$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DE8977243535CE0F3EC273478A6A417B2521028.cer File: 0DE8977243535CE0F3EC273478A6A417B2521028.cer (raw, json) Hash identifier: wVR2yPmZnSqa/SrdvVOXWzKDR1CsK2LJ38DNM+XkfXY= Subject key identifier: 0D:E8:97:72:43:53:5C:E0:F3:EC:27:34:78:A6:A4:17:B2:52:10:28 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7E309718AF2EFDC522A6BF27E15D84504DBF94C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 09:32:11 +0000 Certificate not after: Wed 04 Feb 2026 09:37:11 +0000 Subordinate resources: AS: 266775 IP: 45.235.96.0/23 IP: 2801:19:7000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:30:97:18:af:2e:fd:c5:22:a6:bf:27:e1:5d:84:50:4d:bf:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 09:32:11 2025 GMT Not After : Feb 4 09:37:11 2026 GMT Subject: CN=0DE8977243535CE0F3EC273478A6A417B2521028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:35:6a:cb:e3:15:98:7d:5e:dd:fd:0f:eb: de:33:98:68:fa:3f:82:47:11:f4:e8:cf:fd:7e:8a: 52:16:dc:64:62:fb:de:85:95:f3:64:2f:9f:f0:42: 2d:3e:3e:c2:59:42:0e:2b:21:bb:b0:62:dd:0d:d1: 0d:85:e8:17:fa:3f:89:66:da:7a:c5:46:b6:dd:31: cf:6a:a4:94:86:41:37:c8:dd:01:df:86:af:4a:aa: 1d:43:5f:0a:9f:4d:d7:26:a0:98:a3:4b:b8:3d:06: 0c:e4:f0:a0:f2:d9:d3:87:61:74:07:95:ee:7d:ff: 54:4d:db:2c:76:94:3d:1f:70:85:a0:6c:99:17:ce: f7:f3:a8:b0:46:dc:96:2a:36:51:ae:94:b0:2c:bf: 5a:ad:19:9b:fa:8e:7e:80:e3:01:4f:9b:ba:ce:7d: e4:3f:38:4c:3d:28:f4:76:2b:6a:c1:ee:9a:cc:23: 8c:90:7e:af:7f:2e:54:30:52:49:1d:94:9e:1b:d4: 5b:0f:69:0d:66:3c:64:24:c2:a3:cd:52:8e:b6:ef: 5d:b9:a0:3c:39:78:aa:c1:63:d8:29:d4:42:d1:ac: f9:5d:07:29:43:7e:d0:ea:81:50:f4:6f:11:f9:8a: 2d:c5:b7:fa:7d:1c:ca:ba:18:96:ed:2e:60:69:0a: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:E8:97:72:43:53:5C:E0:F3:EC:27:34:78:A6:A4:17:B2:52:10:28 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.96.0/23 IPv6: 2801:19:7000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266775 Signature Algorithm: sha256WithRSAEncryption 3a:6f:31:64:14:14:e1:4d:bb:9f:3e:6a:2e:b6:85:50:87:9d: 78:1f:1f:74:ce:f6:5f:e8:17:af:43:df:43:17:91:43:fa:06: 79:57:db:48:88:24:5c:6d:e2:61:d7:ef:82:94:f9:21:20:1f: 96:09:9b:8f:1d:71:fd:e8:60:5e:e5:01:bb:1b:14:84:29:57: 3b:08:de:44:ec:79:dc:3c:55:01:76:96:04:e0:22:c7:56:56: 9d:3f:66:f5:1e:91:21:5a:a8:2f:18:a8:e3:df:89:9c:4f:d4: 6d:de:44:9c:dd:9b:e7:c9:08:40:cf:9c:96:f5:3d:5f:03:ae: f2:f1:0e:0b:87:cb:c3:9e:a4:d8:b0:2b:8d:fc:be:1a:b2:86: f4:59:97:a0:f1:37:54:74:a5:c7:8a:83:e0:7f:af:d1:61:b9: 36:40:55:84:61:ce:43:39:e7:b8:c8:f9:8f:b4:4c:18:17:35: 51:05:80:64:54:59:4c:87:8d:f2:23:4b:a9:fe:0c:5d:ef:fa: e4:c5:39:23:1f:52:1c:4e:c2:79:f8:86:14:ea:e3:c5:b1:c5: 8b:2a:02:f0:b4:35:ac:af:12:c1:35:11:34:ed:5a:dd:66:18: 16:18:c4:72:de:6e:4e:77:be:8c:50:04:06:22:59:0f:81:99: 84:de:05:f5 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUfjCXGK8u/cUipr8n4V2EUE2/lMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwOTMyMTFaFw0yNjAyMDQwOTM3MTFaMDMxMTAvBgNV BAMTKDBERTg5NzcyNDM1MzVDRTBGM0VDMjczNDc4QTZBNDE3QjI1MjEwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl9TVqy+MVmH1e3f0P694zmGj6 P4JHEfToz/1+ilIW3GRi+96FlfNkL5/wQi0+PsJZQg4rIbuwYt0N0Q2F6Bf6P4lm 2nrFRrbdMc9qpJSGQTfI3QHfhq9Kqh1DXwqfTdcmoJijS7g9Bgzk8KDy2dOHYXQH le59/1RN2yx2lD0fcIWgbJkXzvfzqLBG3JYqNlGulLAsv1qtGZv6jn6A4wFPm7rO feQ/OEw9KPR2K2rB7prMI4yQfq9/LlQwUkkdlJ4b1FsPaQ1mPGQkwqPNUo627125 oDw5eKrBY9gp1ELRrPldBylDftDqgVD0bxH5ii3Ft/p9HMq6GJbtLmBpCk4FAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQN6JdyQ1Nc4PPs JzR4pqQXslIQKDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTlENUU3NjNDOUUzOTI5MTE4MzRERDUz NkNCNzk2QUM3QjFBMjgyMDE1ODRCOUU3MDFGMjdGQkNENDAyOTk3Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81OUQ1RTc2M0M5RTM5MjkxMTgzNERENTM2Q0I3OTZBQzdCMUEyODIwMTU4 NEI5RTcwMUYyN0ZCQ0Q0MDI5OTdGLzAvMERFODk3NzI0MzUzNUNFMEYzRUMyNzM0 NzhBNkE0MTdCMjUyMTAyOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLetgMA8EAgAC MAkDBwAoAQAZcAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBIXMA0GCSqGSIb3 DQEBCwUAA4IBAQA6bzFkFBThTbufPmoutoVQh514Hx90zvZf6BevQ99DF5FD+gZ5 V9tIiCRcbeJh1++ClPkhIB+WCZuPHXH96GBe5QG7GxSEKVc7CN5E7HncPFUBdpYE 4CLHVladP2b1HpEhWqgvGKjj34mcT9Rt3kSc3ZvnyQhAz5yW9T1fA67y8Q4Lh8vD nqTYsCuN/L4asob0WZeg8TdUdKXHioPgf6/RYbk2QFWEYc5DOee4yPmPtEwYFzVR BYBkVFlMh43yI0up/gxd7/rkxTkjH1IcTsJ5+IYU6uPFscWLKgLwtDWsrxLBNRE0 7VrdZhgWGMRy3m5Od76MUAQGIlkPgZmE3gX1 -----END CERTIFICATE-----Generated at Sun Apr 6 08:08:22 2025 by rpki-client