$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer File: F78F9E6F642B6485F25A9B2331897573DEED26F6.cer (raw, json) Hash identifier: k1SXjyJubNVWfPMg1q1MqEM7K+heUjET+bSHcP2Ihwo= Subject key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 55F5A01F5676A336FA699C1B8CFF2254A1793B9F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:06:46 +0000 Certificate not after: Tue 04 Mar 2025 18:11:46 +0000 Subordinate resources: AS: 272114 IP: 168.205.0.0/22 IP: 170.247.120.0/22 IP: 2803:6d40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 29 Nov 2024 03:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f5:a0:1f:56:76:a3:36:fa:69:9c:1b:8c:ff:22:54:a1:79:3b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:06:46 2024 GMT Not After : Mar 4 18:11:46 2025 GMT Subject: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:4c:19:e4:9d:b1:2b:f0:71:f2:4f:20:28: f9:9d:60:cd:22:bd:36:22:cd:6b:3e:a0:db:66:f1: 9c:23:ce:3e:08:09:07:24:d4:84:c6:3b:45:43:a8: 7c:50:38:ca:96:77:79:d3:d0:fb:e5:32:ce:8a:e6: 8c:ec:99:99:d7:63:af:88:28:d9:e5:cf:f7:25:ef: b9:f6:51:f3:e1:67:6e:7f:bb:83:7b:e1:70:2b:53: a8:d2:8b:68:9e:16:9b:06:e3:0d:da:d6:17:e7:74: 30:b2:1a:c4:7d:a9:49:9d:3b:53:3f:5e:72:66:90: f7:a1:d4:82:04:a2:b1:23:37:25:05:8e:58:4e:8c: c7:02:d9:99:ac:f3:dd:86:11:ed:14:87:13:5b:1f: e2:4d:4b:6e:53:de:01:5a:7a:52:74:9e:cf:cf:91: 5f:53:f7:1c:e2:ca:bc:46:7a:1e:30:67:4c:ed:27: 0c:4f:ca:e9:9d:31:bc:47:07:63:f2:c4:0e:eb:3e: 38:54:f5:56:1d:c0:e5:31:67:b4:17:b8:4c:53:10: a9:dc:a0:26:6c:cb:9c:03:b9:bb:56:80:49:7c:4b: 51:6e:77:10:3d:bc:6e:2b:47:ee:3f:da:8a:28:38: 5a:56:97:bd:3a:f0:8a:aa:a7:6e:bf:f9:11:7d:30: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.0.0/22 170.247.120.0/22 IPv6: 2803:6d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272114 Signature Algorithm: sha256WithRSAEncryption 2c:91:de:db:0f:43:0d:c6:1d:2d:47:a1:12:40:e6:4b:65:0a: 92:36:5e:b1:5e:93:1f:a7:09:75:51:01:07:99:5e:3c:d6:2e: 63:39:98:90:ab:89:26:6d:99:55:48:68:9f:dd:c5:fb:58:e6: 34:cf:ba:6b:84:43:c2:90:2d:a4:79:0e:28:28:ec:22:1e:99: 25:d3:6a:64:4b:3b:7a:8a:a3:38:d5:84:8b:1a:dc:11:a6:ce: b0:28:cd:63:b5:88:2d:72:bd:1a:fb:0b:49:e6:e6:82:3e:a8: 44:39:e5:2c:24:d4:76:dd:36:1f:9b:c1:e1:93:6a:ff:df:a5: b7:2e:ee:76:06:1c:c4:84:2a:2c:16:c5:41:ad:ac:c3:54:75: 1c:c6:92:ff:7f:a5:01:bf:92:2d:80:90:c9:88:51:bb:9f:c9: e4:c3:a4:60:dd:4f:52:e3:90:5d:59:21:bf:01:68:98:a1:0a: 20:83:27:5b:d0:dd:12:9d:48:94:ad:5c:0d:3b:e0:b9:7f:39: fc:54:0c:9b:f4:b1:44:55:65:0d:07:57:a4:eb:9d:9e:f5:cf: a5:de:d7:81:cd:f2:60:5b:85:dd:a6:05:28:57:00:51:70:59: af:bf:fa:94:5b:88:7c:0c:d8:1d:62:da:a8:7f:c8:59:6f:0f: 33:1c:d5:15 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUVfWgH1Z2ozb6aZwbjP8iVKF5O58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA2NDZaFw0yNTAzMDQxODExNDZaMDMxMTAvBgNV BAMTKEY3OEY5RTZGNjQyQjY0ODVGMjVBOUIyMzMxODk3NTczREVFRDI2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7i0wZ5J2xK/Bx8k8gKPmdYM0i vTYizWs+oNtm8Zwjzj4ICQck1ITGO0VDqHxQOMqWd3nT0PvlMs6K5ozsmZnXY6+I KNnlz/cl77n2UfPhZ25/u4N74XArU6jSi2ieFpsG4w3a1hfndDCyGsR9qUmdO1M/ XnJmkPeh1IIEorEjNyUFjlhOjMcC2Zms892GEe0UhxNbH+JNS25T3gFaelJ0ns/P kV9T9xziyrxGeh4wZ0ztJwxPyumdMbxHB2PyxA7rPjhU9VYdwOUxZ7QXuExTEKnc oCZsy5wDubtWgEl8S1FudxA9vG4rR+4/2oooOFpWl7068Iqqp26/+RF9MEXHAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3j55vZCtkhfJa myMxiXVz3u0m9jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkRFOTFCMzVEQTlBQzcwOUMzNEMyQkQx QTEzQTY4OEU5QTE2OUFFODg4QjkyQjRFNEJCQjg2RjI1Qjc3QzQ1OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82REU5MUIzNURBOUFDNzA5QzM0QzJCRDFBMTNBNjg4RTlBMTY5QUU4ODhC OTJCNEU0QkJCODZGMjVCNzdDNDU4LzAvRjc4RjlFNkY2NDJCNjQ4NUYyNUE5QjIz MzE4OTc1NzNERUVEMjZGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqM0AAwQCqvd4 MA0EAgACMAcDBQAoA21AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQm8jANBgkq hkiG9w0BAQsFAAOCAQEALJHe2w9DDcYdLUehEkDmS2UKkjZesV6TH6cJdVEBB5le PNYuYzmYkKuJJm2ZVUhon93F+1jmNM+6a4RDwpAtpHkOKCjsIh6ZJdNqZEs7eoqj ONWEixrcEabOsCjNY7WILXK9GvsLSebmgj6oRDnlLCTUdt02H5vB4ZNq/9+lty7u dgYcxIQqLBbFQa2sw1R1HMaS/3+lAb+SLYCQyYhRu5/J5MOkYN1PUuOQXVkhvwFo mKEKIIMnW9DdEp1IlK1cDTvguX85/FQMm/SxRFVlDQdXpOudnvXPpd7Xgc3yYFuF 3aYFKFcAUXBZr7/6lFuIfAzYHWLaqH/IWW8PMxzVFQ== -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:11 2024 by rpki-client on console-ams.rpki-client.org