$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer File: FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer (raw, json) Hash identifier: /Y9BvYN8rx8dhFJyKO1f8MFFidgvwoUUWj//0uNbTLA= Subject key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2024F953FCBCC08C2BA59182177E619D5A24FC90 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:07:10 +0000 Certificate not after: Tue 04 Mar 2025 18:12:10 +0000 Subordinate resources: AS: 272025 IP: 181.224.64.0/22 IP: 2803:a510::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:24:f9:53:fc:bc:c0:8c:2b:a5:91:82:17:7e:61:9d:5a:24:fc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:07:10 2024 GMT Not After : Mar 4 18:12:10 2025 GMT Subject: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:43:89:d0:9c:f6:36:2f:99:fc:3b:db:6e: 81:ac:48:dd:2b:b2:7c:00:b9:f7:af:03:54:d2:45: 1a:0c:55:22:5a:df:d2:f0:ae:52:45:04:ef:df:3f: a0:a6:bb:3b:06:93:97:5f:8e:4f:76:55:bc:1e:96: 6e:7a:2e:2f:1f:b5:9e:73:3c:ea:f5:6f:8d:dd:ab: 8b:13:24:0d:33:26:70:1d:16:cb:3b:e1:7a:34:06: 77:df:6a:fe:03:80:d4:5f:95:b9:09:39:1b:fb:ea: 1c:4b:d9:64:d3:08:27:ae:99:6b:b7:45:8a:84:a8: 40:55:95:bd:29:ca:0d:b3:04:6f:7b:5a:fc:b6:83: ab:2a:18:9c:93:04:d8:30:52:19:59:cc:b7:3a:28: 07:53:10:69:70:ab:c6:72:b3:05:4e:06:53:12:9e: 80:52:f7:4d:66:5e:88:7d:dc:1a:b9:7e:5b:c5:e8: e2:68:db:22:d6:36:4f:af:c1:6a:45:61:6e:d3:5a: 98:9c:f0:60:02:fc:e3:81:55:4c:ba:9c:df:b9:25: 75:88:b2:52:c2:59:f0:83:45:39:c2:7b:c7:20:f7: cf:b9:62:ed:b1:54:30:9c:a9:50:f3:90:07:0d:77: 1e:2e:2e:2b:eb:56:f4:35:b2:d6:03:82:a4:02:9b: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.224.64.0/22 IPv6: 2803:a510::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272025 Signature Algorithm: sha256WithRSAEncryption 3f:5e:96:73:9a:5f:70:f5:2b:56:4c:9a:ef:a9:0b:4f:d2:80: 50:9e:17:55:e5:25:55:85:fa:a1:d7:27:b2:21:81:cd:8a:cd: 7e:a8:ab:8b:d9:b9:a0:06:b4:17:40:69:a7:b3:b1:65:8f:ac: 5c:f0:fc:ec:02:6f:4a:e4:00:04:5a:69:d6:f1:12:a7:7c:61: 72:b2:ac:ce:d0:95:59:01:a1:b2:0e:43:0f:2f:56:e5:f4:db: 2a:f1:4e:4e:ed:e9:8c:b7:1b:89:89:ef:97:23:9a:16:03:ad: c2:b9:f4:30:f7:bf:f2:85:14:45:0f:28:1c:c4:8f:19:10:ac: 83:a8:70:d9:b7:87:1f:08:f0:80:5b:74:c8:b3:d5:0a:1f:a7: 13:51:e2:3b:19:6e:bb:ad:b0:45:49:69:33:df:cb:90:17:92: 68:de:84:b2:b3:c8:72:50:78:84:54:da:4d:1a:ae:59:6f:2a: 72:38:53:70:91:62:e6:2c:ca:f0:9d:76:a0:ce:93:13:6e:4d: a8:a0:63:06:55:39:72:21:c8:a5:c8:00:27:7d:2a:25:95:46: 3d:04:18:b3:23:7c:be:4f:e1:2c:59:8a:87:0e:6b:07:9d:3f: 05:f5:69:e0:91:d1:76:02:30:29:28:cc:d3:a3:e7:58:e5:fd: 36:83:88:8e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUICT5U/y8wIwrpZGCF35hnVok/JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA3MTBaFw0yNTAzMDQxODEyMTBaMDMxMTAvBgNV BAMTKEZDNjFFN0I4NTZBMjg1OEIzMzFDRTRFQzQ4QTI3RDgxNjJGQTVFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCme0OJ0Jz2Ni+Z/DvbboGsSN0r snwAufevA1TSRRoMVSJa39LwrlJFBO/fP6CmuzsGk5dfjk92Vbwelm56Li8ftZ5z POr1b43dq4sTJA0zJnAdFss74Xo0Bnffav4DgNRflbkJORv76hxL2WTTCCeumWu3 RYqEqEBVlb0pyg2zBG97Wvy2g6sqGJyTBNgwUhlZzLc6KAdTEGlwq8ZyswVOBlMS noBS901mXoh93Bq5flvF6OJo2yLWNk+vwWpFYW7TWpic8GAC/OOBVUy6nN+5JXWI slLCWfCDRTnCe8cg98+5Yu2xVDCcqVDzkAcNdx4uLivrVvQ1stYDgqQCm6IhAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8Yee4VqKFizMc 5OxIon2BYvpeVzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0NEREY3Rjk5QzI2NjE5NUZGMzlDOTU1 QkM3RTBGNjFDQ0RDRkIxQzk2MEVDMjk1QkFGMDI1MkZDQzY1QTdDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQ0RERjdGOTlDMjY2MTk1RkYzOUM5NTVCQzdFMEY2MUNDRENGQjFDOTYw RUMyOTVCQUYwMjUyRkNDNjVBN0NDLzAvRkM2MUU3Qjg1NkEyODU4QjMzMUNFNEVD NDhBMjdEODE2MkZBNUU1Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCteBAMA0EAgAC MAcDBQAoA6UQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmmTANBgkqhkiG9w0B AQsFAAOCAQEAP16Wc5pfcPUrVkya76kLT9KAUJ4XVeUlVYX6odcnsiGBzYrNfqir i9m5oAa0F0Bpp7OxZY+sXPD87AJvSuQABFpp1vESp3xhcrKsztCVWQGhsg5DDy9W 5fTbKvFOTu3pjLcbiYnvlyOaFgOtwrn0MPe/8oUURQ8oHMSPGRCsg6hw2beHHwjw gFt0yLPVCh+nE1HiOxluu62wRUlpM9/LkBeSaN6EsrPIclB4hFTaTRquWW8qcjhT cJFi5izK8J12oM6TE25NqKBjBlU5ciHIpcgAJ30qJZVGPQQYsyN8vk/hLFmKhw5r B50/BfVp4JHRdgIwKSjM06PnWOX9NoOIjg== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:59 2024 by rpki-client on console-fra.rpki-client.org