$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07E4F9F68EEEFB968AB53C83F556C62B41EFF874.cer File: 07E4F9F68EEEFB968AB53C83F556C62B41EFF874.cer (raw, json) Hash identifier: 9eWdXonyh95tgYk4J3h1VRWxLZfniCy87Xcc4IInEZk= Subject key identifier: 07:E4:F9:F6:8E:EE:FB:96:8A:B5:3C:83:F5:56:C6:2B:41:EF:F8:74 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 473248FDF170E3E14BFA48BF0F73A4A2DE647D99 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B510EA084F7AAB975D60BB552480108C5E55190E247AA45A5202E04931CF43EC/0/07E4F9F68EEEFB968AB53C83F556C62B41EFF874.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B510EA084F7AAB975D60BB552480108C5E55190E247AA45A5202E04931CF43EC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 21 May 2025 08:45:01 +0000 Certificate not after: Wed 20 May 2026 08:50:01 +0000 Subordinate resources: AS: 273868 IP: 2803:6d50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:32:48:fd:f1:70:e3:e1:4b:fa:48:bf:0f:73:a4:a2:de:64:7d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 21 08:45:01 2025 GMT Not After : May 20 08:50:01 2026 GMT Subject: CN=07E4F9F68EEEFB968AB53C83F556C62B41EFF874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:86:38:4c:82:ad:88:30:26:64:21:a0:4c: 92:f8:54:0f:a7:97:17:56:2f:72:22:da:1f:a0:87: 56:55:78:ed:c6:1b:bd:d5:4c:d4:dd:b9:8e:8f:c4: 82:d9:28:ef:e6:99:25:f0:2c:1f:e8:b4:5c:0c:80: 2c:51:4d:d7:18:ab:04:cf:45:38:5e:ed:ad:cd:29: 5b:a1:f4:8e:98:ab:d2:73:5a:42:97:a7:d4:42:75: c8:57:c9:22:6a:d4:4c:8a:b3:b7:a5:88:c9:a8:d4: 25:33:63:52:53:c1:95:cd:fb:e2:66:b8:58:d6:a8: 92:f0:a9:4c:d8:43:1b:e5:57:57:25:1c:98:05:ce: 21:47:83:48:53:6a:79:8a:fd:44:c2:13:aa:7d:80: 05:92:d0:f3:c2:70:21:b9:a4:ba:e2:48:04:f6:b9: b0:5a:76:83:e8:16:55:80:c2:5a:44:ad:97:f9:21: 84:fa:55:8c:2a:85:49:ad:ed:c5:4d:d3:8c:ed:61: b3:87:7c:d3:68:30:4d:a3:d9:1d:8b:9f:fe:ca:a5: bb:68:ed:23:fa:9e:91:8b:13:92:c9:13:71:18:51: d8:b9:8b:07:4a:06:3c:d5:ff:9f:a7:63:b4:5f:b4: 0f:c2:74:d4:d0:d0:8b:16:df:8b:eb:e8:29:41:96: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:E4:F9:F6:8E:EE:FB:96:8A:B5:3C:83:F5:56:C6:2B:41:EF:F8:74 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B510EA084F7AAB975D60BB552480108C5E55190E247AA45A5202E04931CF43EC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B510EA084F7AAB975D60BB552480108C5E55190E247AA45A5202E04931CF43EC/0/07E4F9F68EEEFB968AB53C83F556C62B41EFF874.