$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.cer File: 0C9F7C8120191058D60FE1C254277BCAFC0A1960.cer (raw, json) Hash identifier: Bm8y5LqBoOCfagkAg1a+EA5hkCJ+LPYGpSVbjH0Ee7c= Subject key identifier: 0C:9F:7C:81:20:19:10:58:D6:0F:E1:C2:54:27:7B:CA:FC:0A:19:60 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4B52FEC8F5B04D7D89C9FB278848FBE65DE7304F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 09:41:49 +0000 Certificate not after: Wed 04 Feb 2026 09:46:49 +0000 Subordinate resources: AS: 265707 IP: 192.140.60.0/22 IP: 2803:79c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:52:fe:c8:f5:b0:4d:7d:89:c9:fb:27:88:48:fb:e6:5d:e7:30:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 09:41:49 2025 GMT Not After : Feb 4 09:46:49 2026 GMT Subject: CN=0C9F7C8120191058D60FE1C254277BCAFC0A1960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:ae:ff:a0:45:b2:75:fb:e1:92:3a:81:bd: 34:66:16:59:5a:b6:05:4b:10:75:86:fd:fd:e2:76: 88:5a:b0:e5:aa:af:90:ff:3e:4c:1d:41:55:c4:1c: 6f:42:06:36:94:c4:eb:91:a9:2b:9d:93:1c:eb:8d: db:ba:eb:51:ea:a8:e8:1f:77:64:d5:5b:6e:40:94: a6:c6:f0:93:cc:8e:55:11:61:e9:11:61:aa:95:07: 0e:78:a7:36:e1:e5:a9:07:eb:4c:0c:ca:4c:f5:5f: 6e:49:24:85:65:df:6d:f4:f3:ae:4c:c5:0e:cf:a2: 07:9e:96:5b:c0:2b:22:3e:93:fe:c8:9d:c3:bd:84: 3b:d8:0a:aa:06:3a:c8:b0:c5:98:29:c8:9f:c6:8d: 41:4d:f9:04:06:a4:d2:37:0f:98:cd:ab:35:7a:75: d4:26:24:b5:d2:65:53:68:50:86:47:f8:31:78:f1: f4:70:4f:ab:5c:17:23:2e:35:46:b6:1b:23:d3:37: b4:3e:db:ee:71:58:49:03:86:02:1f:62:40:9a:47: e5:b5:db:37:27:53:29:9c:36:ff:6d:21:42:8a:a1: 30:5c:93:ca:44:85:fd:b7:9d:93:d2:c8:91:1e:9b: a9:72:fb:ee:86:c0:87:eb:c9:d7:9d:2e:a3:a3:fe: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:9F:7C:81:20:19:10:58:D6:0F:E1:C2:54:27:7B:CA:FC:0A:19:60 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.60.0/22 IPv6: 2803:79c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265707 Signature Algorithm: sha256WithRSAEncryption 0a:7c:81:7c:99:be:19:ec:1a:f6:b4:a0:8d:fe:ab:fb:93:03: 03:99:6e:c6:31:01:df:d0:01:9c:03:34:94:8a:fe:50:43:05: 42:cf:84:24:4d:16:4a:bd:61:37:c5:69:09:10:39:d1:1c:e9: bc:af:0f:52:c1:05:8f:15:6c:94:a3:68:4b:9c:52:4d:c3:cb: cb:89:de:01:18:ea:10:91:ab:50:a6:77:1a:b5:23:12:77:83: d8:4b:be:95:93:19:ac:03:a2:e1:b8:68:02:8f:9a:63:2b:d7: c5:95:6c:50:45:53:94:0e:96:2e:9a:37:bb:bb:87:73:a0:5d: b2:98:35:25:b7:2a:1c:22:a5:53:79:0c:1f:22:10:4b:bf:c4: 4a:4c:ae:2d:84:29:46:ff:72:56:c9:20:ef:4e:2e:0c:2c:40: ee:9a:63:e5:bb:31:aa:da:17:e2:63:60:d2:4e:3d:86:67:7f: c1:b7:43:29:fe:a8:c4:f8:dd:37:2f:9f:4d:54:02:82:36:bf: e8:93:5c:5a:14:f6:a4:82:39:2b:75:6a:96:61:ea:57:1b:52: 14:a6:69:d0:e0:3b:d0:16:98:a5:43:25:3f:1f:a4:bf:a7:a1: 5e:89:1f:00:6e:af:a2:d5:eb:9c:ce:af:1d:3f:e1:0a:13:b7: 0d:4c:8d:ec -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUS1L+yPWwTX2JyfsniEj75l3nME8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwOTQxNDlaFw0yNjAyMDQwOTQ2NDlaMDMxMTAvBgNV BAMTKDBDOUY3QzgxMjAxOTEwNThENjBGRTFDMjU0Mjc3QkNBRkMwQTE5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M67/oEWydfvhkjqBvTRmFlla tgVLEHWG/f3idohasOWqr5D/PkwdQVXEHG9CBjaUxOuRqSudkxzrjdu661HqqOgf d2TVW25AlKbG8JPMjlURYekRYaqVBw54pzbh5akH60wMykz1X25JJIVl3230865M xQ7PogeellvAKyI+k/7IncO9hDvYCqoGOsiwxZgpyJ/GjUFN+QQGpNI3D5jNqzV6 ddQmJLXSZVNoUIZH+DF48fRwT6tcFyMuNUa2GyPTN7Q+2+5xWEkDhgIfYkCaR+W1 2zcnUymcNv9tIUKKoTBck8pEhf23nZPSyJEem6ly++6GwIfrydedLqOj/g29AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMn3yBIBkQWNYP 4cJUJ3vK/AoZYDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjdFNkJBQUFEMTNGRjU3RjUwREMyMzU3 QzM0OTQ3NTVBMTIwMzBFMjlFNUZCRDc3Q0Y2Nzg4NEYyRTFFN0ZEMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yN0U2QkFBQUQxM0ZGNTdGNTBEQzIzNTdDMzQ5NDc1NUExMjAzMEUyOUU1 RkJENzdDRjY3ODg0RjJFMUU3RkQyLzAvMEM5RjdDODEyMDE5MTA1OEQ2MEZFMUMy NTQyNzdCQ0FGQzBBMTk2MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwIw8MA0EAgAC MAcDBQAoA3nAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQN6zANBgkqhkiG9w0B AQsFAAOCAQEACnyBfJm+Gewa9rSgjf6r+5MDA5luxjEB39ABnAM0lIr+UEMFQs+E JE0WSr1hN8VpCRA50RzpvK8PUsEFjxVslKNoS5xSTcPLy4neARjqEJGrUKZ3GrUj EneD2Eu+lZMZrAOi4bhoAo+aYyvXxZVsUEVTlA6WLpo3u7uHc6Bdspg1JbcqHCKl U3kMHyIQS7/ESkyuLYQpRv9yVskg704uDCxA7ppj5bsxqtoX4mNg0k49hmd/wbdD Kf6oxPjdNy+fTVQCgja/6JNcWhT2pII5K3VqlmHqVxtSFKZp0OA70BaYpUMlPx+k v6ehXokfAG6votXrnM6vHT/hChO3DUyN7A== -----END CERTIFICATE-----Generated at Sun Apr 6 04:17:48 2025 by rpki-client