$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer File: FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer (raw, json) Hash identifier: rGGB1J0x0PZfwJumQabHI+ky1osXUvk6m9XGlknj/S4= Subject key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 072025F704FC55E3D5D041DCB4D6AF1AE7BC7BD0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:09:07 +0000 Certificate not after: Tue 04 Mar 2025 18:14:07 +0000 Subordinate resources: AS: 270074 IP: 200.1.112.0/24 IP: 2801:1b:2800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:20:25:f7:04:fc:55:e3:d5:d0:41:dc:b4:d6:af:1a:e7:bc:7b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:09:07 2024 GMT Not After : Mar 4 18:14:07 2025 GMT Subject: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:10:1f:13:71:b4:b2:af:71:9e:28:7e:27: a0:99:9a:8c:4b:00:60:39:ab:25:9f:2a:ae:d8:05: fc:3d:27:70:a7:38:71:15:b3:dd:af:9a:9f:e4:88: 51:b2:a1:fe:df:ac:d5:29:81:85:9a:6a:83:2b:f7: e7:be:5b:bf:71:a1:ea:d6:58:74:37:ce:d6:a2:91: be:bc:c7:3c:2c:8e:f6:f3:c9:9f:c5:90:bd:36:18: 73:b0:13:dc:66:6e:c2:cc:63:77:a5:bd:ad:36:9b: a3:d2:11:a3:83:14:5f:09:b9:ab:ca:3f:2d:68:53: bc:23:3a:3e:39:59:96:41:7b:62:54:bb:bf:5c:c4: 1f:88:48:8f:77:8c:93:70:28:4c:8e:56:d5:ea:da: 97:d1:0a:e2:ec:73:18:fe:7f:64:7c:9e:85:fa:12: 56:75:16:11:c4:c2:fb:2e:85:3c:c6:4e:4b:7a:55: 28:b9:46:9d:10:4b:14:ed:b7:c2:e3:da:78:49:c2: 5f:0a:c7:c8:43:92:5d:37:59:b7:f1:d2:de:3c:ae: 7b:a5:dc:15:84:90:ea:9f:5b:c2:f1:e8:c2:70:e4: a2:0b:8f:29:f3:74:e9:93:97:08:1f:d1:58:b8:ef: ce:b5:65:bb:1d:10:42:be:72:16:69:d2:4c:52:d7: 2a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.1.112.0/24 IPv6: 2801:1b:2800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270074 Signature Algorithm: sha256WithRSAEncryption 5e:33:b6:06:14:95:95:08:64:20:c5:8c:7b:5d:3a:cd:20:b1: 4b:ae:4b:28:21:d0:9a:fa:54:2d:0d:24:51:6a:e3:68:9b:46: 20:21:df:66:4a:62:1c:52:28:b9:c5:29:0d:dd:1e:3b:f1:50: 70:70:50:fa:93:c9:a7:bc:04:7c:b9:54:65:92:2c:cd:cc:9e: 30:94:1c:b1:17:13:ce:d1:7a:de:b8:95:08:3a:c6:b9:df:33: 25:8c:ca:a3:f9:9d:d7:33:5a:23:2a:ac:a8:dc:6a:9a:71:13: b5:0b:46:5b:20:33:fb:33:89:a7:86:bf:c3:13:f3:f3:c4:aa: 8c:bb:dd:80:f3:b6:31:46:fc:c5:66:f2:87:62:2f:cd:13:a1: 1c:d0:5d:7a:14:44:b3:96:c4:92:e7:4b:6a:29:a3:36:63:88: f8:36:92:97:33:49:ae:83:23:16:9f:71:3e:d1:43:ea:9c:92: 9e:b2:59:75:22:8c:d0:1d:1f:4a:fc:31:ed:2b:5f:0d:55:97: ce:a5:0d:ac:50:b8:a5:93:e3:43:83:e9:78:c9:58:48:94:2c: eb:c9:e1:2a:5e:b9:0c:27:01:1c:df:d5:0f:7b:17:76:95:39: 96:70:02:aa:a3:ff:6a:9c:99:94:22:45:74:2e:54:fc:4b:2f: 13:e2:71:2d -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUByAl9wT8VePV0EHctNavGue8e9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA5MDdaFw0yNTAzMDQxODE0MDdaMDMxMTAvBgNV BAMTKEZDOUREMEU4N0VGMkYyNkVFMzE3NzY5NkEyNTc4OUQwQTY4NTk5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ohAfE3G0sq9xnih+J6CZmoxL AGA5qyWfKq7YBfw9J3CnOHEVs92vmp/kiFGyof7frNUpgYWaaoMr9+e+W79xoerW WHQ3ztaikb68xzwsjvbzyZ/FkL02GHOwE9xmbsLMY3elva02m6PSEaODFF8JuavK Py1oU7wjOj45WZZBe2JUu79cxB+ISI93jJNwKEyOVtXq2pfRCuLscxj+f2R8noX6 ElZ1FhHEwvsuhTzGTkt6VSi5Rp0QSxTtt8Lj2nhJwl8Kx8hDkl03Wbfx0t48rnul 3BWEkOqfW8Lx6MJw5KILjynzdOmTlwgf0Vi47861ZbsdEEK+chZp0kxS1yo1AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8ndDofvLybuMX dpaiV4nQpoWZ7zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTFDRkI5Q0MwNUE2NTA2ODNFMjU0NzA0 M0U3MTk2NUU4NUMzNTgyRkRCRTYwNTFCMjgzRUE3RjM1NkY2OEY5Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMUNGQjlDQzA1QTY1MDY4M0UyNTQ3MDQzRTcxOTY1RTg1QzM1ODJGREJF NjA1MUIyODNFQTdGMzU2RjY4RjkyLzAvRkM5REQwRTg3RUYyRjI2RUUzMTc3Njk2 QTI1Nzg5RDBBNjg1OTlFRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyAFwMA8EAgAC MAkDBwAoAQAbKAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB76MA0GCSqGSIb3 DQEBCwUAA4IBAQBeM7YGFJWVCGQgxYx7XTrNILFLrksoIdCa+lQtDSRRauNom0Yg Id9mSmIcUii5xSkN3R478VBwcFD6k8mnvAR8uVRlkizNzJ4wlByxFxPO0XreuJUI Osa53zMljMqj+Z3XM1ojKqyo3GqacRO1C0ZbIDP7M4mnhr/DE/PzxKqMu92A87Yx RvzFZvKHYi/NE6Ec0F16FESzlsSS50tqKaM2Y4j4NpKXM0mugyMWn3E+0UPqnJKe sll1IozQHR9K/DHtK18NVZfOpQ2sULilk+NDg+l4yVhIlCzryeEqXrkMJwEc39UP exd2lTmWcAKqo/9qnJmUIkV0LlT8Sy8T4nEt -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:47 2024 by rpki-client on console-ams.rpki-client.org