:4e:4b:84:6f:1f:b7:46:a9:da: 2c:60:1c:bb:c1:e2:de:82:b1:60:27:97:a9:92:ba: 1d:fd:9c:ec:ed:a8:6d:ea:95:f4:88:04:5f:a1:06: 8c:30:d1:f8:14:03:6a:28:eb:9b:e8:8c:04:55:51: 81:e9:01:d8:e7:f2:01:49:dd:88:61:1a:79:34:b4: 6d:77:ae:6c:ee:76:0e:82:e9:e8:0b:6a:35:28:7f: 7a:2d:cf:a4:50:4e:4a:5f:09:3c:47:dd:53:f2:1c: 99:80:d8:02:f4:e4:51:28:f8:d5:65:6e:bf:f1:a8: 0e:e9:7c:b5:83:c4:31:eb:09:2c:db:be:37:5f:6f: 9d:3a:c3:df:50:b5:3b:49:cb:a0:fb:f7:9c:fd:a8: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.90.144.0/21 200.110.48.0/20 IPv6: 2803:5c00::/32 Signature Algorithm: sha256WithRSAEncryption 59:46:e9:8d:4b:3e:71:27:e4:4c:2c:5e:42:e5:9c:cc:4f:37: ea:5e:cc:c9:ca:8d:e8:36:ad:05:3d:9c:cd:b1:73:18:00:80: 30:5c:2f:0f:7b:ff:bc:a1:25:3c:67:ce:f7:95:a5:03:ab:08: 32:9f:bd:30:78:4f:fd:54:58:48:d8:3d:dc:a1:a9:c1:1d:53: 28:64:54:6c:70:4b:19:83:b1:d8:62:3b:b6:38:c5:05:ff:ab: b0:ed:57:5b:42:b4:b0:24:3e:ac:f4:3a:01:8f:97:bd:51:5f: 0c:52:8f:28:e0:bc:2f:fd:a8:61:6e:bd:f6:3a:a6:19:77:21: 97:09:2c:55:b0:df:16:f1:53:e0:b9:5f:23:11:a3:46:1a:86: 30:55:b6:ac:2e:21:5f:61:7f:a3:a8:19:d8:0d:79:cd:d0:3b: 39:12:15:76:c8:6a:f1:f4:cf:be:b0:8a:b8:3c:89:8e:d9:80: d2:68:6e:3d:bf:98:d1:8b:58:10:43:94:dc:f3:48:4c:f4:13: 01:fc:7a:bb:fe:75:83:2e:55:ba:9d:e9:b7:d0:13:26:3e:43: cc:d5:14:ba:5d:4b:0d:30:d2:09:6e:91:fd:c0:15:31:2e:17: bd:f9:af:58:1a:7a:52:c1:89:a9:a6:3a:2a:1c:2a:e8:7c:99: c6:6a:f8:d7 -----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgIUQE6VMMVZJ3WBYPGY3jvhdx9riJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUyMjZaFw0yNTAzMDQxNzU3MjZaMDMxMTAvBgNV BAMTKEVDMUYwNjhBQTU3QkJGODlCQTNEN0Q1QUQzMkE5M0VDNDQ3REM1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnMjwQCuHOR1MQvEvBTn1ZThmP giR0zhg/Kg3LuPQld7YuHM3rkqDDm/zYOfiki99H0afrNs43EFLAG8oSgIX50VvU sfcubT2GT3MyCCh/DCJbCBma/Fg5waLCv/Lati2XE2yMC7pZ10w3AKe0yU5LhG8f t0ap2ixgHLvB4t6CsWAnl6mSuh39nOztqG3qlfSIBF+hBoww0fgUA2oo65vojARV UYHpAdjn8gFJ3YhhGnk0tG13rmzudg6C6egLajUof3otz6RQTkpfCTxH3VPyHJmA 2AL05FEo+NVlbr/xqA7pfLWDxDHrCSzbvjdfb506w99QtTtJy6D795z9qMdNAgMB AAGjggOZMIIDlTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsHwaKpXu/ibo9 fVrTKpPsRH3FezAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTRDQTdCQzcyNzhDNzM4OUZFODFFMkE3 NjlBOTUwQjMwMzI4NEU5QzFERTkzQjE2NDlCMjYxQzNDMDk5NDc2MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NENBN0JDNzI3OEM3Mzg5RkU4MUUyQTc2OUE5NTBCMzAzMjg0RTlDMURF OTNCMTY0OUIyNjFDM0MwOTk0NzYwLzAvRUMxRjA2OEFBNTdCQkY4OUJBM0Q3RDVB RDMyQTkzRUM0NDdEQzU3Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDyFqQAwQEyG4w MA0EAgACMAcDBQAoA1wAMA0GCSqGSIb3DQEBCwUAA4IBAQBZRumNSz5xJ+RMLF5C 5ZzMTzfqXszJyo3oNq0FPZzNsXMYAIAwXC8Pe/+8oSU8Z873laUDqwgyn70weE/9 VFhI2D3coanBHVMoZFRscEsZg7HYYju2OMUF/6uw7VdbQrSwJD6s9DoBj5e9UV8M Uo8o4Lwv/ahhbr32OqYZdyGXCSxVsN8W8VPguV8jEaNGGoYwVbasLiFfYX+jqBnY DXnN0Ds5EhV2yGrx9M++sIq4PImO2YDSaG49v5jRi1gQQ5Tc80hM9BMB/Hq7/nWD LlW6nem30BMmPkPM1RS6XUsNMNIJbpH9wBUxLhe9+a9YGnpSwYmppjoqHCrofJnG avjX -----END CERTIFICATE-----Generated at Sat May 18 16:57:18 2024 by rpki-client on console-fra.rpki-client.org