$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer File: 0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer (raw, json) Hash identifier: uwDMogXy45zN1X7xAWwD9aLAsdTcn0lWjFxV/EZgDOk= Subject key identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6A54FFF0CE62361BA8C6808C253999B8A0A7D597 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 17:55:10 +0000 Certificate not after: Wed 04 Feb 2026 18:00:10 +0000 Subordinate resources: AS: 266782 AS: 266814 IP: 45.234.84.0 -- 45.234.86.255 IP: 45.237.44.0/22 IP: 2803:b8a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:54:ff:f0:ce:62:36:1b:a8:c6:80:8c:25:39:99:b8:a0:a7:d5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 17:55:10 2025 GMT Not After : Feb 4 18:00:10 2026 GMT Subject: CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:8f:cf:99:aa:ba:e3:89:c0:60:0e:f5:a6: fe:88:08:6f:99:24:7b:c7:3f:f1:5c:22:5d:ae:4b: 17:ff:79:a8:25:f7:9f:22:ce:bd:d3:2f:11:29:ea: 10:fa:d2:ca:36:b6:a4:e5:33:e6:12:34:35:76:cd: 94:88:88:09:6b:de:3a:7d:09:e4:aa:4d:90:cb:83: a1:20:39:40:37:83:3c:a8:a2:60:16:56:27:0d:9e: e4:f1:e9:a5:6b:24:44:5c:3b:fb:de:ec:12:2a:2e: d6:09:56:bd:b0:0e:5e:14:7c:53:1e:ba:0b:77:e5: 80:c5:16:51:e2:18:22:80:a2:9e:ef:11:15:f1:2b: 76:80:63:cb:a6:7b:3a:8b:11:31:f7:b6:d3:e2:63: 24:4b:25:27:0a:df:9e:27:c5:c4:2b:4b:32:bb:82: 7c:d1:00:c8:cf:f5:c5:ed:3e:97:6e:bf:2c:2b:25: 0a:1e:53:b8:55:25:8a:bb:7c:9e:f7:99:12:a2:e1: 8e:93:67:df:76:7f:26:31:d1:b7:a5:92:d2:aa:b6: a6:32:5b:49:66:2a:87:98:e5:aa:f4:5d:2f:2d:55: 52:b7:d2:4c:85:75:f9:6e:f9:94:9c:1a:6f:fc:67: d3:e7:20:57:83:b2:00:bb:38:45:1b:69:cd:3d:b6: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.84.0-45.234.86.255 45.237.44.0/22 IPv6: 2803:b8a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266782 266814 Signature Algorithm: sha256WithRSAEncryption cf:7a:04:d3:ae:4e:6d:ba:06:d4:9e:cb:2f:da:ac:ee:a8:58: 4e:34:07:72:12:37:87:08:3a:4b:22:25:22:66:14:5c:f6:53: c5:c9:04:8b:f3:8a:9f:c8:3e:fc:c8:3c:15:39:a7:8d:f8:ab: c8:03:49:5a:cf:3a:5d:73:8b:b7:6d:70:96:67:c6:47:93:50: 86:a9:c7:56:49:72:5e:f2:92:93:07:16:af:6d:2d:44:02:02: 91:92:35:db:c8:4e:ad:80:92:66:57:8f:07:ea:a6:fb:ce:73: 47:cf:1b:fd:0f:71:ea:7d:3a:2d:27:6b:b9:f9:37:11:49:cf: f3:b5:b5:43:de:91:cc:42:bc:20:3a:91:bb:e6:64:51:e4:ed: cd:45:6b:51:32:ef:9d:b9:ff:50:8c:dc:4c:02:35:19:72:87: dd:82:45:4b:b4:9b:37:9a:d7:fc:01:42:c4:97:99:19:58:cf: 6c:7b:f7:79:65:13:53:8c:ef:7a:ac:ff:69:12:de:af:53:e8: f3:88:29:b4:ab:6f:71:e0:43:26:36:ef:f1:c1:6c:1c:6b:6b: b7:61:54:80:2e:25:00:6b:af:71:0c:13:f1:82:86:48:75:52: 9a:d5:70:a3:f9:f9:8d:e1:c4:e4:e6:98:60:5f:67:5a:14:bd: e5:1a:3c:ab -----BEGIN CERTIFICATE----- MIIGuDCCBaCgAwIBAgIUalT/8M5iNhuoxoCMJTmZuKCn1ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNzU1MTBaFw0yNjAyMDQxODAwMTBaMDMxMTAvBgNV BAMTKDBEQTAyREU1MUYzQUU5RDQ0NDRCMjlGRTVGQzg1Mjg2QzI2NDUyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4o/Pmaq644nAYA71pv6ICG+Z JHvHP/FcIl2uSxf/eagl958izr3TLxEp6hD60so2tqTlM+YSNDV2zZSIiAlr3jp9 CeSqTZDLg6EgOUA3gzyoomAWVicNnuTx6aVrJERcO/ve7BIqLtYJVr2wDl4UfFMe ugt35YDFFlHiGCKAop7vERXxK3aAY8umezqLETH3ttPiYyRLJScK354nxcQrSzK7 gnzRAMjP9cXtPpduvywrJQoeU7hVJYq7fJ73mRKi4Y6TZ992fyYx0belktKqtqYy W0lmKoeY5ar0XS8tVVK30kyFdflu+ZScGm/8Z9PnIFeDsgC7OEUbac09tkQrAgMB AAGjggPCMIIDvjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNoC3lHzrp1ERL Kf5fyFKGwmRSHzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEY4QjA1OEVFQkU1RjAxMjZDQjVDRjg1 NzE0MUQyOUM4QzU0N0MyMjAyQUI5RjA4MDM4NUE0RjNDRjg1NzQzOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RjhCMDU4RUVCRTVGMDEyNkNCNUNGODU3MTQxRDI5QzhDNTQ3QzIyMDJB QjlGMDgwMzg1QTRGM0NGODU3NDM4LzAvMERBMDJERTUxRjNBRTlENDQ0NEIyOUZF NUZDODUyODZDMjY0NTIxRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAIt6lQDBAAt 6lYDBAIt7SwwDQQCAAIwBwMFACgDuKAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID BBIeAgMEEj4wDQYJKoZIhvcNAQELBQADggEBAM96BNOuTm26BtSeyy/arO6oWE40 B3ISN4cIOksiJSJmFFz2U8XJBIvzip/IPvzIPBU5p434q8gDSVrPOl1zi7dtcJZn xkeTUIapx1ZJcl7ykpMHFq9tLUQCApGSNdvITq2AkmZXjwfqpvvOc0fPG/0Pcep9 Oi0na7n5NxFJz/O1tUPekcxCvCA6kbvmZFHk7c1Fa1Ey7525/1CM3EwCNRlyh92C RUu0mzea1/wBQsSXmRlYz2x793llE1OM73qs/2kS3q9T6POIKbSrb3HgQyY27/HB bBxra7dhVIAuJQBrr3EME/GChkh1UprVcKP5+Y3hxOTmmGBfZ1oUveUaPKs= -----END CERTIFICATE-----Generated at Sun Apr 6 04:21:12 2025 by rpki-client