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273868 Signature Algorithm: sha256WithRSAEncryption 6a:2d:5d:a9:f2:3d:01:15:4b:b9:ca:a0:a2:a3:c6:d9:19:a3: 78:ee:9b:d9:08:06:db:be:90:d0:f7:95:21:ab:fd:aa:7e:2c: 7b:f8:8c:4c:e9:73:51:f7:73:39:f1:78:6b:1e:1e:b5:a1:89: 6c:11:82:37:b6:76:de:a8:04:ad:df:9d:bb:fd:06:70:41:7b: 0c:77:f2:ed:d9:6e:a0:12:0d:84:4f:fb:8c:d3:ef:d6:61:d7: a7:de:cc:ae:03:d0:d6:e1:0e:c3:86:7f:d7:1a:bb:52:3f:cb: 91:5a:dd:27:a5:1f:fb:86:00:c6:7e:c1:2f:2e:08:1c:58:ea: 08:44:92:7d:10:f2:e6:e2:5b:f1:7a:cb:5a:f6:3c:b6:ef:82: bb:92:55:3c:a1:ea:eb:40:df:d9:42:e8:2a:61:fa:21:22:3c: e6:dd:70:51:51:b8:c1:e6:be:2d:d6:f0:a9:42:56:36:a5:63: 8f:dd:02:cb:e1:e7:fd:c3:74:ae:ad:94:ac:b9:68:8e:94:7d: 5c:59:ee:7c:de:81:d7:1f:20:07:b4:f7:34:29:fe:da:22:6a: 40:e8:e0:e3:50:e7:3d:b9:5c:bd:03:3a:99:ae:4d:30:7c:8e: dc:d9:f3:22:5a:d4:c9:2a:8e:94:b5:51:20:1c:04:8c:bc:83: 35:a5:d3:c5 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIURzJI/fFw4+FL+ki/D3Okot5kfZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MjEwODQ1MDFaFw0yNjA1MjAwODUwMDFaMDMxMTAvBgNV BAMTKDA3RTRGOUY2OEVFRUZCOTY4QUI1M0M4M0Y1NTZDNjJCNDFFRkY4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDR4Y4TIKtiDAmZCGgTJL4VA+n lxdWL3Ii2h+gh1ZVeO3GG73VTNTduY6PxILZKO/mmSXwLB/otFwMgCxRTdcYqwTP RThe7a3NKVuh9I6Yq9JzWkKXp9RCdchXySJq1EyKs7eliMmo1CUzY1JTwZXN++Jm uFjWqJLwqUzYQxvlV1clHJgFziFHg0hTanmK/UTCE6p9gAWS0PPCcCG5pLriSAT2 ubBadoPoFlWAwlpErZf5IYT6VYwqhUmt7cVN04ztYbOHfNNoME2j2R2Ln/7Kpbto 7SP6npGLE5LJE3EYUdi5iwdKBjzV/5+nY7RftA/CdNTQ0IsW34vr6ClBll2/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQH5Pn2ju77loq1 PIP1VsYrQe/4dDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjUxMEVBMDg0RjdBQUI5NzVENjBCQjU1 MjQ4MDEwOEM1RTU1MTkwRTI0N0FBNDVBNTIwMkUwNDkzMUNGNDNFQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNTEwRUEwODRGN0FBQjk3NUQ2MEJCNTUyNDgwMTA4QzVFNTUxOTBFMjQ3 QUE0NUE1MjAyRTA0OTMxQ0Y0M0VDLzAvMDdFNEY5RjY4RUVFRkI5NjhBQjUzQzgz RjU1NkM2MkI0MUVGRjg3NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANtUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELcwwDQYJKoZIhvcNAQELBQADggEBAGotXany PQEVS7nKoKKjxtkZo3jum9kIBtu+kND3lSGr/ap+LHv4jEzpc1H3cznxeGseHrWh iWwRgje2dt6oBK3fnbv9BnBBewx38u3ZbqASDYRP+4zT79Zh16fezK4D0NbhDsOG f9cau1I/y5Fa3SelH/uGAMZ+wS8uCBxY6ghEkn0Q8ubiW/F6y1r2PLbvgruSVTyh 6utA39lC6Cph+iEiPObdcFFRuMHmvi3W8KlCVjalY4/dAsvh5/3DdK6tlKy5aI6U fVxZ7nzegdcfIAe09zQp/toiakDo4ONQ5z25XL0DOpmuTTB8jtzZ8yJa1MkqjpS1 USAcBIy8gzWl08U= -----END CERTIFICATE-----Generated at Mon Jun 2 17:11:25 2025 by rpki-client