$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.cer File: F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.cer (raw, json) Hash identifier: KwG+eDwwYhSSL9/LnBvMyraAlBGFcwb+Thm8wiLClgE= Subject key identifier: F7:F1:9F:4D:67:57:FD:02:7B:2B:99:C5:1C:B9:BA:27:D3:2F:14:F0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0A5D0FF78B7E1EAF8E08220EE0119035A7172881 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:00:38 +0000 Certificate not after: Tue 04 Mar 2025 18:05:38 +0000 Subordinate resources: AS: 263714 IP: 201.131.73.0/24 IP: 2801:13:6000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5d:0f:f7:8b:7e:1e:af:8e:08:22:0e:e0:11:90:35:a7:17:28:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:00:38 2024 GMT Not After : Mar 4 18:05:38 2025 GMT Subject: CN=F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:1a:51:99:20:e8:8c:46:01:15:17:96:6c: 31:b8:57:4b:b1:91:a7:1a:99:34:e7:02:b8:5b:22: ee:88:44:ca:2d:32:33:4b:da:a7:ec:17:08:19:ea: 2d:84:9e:67:f9:5b:ca:94:f0:17:0e:3e:90:2a:22: 30:83:c0:1f:a3:93:8c:af:57:f8:bb:27:d0:7c:db: 28:4b:f9:62:43:13:92:d5:5b:df:04:53:40:15:43: 71:1b:fd:80:8f:0e:04:9c:13:8f:20:ce:c1:68:cf: a3:cb:f5:c1:cb:fb:7b:25:89:10:41:74:de:72:12: 91:33:9d:68:23:7c:45:40:5b:9e:8c:99:b0:5c:a2: b3:5e:44:a1:54:42:f0:13:03:a9:c1:69:ae:58:bd: bc:dc:f9:1b:d7:e2:5b:c2:d4:84:cb:d9:75:56:e8: e1:c6:43:9f:60:46:77:b7:43:97:a7:23:ee:ad:6d: ca:6f:93:a4:23:83:ca:10:25:a5:4d:55:91:f7:5c: c3:75:5e:82:25:6a:29:43:50:39:91:ad:d5:c8:ee: 29:a8:2e:66:f7:bb:61:f0:7b:fb:25:50:ba:2d:06: a2:a3:bd:30:b5:7b:4b:60:44:55:2e:c2:2f:3d:15: de:42:8e:60:57:7a:6e:87:57:a9:2d:f1:c5:0f:58: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:F1:9F:4D:67:57:FD:02:7B:2B:99:C5:1C:B9:BA:27:D3:2F:14:F0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.131.73.0/24 IPv6: 2801:13:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263714 Signature Algorithm: sha256WithRSAEncryption 72:64:a3:30:64:00:a6:6c:29:9c:95:f9:40:8b:47:89:37:29: 00:99:77:d8:cb:26:d1:fa:72:75:67:6c:dd:05:2a:3b:af:a3: 2c:99:9d:b4:8b:e3:e5:b3:2e:57:4c:d3:0d:f4:80:28:1b:35: b4:75:37:54:03:13:f2:ce:6c:0e:75:33:4e:ae:14:68:4a:46: 9f:09:33:bf:41:5c:65:e5:02:1a:f2:6b:80:42:5c:3d:3a:d2: b1:4f:6f:3d:61:6c:17:76:75:35:27:4d:50:5f:fc:af:97:00: cc:e2:0b:fe:c6:74:12:3d:4e:cc:b6:9a:5f:e7:7c:03:bb:38: 20:db:83:45:35:18:41:06:4a:b6:c9:3d:a9:e9:a8:84:74:7a: 89:aa:74:44:17:93:c4:32:e2:22:0b:13:c3:8e:e2:f9:56:c6: 1f:91:d3:1b:91:29:c2:33:00:12:8b:69:60:7c:2e:db:cf:4d: 17:c4:4d:4c:7b:a9:2d:40:47:b3:88:7f:7d:1e:16:f3:ee:74: 98:2a:22:55:a8:fe:3a:e1:cb:e2:11:f6:05:a2:f3:cd:72:ee: a6:ba:5f:1c:b0:3b:5d:0b:d6:f4:ce:38:35:a7:24:3e:35:1f: 4b:63:66:1b:8c:dd:6e:71:0c:68:bd:19:29:fe:74:4a:80:90: 63:1f:e6:29 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUCl0P94t+Hq+OCCIO4BGQNacXKIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODAwMzhaFw0yNTAzMDQxODA1MzhaMDMxMTAvBgNV BAMTKEY3RjE5RjRENjc1N0ZEMDI3QjJCOTlDNTFDQjlCQTI3RDMyRjE0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nRpRmSDojEYBFReWbDG4V0ux kacamTTnArhbIu6IRMotMjNL2qfsFwgZ6i2Enmf5W8qU8BcOPpAqIjCDwB+jk4yv V/i7J9B82yhL+WJDE5LVW98EU0AVQ3Eb/YCPDgScE48gzsFoz6PL9cHL+3sliRBB dN5yEpEznWgjfEVAW56MmbBcorNeRKFUQvATA6nBaa5Yvbzc+RvX4lvC1ITL2XVW 6OHGQ59gRne3Q5enI+6tbcpvk6Qjg8oQJaVNVZH3XMN1XoIlailDUDmRrdXI7imo Lmb3u2Hwe/slULotBqKjvTC1e0tgRFUuwi89Fd5CjmBXem6HV6kt8cUPWDBfAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT38Z9NZ1f9Ansr mcUcubon0y8U8DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzFBQjYwMDJGQTIyNUU5OEJGNDcwOEEz MjhCQTAxNDQ5QjBBRDNFQUIyRjY1QzI0OUZGQjkwNDhERjk2NkY2NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMUFCNjAwMkZBMjI1RTk4QkY0NzA4QTMyOEJBMDE0NDlCMEFEM0VBQjJG NjVDMjQ5RkZCOTA0OERGOTY2RjY0LzAvRjdGMTlGNEQ2NzU3RkQwMjdCMkI5OUM1 MUNCOUJBMjdEMzJGMTRGMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyYNJMA8EAgAC MAkDBwAoAQATYAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAYiMA0GCSqGSIb3 DQEBCwUAA4IBAQByZKMwZACmbCmclflAi0eJNykAmXfYyybR+nJ1Z2zdBSo7r6Ms mZ20i+Plsy5XTNMN9IAoGzW0dTdUAxPyzmwOdTNOrhRoSkafCTO/QVxl5QIa8muA Qlw9OtKxT289YWwXdnU1J01QX/yvlwDM4gv+xnQSPU7Mtppf53wDuzgg24NFNRhB Bkq2yT2p6aiEdHqJqnREF5PEMuIiCxPDjuL5VsYfkdMbkSnCMwASi2lgfC7bz00X xE1Me6ktQEeziH99Hhbz7nSYKiJVqP464cviEfYFovPNcu6mul8csDtdC9b0zjg1 pyQ+NR9LY2YbjN1ucQxovRkp/nRKgJBjH+Yp -----END CERTIFICATE-----Generated at Thu Sep 5 15:36:53 2024 by rpki-client on console-fra.rpki-client.org