$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer File: FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer (raw, json) Hash identifier: SJdqJzqpActIR+jE6ciwi2VY6B+HEXFM3w1Cl8hdu/A= Subject key identifier: FE:87:BC:8E:89:91:9E:93:61:84:D5:BA:C6:4A:F9:CF:B4:37:D9:B6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3127B9BC98A194DEAC8C84CDF50125A0DEE31DDC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:39:48 +0000 Certificate not after: Tue 04 Mar 2025 17:44:48 +0000 Subordinate resources: AS: 270122 IP: 138.122.184.0/22 IP: 2806:3c4::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:27:b9:bc:98:a1:94:de:ac:8c:84:cd:f5:01:25:a0:de:e3:1d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:39:48 2024 GMT Not After : Mar 4 17:44:48 2025 GMT Subject: CN=FE87BC8E89919E936184D5BAC64AF9CFB437D9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5a:13:95:73:80:c1:a5:5c:b5:36:08:57:37: 52:a1:df:71:18:7e:a9:8e:cb:f2:4e:b5:1c:93:35: b1:c2:43:e8:79:a7:2c:09:7a:7e:23:e2:50:70:68: 75:f0:56:b8:17:4b:6d:68:c4:69:5a:ad:de:d2:06: fd:d7:c2:a7:01:07:b8:ff:dd:ec:b9:f2:e2:d7:7b: 70:2d:49:a1:74:e4:1b:41:20:c2:fc:18:c9:4e:75: 69:ed:4b:06:17:61:bd:96:c5:39:d2:4a:e8:e9:07: d8:7e:c1:23:2a:89:61:76:3f:b3:d3:78:0c:c1:23: cf:4d:b9:e0:ff:15:c3:ea:f6:a8:a2:78:af:f8:94: ce:e8:6f:1d:3d:eb:47:c2:b1:85:c7:7a:77:b8:77: 22:f9:a7:0c:68:72:24:07:84:da:64:b3:05:2e:65: 0e:cf:51:55:fd:8c:8d:96:a4:44:36:35:79:c7:c1: 96:f2:0b:f0:38:27:ee:fd:83:5b:d4:9a:5d:27:ac: 25:e6:2e:15:35:ec:65:e4:00:61:a3:a3:d7:59:b9: c5:07:92:60:42:16:6a:30:a7:2c:9f:0d:a4:e2:65: d0:43:e3:b1:0c:69:c7:5f:0a:b2:9d:ec:ce:d1:68: 7d:26:76:ba:59:d4:a7:90:fe:c2:3b:01:66:b7:07: 4b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:87:BC:8E:89:91:9E:93:61:84:D5:BA:C6:4A:F9:CF:B4:37:D9:B6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.184.0/22 IPv6: 2806:3c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270122 Signature Algorithm: sha256WithRSAEncryption 28:5f:82:1d:2a:c3:91:43:ab:f0:b5:a4:e8:21:b9:e9:32:4c: 49:77:d8:20:dd:d2:ce:bb:30:c1:82:f8:c3:20:ca:bb:6f:4d: f4:9d:b4:2c:1f:d2:f5:5a:54:1e:d5:d9:c5:2c:6e:b3:ea:df: 99:d0:07:cc:f0:8a:74:15:b7:c1:1f:10:65:17:ac:fc:3e:5d: 2f:cd:f4:d6:cb:33:8f:2a:40:4b:cf:d8:02:29:ba:53:aa:91: e7:5c:1b:4a:8c:14:61:1e:fd:26:47:ac:2e:cd:b3:c3:09:d9: 27:7d:05:e6:50:44:29:8b:d0:f3:0e:e1:80:7a:c6:51:a9:76: e5:4e:ac:1e:26:37:02:a1:31:a6:86:35:21:b9:c6:69:b9:0c: 55:4d:f7:a9:d8:c6:d8:87:1e:11:2f:66:28:84:8b:81:d3:7f: 61:dc:b1:dc:3c:f5:47:e3:34:5e:34:a9:9e:04:ca:db:77:f1: b3:fd:3a:80:7c:b8:a0:6d:19:75:91:b7:7f:26:e3:f5:ae:09: da:95:2f:6f:e6:7d:bc:39:aa:f8:1e:63:a3:84:8c:15:9a:d6: cf:da:14:d8:62:0a:d5:a4:4f:6a:0c:c6:8e:80:80:1e:52:0c: e8:4b:e7:9a:8a:08:c5:54:4a:87:1b:6c:9b:6e:af:f5:a3:dc: fe:c2:5b:cb -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUMSe5vJihlN6sjITN9QEloN7jHdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM5NDhaFw0yNTAzMDQxNzQ0NDhaMDMxMTAvBgNV BAMTKEZFODdCQzhFODk5MTlFOTM2MTg0RDVCQUM2NEFGOUNGQjQzN0Q5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWhOVc4DBpVy1NghXN1Kh33EY fqmOy/JOtRyTNbHCQ+h5pywJen4j4lBwaHXwVrgXS21oxGlard7SBv3XwqcBB7j/ 3ey58uLXe3AtSaF05BtBIML8GMlOdWntSwYXYb2WxTnSSujpB9h+wSMqiWF2P7PT eAzBI89NueD/FcPq9qiieK/4lM7obx0960fCsYXHene4dyL5pwxociQHhNpkswUu ZQ7PUVX9jI2WpEQ2NXnHwZbyC/A4J+79g1vUml0nrCXmLhU17GXkAGGjo9dZucUH kmBCFmowpyyfDaTiZdBD47EMacdfCrKd7M7RaH0mdrpZ1KeQ/sI7AWa3B0vbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+h7yOiZGek2GE 1brGSvnPtDfZtjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTBBQzhDRDExNDUwNDI5RTc0MDEwOUZB OTcxODY4MkNFQTE0Q0IyQUIwN0Q2RUI5NkQxMDlEMEUyQjk1OTBCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMEFDOENEMTE0NTA0MjlFNzQwMTA5RkE5NzE4NjgyQ0VBMTRDQjJBQjA3 RDZFQjk2RDEwOUQwRTJCOTU5MEI5LzAvRkU4N0JDOEU4OTkxOUU5MzYxODRENUJB QzY0QUY5Q0ZCNDM3RDlCNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCinq4MA0EAgAC MAcDBQAoBgPEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfKjANBgkqhkiG9w0B AQsFAAOCAQEAKF+CHSrDkUOr8LWk6CG56TJMSXfYIN3SzrswwYL4wyDKu29N9J20 LB/S9VpUHtXZxSxus+rfmdAHzPCKdBW3wR8QZRes/D5dL8301sszjypAS8/YAim6 U6qR51wbSowUYR79JkesLs2zwwnZJ30F5lBEKYvQ8w7hgHrGUal25U6sHiY3AqEx poY1IbnGabkMVU33qdjG2IceES9mKISLgdN/Ydyx3Dz1R+M0XjSpngTK23fxs/06 gHy4oG0ZdZG3fybj9a4J2pUvb+Z9vDmq+B5jo4SMFZrWz9oU2GIK1aRPagzGjoCA HlIM6EvnmooIxVRKhxtsm26v9aPc/sJbyw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:00:16 2024 by rpki-client on console-ams.rpki-client.org