$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.cer File: 013C9FDB572F82FEBA26C5CBCA4321F421C02091.cer (raw, json) Hash identifier: HbhK3K5tQK16DLfT0g6xKux49VOXJ7oWwwtD9HIndBE= Subject key identifier: 01:3C:9F:DB:57:2F:82:FE:BA:26:C5:CB:CA:43:21:F4:21:C0:20:91 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 18519D7908E8DB806B9A2A7C11B811CC179CE7D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 19:06:17 +0000 Certificate not after: Wed 04 Feb 2026 19:11:17 +0000 Subordinate resources: AS: 266871 IP: 45.239.36.0/22 IP: 2803:aaa0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:51:9d:79:08:e8:db:80:6b:9a:2a:7c:11:b8:11:cc:17:9c:e7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 19:06:17 2025 GMT Not After : Feb 4 19:11:17 2026 GMT Subject: CN=013C9FDB572F82FEBA26C5CBCA4321F421C02091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:6f:51:a8:dd:cb:dc:30:53:1c:61:77:b2: 2a:64:d6:98:83:19:9d:2a:82:2e:59:f9:96:cb:83: 2b:73:18:62:de:11:1f:b4:75:53:a3:2f:82:9c:ba: f9:9f:3a:84:f0:b5:11:36:34:bb:95:8d:ed:0f:73: a3:5c:74:94:d8:5f:4e:b6:8a:d9:bb:14:d7:15:e7: 58:87:3e:63:4b:bd:4f:a8:ad:69:81:e7:51:e9:54: 2b:f4:f4:f6:c4:96:c1:a8:d8:fd:35:10:c4:b9:7b: a3:87:7f:87:ae:61:29:c5:46:e9:2c:32:d7:bc:3e: 85:28:88:b8:23:29:07:3c:ee:d9:76:56:1c:34:b1: 60:34:b9:17:a3:4e:59:49:96:9f:74:64:7c:22:37: bb:01:65:da:79:5a:ae:32:f3:d5:82:59:d3:e4:e6: 22:f4:16:f4:0b:15:b0:d3:1f:99:70:db:56:f7:7d: 0e:b9:61:c9:0b:7c:28:ef:75:f2:1b:27:c7:1f:47: 6b:4e:fd:82:76:e6:cc:4e:f3:df:cf:c4:72:33:ae: 1f:a1:c1:44:7e:b2:64:a2:c4:46:99:5a:05:91:93: 25:d5:f7:2e:44:98:7b:72:ad:c6:c8:70:69:2a:c3: 06:00:e4:22:3f:e7:3c:99:49:96:ab:0a:f9:0e:9f: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:3C:9F:DB:57:2F:82:FE:BA:26:C5:CB:CA:43:21:F4:21:C0:20:91 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.36.0/22 IPv6: 2803:aaa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266871 Signature Algorithm: sha256WithRSAEncryption 5b:6f:bc:d5:a2:d1:a4:00:98:00:34:d1:68:6d:ec:1f:50:ac: 03:29:9e:cd:fc:7c:74:16:1a:6e:22:04:ed:ff:cd:2f:e7:4d: 33:f4:7e:37:db:c2:50:e0:01:b0:fd:7c:73:ed:0f:18:23:fb: 39:89:b8:d2:5b:c6:9a:db:82:dd:ef:d8:49:02:0d:47:da:fe: 82:04:ab:ad:b6:ad:42:76:2b:f7:8c:f1:f4:2a:89:22:48:38: ae:13:26:d7:a3:70:e1:c8:c5:a6:5e:0f:60:cf:a3:44:3f:8e: e9:e2:0a:9b:94:8b:9f:4c:f2:63:ac:29:1c:f3:9c:2e:2a:25: fe:fb:ec:c7:8e:e1:d4:8b:df:0b:66:78:5e:36:a7:d5:34:89: 9e:42:4a:31:f3:50:77:58:66:6b:e7:43:3d:24:ac:47:38:9c: 4f:cb:51:dd:ea:36:8d:b3:b9:87:d8:67:9c:7b:9f:c0:b3:09: 2f:33:52:b8:0c:77:50:0b:58:6d:d5:29:77:4e:dc:7b:b3:a6: 0b:9d:6e:5a:39:5d:9d:4e:8e:49:3b:9b:ec:db:20:11:76:37: 7f:b5:97:bf:09:53:a7:00:55:74:9e:f8:d9:7e:08:e6:26:28: 9a:00:b4:e5:b8:65:c2:50:80:1c:ea:35:80:cc:13:dc:1f:e1: 07:82:23:66 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUGFGdeQjo24Brmip8EbgRzBec59EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxOTA2MTdaFw0yNjAyMDQxOTExMTdaMDMxMTAvBgNV BAMTKDAxM0M5RkRCNTcyRjgyRkVCQTI2QzVDQkNBNDMyMUY0MjFDMDIwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuW9RqN3L3DBTHGF3sipk1piD GZ0qgi5Z+ZbLgytzGGLeER+0dVOjL4KcuvmfOoTwtRE2NLuVje0Pc6NcdJTYX062 itm7FNcV51iHPmNLvU+orWmB51HpVCv09PbElsGo2P01EMS5e6OHf4euYSnFRuks Mte8PoUoiLgjKQc87tl2Vhw0sWA0uRejTllJlp90ZHwiN7sBZdp5Wq4y89WCWdPk 5iL0FvQLFbDTH5lw21b3fQ65YckLfCjvdfIbJ8cfR2tO/YJ25sxO89/PxHIzrh+h wUR+smSixEaZWgWRkyXV9y5EmHtyrcbIcGkqwwYA5CI/5zyZSZarCvkOn1SnAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBPJ/bVy+C/rom xcvKQyH0IcAgkTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0EyM0JGNEJGQjZBMzZDQ0Q0MTg1MDcw NUQzNDdFNkRDNTgxRkQ3RjAyMzc0NjdDNTAzRjVFQTc3NDVDM0RGMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QTIzQkY0QkZCNkEzNkNDRDQxODUwNzA1RDM0N0U2REM1ODFGRDdGMDIz NzQ2N0M1MDNGNUVBNzc0NUMzREYyLzAvMDEzQzlGREI1NzJGODJGRUJBMjZDNUNC Q0E0MzIxRjQyMUMwMjA5MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe8kMA0EAgAC MAcDBQAoA6qgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSdzANBgkqhkiG9w0B AQsFAAOCAQEAW2+81aLRpACYADTRaG3sH1CsAymezfx8dBYabiIE7f/NL+dNM/R+ N9vCUOABsP18c+0PGCP7OYm40lvGmtuC3e/YSQINR9r+ggSrrbatQnYr94zx9CqJ Ikg4rhMm16Nw4cjFpl4PYM+jRD+O6eIKm5SLn0zyY6wpHPOcLiol/vvsx47h1Ivf C2Z4Xjan1TSJnkJKMfNQd1hma+dDPSSsRzicT8tR3eo2jbO5h9hnnHufwLMJLzNS uAx3UAtYbdUpd07ce7OmC51uWjldnU6OSTub7NsgEXY3f7WXvwlTpwBVdJ742X4I 5iYomgC05bhlwlCAHOo1gMwT3B/hB4IjZg== -----END CERTIFICATE-----Generated at Sun Apr 6 19:52:19 2025 by rpki-client