$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer File: F821DED2CE38BADE79C41BB152602F035BB78B6C.cer (raw, json) Hash identifier: +z8p+f0se0R+hRgTvlG3cEWeXh08IiDjb1exwNSvGX0= Subject key identifier: F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 057A2F505770BC7B2EA160E175B934C3F75B508D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 25 Apr 2024 12:55:34 +0000 Certificate not after: Thu 24 Apr 2025 13:00:34 +0000 Subordinate resources: IP: 179.60.184.0/21 IP: 190.105.144.0/21 IP: 2803:1080::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7a:2f:50:57:70:bc:7b:2e:a1:60:e1:75:b9:34:c3:f7:5b:50:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 25 12:55:34 2024 GMT Not After : Apr 24 13:00:34 2025 GMT Subject: CN=F821DED2CE38BADE79C41BB152602F035BB78B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:78:eb:02:a4:7d:7a:1a:b2:dc:90:05:82: d1:97:3e:fd:87:41:1d:bf:3c:39:99:f7:9f:ac:28: 0b:87:de:5d:34:75:5f:05:36:d4:52:89:9c:fb:3e: 26:b6:2a:34:f7:2b:fd:a8:f8:c1:b4:0b:d5:cd:86: 00:06:20:0c:51:ab:85:75:8d:90:da:af:11:e5:5e: b0:72:7e:fa:2f:b3:90:39:e8:d3:85:0d:5e:5f:4e: a2:2a:59:03:48:7e:04:e4:e7:41:c7:d7:89:68:ff: 4a:36:ef:83:c9:dc:41:38:e3:3c:8e:2a:76:c7:51: 77:89:de:ec:c1:94:ed:04:b2:a2:0f:4e:90:9a:27: e4:63:1a:e0:00:0c:3c:6d:00:9d:e4:fc:d0:82:26: 2a:e1:0f:fa:28:f4:ba:4a:b6:b7:c7:48:c1:61:43: 5b:8f:1f:6e:78:f6:ba:be:1e:3c:25:7c:a6:b9:e8: d4:e4:5d:4f:b3:3a:9c:f9:0f:19:27:cc:1d:29:90: 79:42:6e:da:2c:0e:f2:9d:be:30:00:d5:65:73:3d: e5:69:08:d4:af:5a:5a:c1:08:87:d8:c7:b3:45:d0: 76:14:23:2d:14:fd:c7:8c:04:be:b1:63:64:2b:6c: b8:f9:d0:b4:98:9e:de:f1:9e:91:c0:65:51:79:02: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.60.184.0/21 190.105.144.0/21 IPv6: 2803:1080::/32 Signature Algorithm: sha256WithRSAEncryption d5:26:a8:3e:d8:61:07:7c:c0:ea:d3:e4:23:43:11:c9:8c:a9: 6f:ba:50:8b:5a:c7:f2:3b:79:43:97:49:d5:dd:f4:69:8d:24: 70:18:24:90:b9:ec:8f:8f:bb:a7:17:71:8c:9d:35:75:50:85: 98:2a:fb:7a:5c:a2:62:ff:e6:18:aa:7f:c6:c7:c9:33:dd:9f: b5:6d:1f:63:d4:a9:17:a8:df:4b:4c:1b:f8:f0:95:c8:f8:ec: f5:aa:1c:34:17:f0:6c:b9:26:3a:d1:76:45:44:3b:8b:ce:11: dc:89:51:e3:14:57:a5:04:7a:cd:47:4f:74:74:4e:8f:81:2f: 0d:ee:1e:23:57:3b:e3:8d:ca:a9:1d:3a:06:f3:d2:45:37:db: f4:76:54:65:12:db:96:c7:5d:e5:84:5f:94:8e:cb:bf:0c:46: d1:2a:d1:59:ac:30:a8:03:dd:31:fb:93:3a:f2:d4:0c:dd:0c: 3e:ff:32:a1:8c:73:15:34:a2:d3:15:9e:d9:4f:40:52:21:41: e9:4f:42:a6:80:ae:af:d6:07:7c:56:1d:5f:47:0d:af:a4:50: 91:2e:5b:52:ef:ef:39:a9:66:ea:a4:6d:a5:c5:9c:9b:93:86: fb:68:3c:ab:91:fe:34:5c:b2:ac:64:b0:52:83:bd:04:12:37: ce:3e:26:9c -----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgIUBXovUFdwvHsuoWDhdbk0w/dbUI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA0MjUxMjU1MzRaFw0yNTA0MjQxMzAwMzRaMDMxMTAvBgNV BAMTKEY4MjFERUQyQ0UzOEJBREU3OUM0MUJCMTUyNjAyRjAzNUJCNzhCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV23jrAqR9ehqy3JAFgtGXPv2H QR2/PDmZ95+sKAuH3l00dV8FNtRSiZz7Pia2KjT3K/2o+MG0C9XNhgAGIAxRq4V1 jZDarxHlXrByfvovs5A56NOFDV5fTqIqWQNIfgTk50HH14lo/0o274PJ3EE44zyO KnbHUXeJ3uzBlO0EsqIPTpCaJ+RjGuAADDxtAJ3k/NCCJirhD/oo9LpKtrfHSMFh Q1uPH2549rq+HjwlfKa56NTkXU+zOpz5DxknzB0pkHlCbtosDvKdvjAA1WVzPeVp CNSvWlrBCIfYx7NF0HYUIy0U/ceMBL6xY2QrbLj50LSYnt7xnpHAZVF5AgTXAgMB AAGjggOZMIIDlTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4Id7Szji63nnE G7FSYC8DW7eLbDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEUxNzZDRkI4NTlGRkY4RDA3OTIwRDJB RDRCOUY4RTc3ODhDMzNDQzlEMzMzNjY4NENCNEM2NjY0MzRFNEIyMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80RTE3NkNGQjg1OUZGRjhEMDc5MjBEMkFENEI5RjhFNzc4OEMzM0NDOUQz MzM2Njg0Q0I0QzY2NjQzNEU0QjIyLzAvRjgyMURFRDJDRTM4QkFERTc5QzQxQkIx NTI2MDJGMDM1QkI3OEI2Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDszy4AwQDvmmQ MA0EAgACMAcDBQAoAxCAMA0GCSqGSIb3DQEBCwUAA4IBAQDVJqg+2GEHfMDq0+Qj QxHJjKlvulCLWsfyO3lDl0nV3fRpjSRwGCSQueyPj7unF3GMnTV1UIWYKvt6XKJi /+YYqn/Gx8kz3Z+1bR9j1KkXqN9LTBv48JXI+Oz1qhw0F/BsuSY60XZFRDuLzhHc iVHjFFelBHrNR090dE6PgS8N7h4jVzvjjcqpHToG89JFN9v0dlRlEtuWx13lhF+U jsu/DEbRKtFZrDCoA90x+5M68tQM3Qw+/zKhjHMVNKLTFZ7ZT0BSIUHpT0KmgK6v 1gd8Vh1fRw2vpFCRLltS7+85qWbqpG2lxZybk4b7aDyrkf40XLKsZLBSg70EEjfO Piac -----END CERTIFICATE-----Generated at Thu Sep 5 15:36:54 2024 by rpki-client on console-fra.rpki-client.org