$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.cer File: 0D34B4304BB923E80757FDED7508C224FEF6ED84.cer (raw, json) Hash identifier: oZz57LV6vSnVbjMZOx0c43DeEfnihJAsx89Ld4KTs/A= Subject key identifier: 0D:34:B4:30:4B:B9:23:E8:07:57:FD:ED:75:08:C2:24:FE:F6:ED:84 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4A1903A64EF10F4094003CFEE7D7102A6501669F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:30:53 +0000 Certificate not after: Tue 03 Feb 2026 23:35:53 +0000 Subordinate resources: AS: 52342 IP: 186.148.212.0/22 IP: 2800:9b0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:19:03:a6:4e:f1:0f:40:94:00:3c:fe:e7:d7:10:2a:65:01:66:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:30:53 2025 GMT Not After : Feb 3 23:35:53 2026 GMT Subject: CN=0D34B4304BB923E80757FDED7508C224FEF6ED84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:5a:7f:57:8a:0b:d3:a0:d6:b3:3e:f3:d5: 16:21:90:e5:2b:bc:61:3a:d3:63:b6:8f:32:d5:a7: 0d:7c:de:b3:23:28:b4:73:ac:80:a2:af:dd:1e:99: 13:f7:90:be:00:65:2e:ab:e2:a5:b3:16:7e:a9:98: 93:69:4b:04:93:00:dc:2e:f0:55:1f:40:30:24:0b: 47:96:be:22:5c:d3:34:b2:80:bc:8b:b0:d3:e9:53: 05:4e:84:c3:d4:6a:eb:f4:c1:e2:a8:03:b2:e7:7b: 19:7e:9b:e3:66:ea:ad:7a:5c:ee:92:eb:cd:d5:25: e7:ed:96:8c:8a:50:f8:4b:6b:03:d6:75:33:cc:9a: 83:35:f6:9b:7b:97:01:12:bd:d2:d0:ab:51:7d:41: de:69:33:1a:88:ec:ed:4e:16:7a:db:96:9c:68:3c: cc:57:92:50:ca:9a:99:91:86:61:f1:44:d2:ec:48: 96:cf:37:7f:1d:c9:64:7c:94:c5:cf:93:ca:e0:28: af:ff:97:02:c6:d7:06:d6:3e:5a:39:81:ba:2d:07: 13:7a:fe:e5:ef:31:8a:6d:78:75:04:69:60:a9:35: 90:af:15:23:7d:95:e8:3a:44:b8:26:23:a3:2e:2b: 7b:b0:3f:fe:7b:7f:ea:c9:81:76:dc:98:25:7f:3a: 31:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:34:B4:30:4B:B9:23:E8:07:57:FD:ED:75:08:C2:24:FE:F6:ED:84 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.148.212.0/22 IPv6: 2800:9b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52342 Signature Algorithm: sha256WithRSAEncryption 49:da:34:85:8d:8d:13:1d:8b:75:95:c0:f1:aa:23:5e:1f:ae: 16:73:5b:3c:2c:c3:f0:59:51:60:ec:76:b5:f7:57:c0:54:5c: ce:87:9f:5e:a8:f5:db:da:88:b4:39:9a:43:fb:ab:4b:ec:e4: a7:06:4e:58:0d:9d:58:48:70:c3:c9:c1:fa:ec:6c:71:86:d3: 6a:06:1b:64:fc:6b:03:4a:8f:e5:a6:33:47:5a:f7:f7:88:cc: 66:29:38:62:eb:95:9e:07:0f:13:7b:d8:6c:1b:36:16:85:4a: 15:25:f8:9d:47:12:f9:dc:1f:28:40:12:53:1e:eb:68:a7:5e: 28:61:3f:dc:f6:60:12:82:84:fa:80:71:f3:38:8c:08:8f:b0: df:3e:cc:e1:32:c4:bf:0a:e5:62:0f:1d:39:44:ba:16:8f:77: 6c:57:6e:d0:0a:c1:ae:ba:3a:4c:12:69:90:76:db:4f:61:db: dd:24:d1:17:1f:fa:4b:82:08:29:94:a8:4f:da:70:d1:d1:d5: 09:94:6f:9a:fd:54:8e:ed:50:7a:ed:56:3e:fc:18:41:2d:6d: e3:80:a4:ba:6c:77:00:0a:4d:08:f7:22:ce:d1:73:f3:fb:a8: 2f:58:be:6e:e4:a8:3d:f0:4e:b5:5c:54:a7:e7:f4:69:67:eb: 98:63:69:6a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUShkDpk7xD0CUADz+59cQKmUBZp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzMwNTNaFw0yNjAyMDMyMzM1NTNaMDMxMTAvBgNV BAMTKDBEMzRCNDMwNEJCOTIzRTgwNzU3RkRFRDc1MDhDMjI0RkVGNkVEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59Vp/V4oL06DWsz7z1RYhkOUr vGE602O2jzLVpw183rMjKLRzrICir90emRP3kL4AZS6r4qWzFn6pmJNpSwSTANwu 8FUfQDAkC0eWviJc0zSygLyLsNPpUwVOhMPUauv0weKoA7Lnexl+m+Nm6q16XO6S 683VJeftloyKUPhLawPWdTPMmoM19pt7lwESvdLQq1F9Qd5pMxqI7O1OFnrblpxo PMxXklDKmpmRhmHxRNLsSJbPN38dyWR8lMXPk8rgKK//lwLG1wbWPlo5gbotBxN6 /uXvMYpteHUEaWCpNZCvFSN9leg6RLgmI6MuK3uwP/57f+rJgXbcmCV/OjHVAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNNLQwS7kj6AdX /e11CMIk/vbthDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjY1NkJEQ0IyQUIxMDE2OEQ5MjlDOUYz NjU4MEQwMDZBQUE0OUY0QjgyMjUzNzBGRjBFQkE3MzA4REM1NDhDOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNjU2QkRDQjJBQjEwMTY4RDkyOUM5RjM2NTgwRDAwNkFBQTQ5RjRCODIy NTM3MEZGMEVCQTczMDhEQzU0OEM4LzAvMEQzNEI0MzA0QkI5MjNFODA3NTdGREVE NzUwOEMyMjRGRUY2RUQ4NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCupTUMA0EAgAC MAcDBQAoAAmwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMdjANBgkqhkiG9w0B AQsFAAOCAQEASdo0hY2NEx2LdZXA8aojXh+uFnNbPCzD8FlRYOx2tfdXwFRczoef Xqj129qItDmaQ/urS+zkpwZOWA2dWEhww8nB+uxscYbTagYbZPxrA0qP5aYzR1r3 94jMZik4YuuVngcPE3vYbBs2FoVKFSX4nUcS+dwfKEASUx7raKdeKGE/3PZgEoKE +oBx8ziMCI+w3z7M4TLEvwrlYg8dOUS6Fo93bFdu0ArBrro6TBJpkHbbT2Hb3STR Fx/6S4IIKZSoT9pw0dHVCZRvmv1Uju1Qeu1WPvwYQS1t44Ckumx3AApNCPciztFz 8/uoL1i+buSoPfBOtVxUp+f0aWfrmGNpag== -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:18 2025 by rpki-client