$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.cer File: FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.cer (raw, json) Hash identifier: xnUxDYDTCWKed1RvB8kTrnrA8+VYyf4xfpg/BXJc/E0= Subject key identifier: FF:96:63:FE:43:D3:3F:28:F6:E1:EF:71:7F:EA:AD:D2:1E:1D:5E:15 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5B9C0FC9165CF7DB8F865BEF2EEB213271B598D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:40:13 +0000 Certificate not after: Tue 04 Mar 2025 17:45:13 +0000 Subordinate resources: AS: 270049 IP: 131.161.220.0/22 IP: 2803:ade0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9c:0f:c9:16:5c:f7:db:8f:86:5b:ef:2e:eb:21:32:71:b5:98:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:40:13 2024 GMT Not After : Mar 4 17:45:13 2025 GMT Subject: CN=FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:05:ce:0e:b1:b1:b3:24:ef:c9:58:6d:f5: 47:08:54:10:ed:95:15:17:a4:7f:4e:0d:13:27:71: 66:b9:17:53:be:79:93:8b:05:cc:db:c0:95:1a:80: f3:5f:25:74:bb:91:e0:6a:aa:9f:43:2c:9f:78:bd: c2:91:9b:df:c7:97:a9:32:9a:72:4b:86:bd:24:5e: 72:99:91:32:68:0c:fd:78:20:20:c5:d2:64:51:d9: 59:03:1f:11:3a:9c:e4:bd:99:83:ba:5d:f4:b4:95: 9d:2d:a1:6d:04:4b:b0:bf:a3:3c:55:a2:f3:a4:f8: 93:4c:70:da:c5:b9:66:e4:0b:9b:c2:ad:56:62:eb: f7:bb:ee:d3:a7:b8:0f:5f:25:0e:53:cb:a0:e1:4d: c1:98:11:f1:9b:6d:eb:78:22:f4:2a:49:cb:fb:d7: 03:0e:fb:bf:9c:01:d4:9d:8f:44:d3:56:76:8f:5b: db:c5:a8:0e:1a:52:54:52:6a:89:53:f6:87:00:f5: fa:57:0c:7c:82:22:04:33:35:96:05:94:0c:3b:34: 11:90:88:54:49:90:51:ae:7c:92:a2:5d:0a:57:a0: c7:0b:b4:f2:0e:06:3a:23:d9:a8:a6:f7:f3:9f:ce: c6:e3:aa:fd:85:cd:1a:1a:bd:14:70:f5:12:3b:3f: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:96:63:FE:43:D3:3F:28:F6:E1:EF:71:7F:EA:AD:D2:1E:1D:5E:15 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.220.0/22 IPv6: 2803:ade0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270049 Signature Algorithm: sha256WithRSAEncryption 9c:a6:e2:df:17:75:42:23:50:95:9f:10:18:ae:23:da:3f:46: e8:3f:a4:0c:00:14:bb:32:2b:91:35:ee:ca:d0:29:1e:df:c6: 48:1c:aa:b5:d3:1b:cb:57:8f:1a:3b:74:2a:3d:ff:14:19:96: 0c:94:47:02:3b:3f:cf:00:82:d2:0f:db:65:0f:f2:5f:ad:58: 0d:00:47:85:1f:9a:f9:3d:78:80:ac:9a:4a:fa:c7:68:bc:12: 28:14:28:86:ae:70:a6:92:46:61:f0:2c:ab:ac:81:87:d4:dd: 8c:f8:c2:92:bd:c6:4c:1e:c8:98:ef:86:d8:a5:b6:0c:ee:94: 90:7c:13:e2:7e:10:72:0f:5d:65:a1:3f:99:38:e5:c5:c1:7d: 2f:c9:2a:3b:9a:5b:3a:97:64:74:2f:88:60:63:c7:47:e0:94: 52:e5:c7:e7:68:dc:ad:b6:2a:fe:11:32:46:2a:18:c7:a9:3d: 2b:2d:70:39:dd:85:52:b7:44:41:89:27:05:35:ee:a1:87:a8: 16:0f:85:90:db:80:a8:e1:ab:d6:61:df:d8:73:8c:38:6a:c8: b8:ad:c6:90:73:72:2a:f6:b5:86:30:b5:9b:5b:cf:14:e2:1a: 66:9f:19:8f:a4:9f:96:92:1a:c1:1d:4a:fb:73:7b:e4:05:e0: 30:c6:86:00 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUW5wPyRZc99uPhlvvLushMnG1mNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQwMTNaFw0yNTAzMDQxNzQ1MTNaMDMxMTAvBgNV BAMTKEZGOTY2M0ZFNDNEMzNGMjhGNkUxRUY3MTdGRUFBREQyMUUxRDVFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV0gXODrGxsyTvyVht9UcIVBDt lRUXpH9ODRMncWa5F1O+eZOLBczbwJUagPNfJXS7keBqqp9DLJ94vcKRm9/Hl6ky mnJLhr0kXnKZkTJoDP14ICDF0mRR2VkDHxE6nOS9mYO6XfS0lZ0toW0ES7C/ozxV ovOk+JNMcNrFuWbkC5vCrVZi6/e77tOnuA9fJQ5Ty6DhTcGYEfGbbet4IvQqScv7 1wMO+7+cAdSdj0TTVnaPW9vFqA4aUlRSaolT9ocA9fpXDHyCIgQzNZYFlAw7NBGQ iFRJkFGufJKiXQpXoMcLtPIOBjoj2aim9/Ofzsbjqv2FzRoavRRw9RI7P8fLAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/lmP+Q9M/KPbh 73F/6q3SHh1eFTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDg3N0UzMEQxRkZGMTAxMEVDNEE0MEJE MUREMzk2QzcwQjc0QkYzMkZCMkM5RDMwMzk3NjUyNjA2RkI2OTlGNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EODc3RTMwRDFGRkYxMDEwRUM0QTQwQkQxREQzOTZDNzBCNzRCRjMyRkIy QzlEMzAzOTc2NTI2MDZGQjY5OUY3LzAvRkY5NjYzRkU0M0QzM0YyOEY2RTFFRjcx N0ZFQUFERDIxRTFENUUxNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg6HcMA0EAgAC MAcDBQAoA63gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQe4TANBgkqhkiG9w0B AQsFAAOCAQEAnKbi3xd1QiNQlZ8QGK4j2j9G6D+kDAAUuzIrkTXuytApHt/GSByq tdMby1ePGjt0Kj3/FBmWDJRHAjs/zwCC0g/bZQ/yX61YDQBHhR+a+T14gKyaSvrH aLwSKBQohq5wppJGYfAsq6yBh9TdjPjCkr3GTB7ImO+G2KW2DO6UkHwT4n4Qcg9d ZaE/mTjlxcF9L8kqO5pbOpdkdC+IYGPHR+CUUuXH52jcrbYq/hEyRioYx6k9Ky1w Od2FUrdEQYknBTXuoYeoFg+FkNuAqOGr1mHf2HOMOGrIuK3GkHNyKva1hjC1m1vP FOIaZp8Zj6SflpIawR1K+3N75AXgMMaGAA== -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:47 2024 by rpki-client on console-ams.rpki-client.org