$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer File: 160B7951E0606756250A049D4BCA8B87E03112C2.cer (raw, json) Hash identifier: o/+oAY2sBb4kK2dMw2kWdk1RezqLodjIaaVyn4gnukI= Subject key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 31FEAFCDAEA11005660A548C3EB794A162A20CFC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 14:06:38 +0000 Certificate not after: Wed 04 Feb 2026 14:11:38 +0000 Subordinate resources: AS: 263236 IP: 66.128.32.0/20 IP: 2803:9680::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 08:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fe:af:cd:ae:a1:10:05:66:0a:54:8c:3e:b7:94:a1:62:a2:0c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 14:06:38 2025 GMT Not After : Feb 4 14:11:38 2026 GMT Subject: CN=160B7951E0606756250A049D4BCA8B87E03112C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:30:c1:82:e4:a3:79:d1:93:32:93:70:a6: 84:ee:89:2a:86:55:de:ba:cc:4b:2c:03:2c:b7:c2: eb:b5:23:23:08:58:86:0a:fd:08:4c:bc:58:e7:98: 64:03:dd:53:f0:24:59:eb:08:62:a7:a1:8b:7a:de: 6e:5c:99:2a:ff:4e:11:65:1f:8b:09:cb:9e:45:4d: e0:75:71:cf:f3:f9:7f:f1:f9:1e:6b:02:fc:58:b0: ae:be:92:ba:89:b4:94:a9:49:78:da:cf:28:f7:2a: d2:51:73:53:73:0c:ff:8a:74:6f:0c:3b:be:a7:16: 65:4c:60:4b:f9:98:73:fa:25:b2:a4:a5:d1:23:9c: f5:71:3a:2f:a8:ad:20:c9:39:4c:3e:5b:0b:cc:80: 77:1a:cb:76:0e:b9:41:16:bb:ab:e0:6e:20:3d:e7: 99:f6:df:5a:16:6a:ff:5b:43:dd:b4:e1:2b:c1:99: af:44:2d:99:ef:53:9c:48:02:31:e0:ee:07:2f:8c: bc:df:6d:0d:bb:db:a3:3b:4f:b5:26:d6:93:c3:b1: 75:d6:be:ac:38:4e:c9:3e:c2:24:3c:59:0e:63:b1: 09:f9:18:1b:4e:c2:81:6a:67:fd:52:60:74:29:85: 69:bc:a0:3b:b7:4c:4a:e7:e8:ad:ec:d6:f6:d6:76: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.128.32.0/20 IPv6: 2803:9680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263236 Signature Algorithm: sha256WithRSAEncryption 78:10:00:c1:e7:46:b2:15:47:a2:4f:58:db:24:dd:a6:02:1c: 4c:c2:e1:f5:9f:46:0d:57:7d:33:7d:c1:7d:f7:94:67:93:ca: f7:80:5f:c9:43:7e:88:37:25:f1:45:4d:b0:ad:d5:6a:88:a0: 2c:32:6d:17:64:de:bf:05:51:b4:e2:f1:74:0c:7c:d9:b0:87: 24:e5:05:28:43:fa:e0:c7:ab:0e:39:2e:1b:67:7a:3a:10:39: 0e:25:49:0b:c5:21:fb:b3:18:04:48:00:c0:8c:f2:b0:aa:73: 7e:dd:8d:23:ce:c9:cb:24:3a:0b:8a:81:e3:ec:1d:2d:b0:59: 41:5f:29:90:21:a5:24:bd:74:dc:ef:7c:ea:38:bb:51:d8:6a: e7:88:12:f8:c1:d2:66:a7:0d:2f:77:de:d5:6f:73:7b:cf:61: 5d:08:65:d8:4c:d4:4d:f9:ae:40:a5:65:d0:ea:ab:5a:14:60: b7:a5:35:15:6d:cc:36:42:99:6c:1d:48:11:54:99:56:3c:90: 23:cc:0d:45:e8:a2:6a:c7:88:24:a5:53:f4:7a:1e:21:a2:c2: ca:3d:a4:a6:e3:58:46:0a:ea:34:9d:49:cd:27:8c:cc:c2:57: b5:47:f1:f3:3f:e5:91:87:62:34:3a:06:27:89:46:ab:70:e1: c4:c6:aa:9d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUMf6vza6hEAVmClSMPreUoWKiDPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNDA2MzhaFw0yNjAyMDQxNDExMzhaMDMxMTAvBgNV BAMTKDE2MEI3OTUxRTA2MDY3NTYyNTBBMDQ5RDRCQ0E4Qjg3RTAzMTEyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV2TDBguSjedGTMpNwpoTuiSqG Vd66zEssAyy3wuu1IyMIWIYK/QhMvFjnmGQD3VPwJFnrCGKnoYt63m5cmSr/ThFl H4sJy55FTeB1cc/z+X/x+R5rAvxYsK6+krqJtJSpSXjazyj3KtJRc1NzDP+KdG8M O76nFmVMYEv5mHP6JbKkpdEjnPVxOi+orSDJOUw+WwvMgHcay3YOuUEWu6vgbiA9 55n231oWav9bQ9204SvBma9ELZnvU5xIAjHg7gcvjLzfbQ2726M7T7Um1pPDsXXW vqw4Tsk+wiQ8WQ5jsQn5GBtOwoFqZ/1SYHQphWm8oDu3TErn6K3s1vbWdtaBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWC3lR4GBnViUK BJ1LyouH4DESwjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTY4RTBBQ0I3NkNCRjM2Qzk1REY1RDk2 RTgwRDIwMEVGNkU3NDYxNTY1OEI0OTMyMTkxRTVGMTgyN0U0REFGNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NjhFMEFDQjc2Q0JGMzZDOTVERjVEOTZFODBEMjAwRUY2RTc0NjE1NjU4 QjQ5MzIxOTFFNUYxODI3RTREQUY3LzAvMTYwQjc5NTFFMDYwNjc1NjI1MEEwNDlE NEJDQThCODdFMDMxMTJDMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEQoAgMA0EAgAC MAcDBQAoA5aAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQERDANBgkqhkiG9w0B AQsFAAOCAQEAeBAAwedGshVHok9Y2yTdpgIcTMLh9Z9GDVd9M33BffeUZ5PK94Bf yUN+iDcl8UVNsK3VaoigLDJtF2TevwVRtOLxdAx82bCHJOUFKEP64MerDjkuG2d6 OhA5DiVJC8Uh+7MYBEgAwIzysKpzft2NI87JyyQ6C4qB4+wdLbBZQV8pkCGlJL10 3O986ji7Udhq54gS+MHSZqcNL3fe1W9ze89hXQhl2EzUTfmuQKVl0OqrWhRgt6U1 FW3MNkKZbB1IEVSZVjyQI8wNReiiaseIJKVT9HoeIaLCyj2kpuNYRgrqNJ1JzSeM zMJXtUfx8z/lkYdiNDoGJ4lGq3DhxMaqnQ== -----END CERTIFICATE-----Generated at Wed Apr 9 12:01:56 2025 by rpki-client