$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer File: 194BC878A0116733917FAE71A98D799CA4442D66.cer (raw, json) Hash identifier: le5nwbyc8UVdJzMUHCsrzeIrpEddoxiisBja/VVAPJc= Subject key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 35214A97F388BAB63B3F61D1D8F884AF289AF184 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 04:07:08 +0000 Certificate not after: Thu 05 Feb 2026 04:12:08 +0000 Subordinate resources: AS: 13585 IP: 190.1.96.0/19 IP: 190.11.128.0/18 IP: 2800:220::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:21:4a:97:f3:88:ba:b6:3b:3f:61:d1:d8:f8:84:af:28:9a:f1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 04:07:08 2025 GMT Not After : Feb 5 04:12:08 2026 GMT Subject: CN=194BC878A0116733917FAE71A98D799CA4442D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:51:7c:1a:59:e5:e7:1b:e3:c3:ef:27:a9: a5:3e:55:c2:09:f9:25:10:d8:ad:ef:3b:28:3a:8e: ac:c3:62:92:ec:4e:80:f9:50:4e:9c:f4:16:e4:9c: 4c:29:e6:f5:b7:b2:a1:54:53:39:3a:ac:94:5a:3c: ff:0e:25:39:ae:52:31:14:ff:31:96:7e:af:70:36: e8:e4:9f:73:25:bd:ea:4c:68:4d:89:7a:ec:68:ba: 41:08:b1:1d:f9:94:09:a9:54:c0:ec:65:d7:b7:e1: 05:b7:96:75:c2:a3:9e:22:f2:3d:9a:6d:d3:01:4a: 4d:34:e2:35:d6:fa:3e:fc:72:49:ec:79:db:27:48: 99:f7:cd:aa:38:c0:ca:2b:c6:25:99:a6:4a:ac:6b: 1f:5e:1d:b2:70:27:e4:af:02:fb:1f:4f:3c:4b:e3: 49:88:5b:58:41:aa:b5:e2:af:2f:f8:cb:bc:e3:81: 13:95:a7:4f:38:a5:64:67:4a:57:d8:fc:81:a4:1b: 8d:52:5e:03:7e:2c:1d:4c:cc:3f:3d:f1:59:2e:c3: e2:c4:53:d4:de:1f:b0:6c:46:eb:42:a8:de:d8:46: 35:fb:76:96:4d:23:f0:d5:3f:57:f0:21:ad:b0:31: d0:22:19:35:8d:1c:0b:f8:a8:fd:ca:98:d0:72:44: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.1.96.0/19 190.11.128.0/18 IPv6: 2800:220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13585 Signature Algorithm: sha256WithRSAEncryption 71:60:7b:86:3e:60:64:62:e8:4f:cc:47:51:1b:61:0b:e3:17: 9a:ba:92:dc:92:77:ac:09:e4:90:cb:58:18:89:e0:53:cd:62: e0:e5:b2:6e:34:33:92:d3:49:7b:4a:0e:eb:4b:51:73:02:44: bb:12:fd:8d:4b:fb:1a:bf:1f:ad:e8:af:12:d7:1f:ed:0f:16: 0e:f6:92:a0:c0:c1:3e:3e:34:e8:e5:95:7e:3f:5a:4a:bd:e5: 97:93:a8:27:38:ec:89:3f:43:39:a7:e5:9e:eb:45:90:46:37: 6b:d5:1d:e0:02:2e:e5:18:81:90:22:88:7f:57:90:01:d1:51: ba:3c:19:67:59:d9:80:52:fe:09:36:13:8f:5c:a6:d7:04:a8: ad:fb:93:a4:7d:3d:9a:f3:ee:5a:6d:3e:0a:e5:72:fb:6a:c0: 86:cf:64:16:88:51:e4:dd:a6:ee:49:6a:71:42:eb:46:b3:e7: 28:8f:66:54:b8:df:4f:18:57:c2:ec:c5:20:1d:d2:ca:09:26: e4:6e:bc:c7:8f:52:44:b0:13:c4:00:83:97:18:6d:19:2a:1c: 61:5f:ee:e0:fd:bf:e2:13:8c:20:12:88:c2:a5:b0:94:4c:e9: e6:02:51:a8:59:30:0a:9f:2f:1e:1e:0b:5e:ea:6f:d6:3f:97: 40:45:d5:9e -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUNSFKl/OIurY7P2HR2PiEryia8YQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwNDA3MDhaFw0yNjAyMDUwNDEyMDhaMDMxMTAvBgNV BAMTKDE5NEJDODc4QTAxMTY3MzM5MTdGQUU3MUE5OEQ3OTlDQTQ0NDJENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbalF8Glnl5xvjw+8nqaU+VcIJ +SUQ2K3vOyg6jqzDYpLsToD5UE6c9BbknEwp5vW3sqFUUzk6rJRaPP8OJTmuUjEU /zGWfq9wNujkn3MlvepMaE2JeuxoukEIsR35lAmpVMDsZde34QW3lnXCo54i8j2a bdMBSk004jXW+j78cknsedsnSJn3zao4wMorxiWZpkqsax9eHbJwJ+SvAvsfTzxL 40mIW1hBqrXiry/4y7zjgROVp084pWRnSlfY/IGkG41SXgN+LB1MzD898Vkuw+LE U9TeH7BsRutCqN7YRjX7dpZNI/DVP1fwIa2wMdAiGTWNHAv4qP3KmNByREv3AgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZS8h4oBFnM5F/ rnGpjXmcpEQtZjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDQyQzlGNjIwMkU2QjJFMEIwRDcyMDky MTU1OEU4QzYzQUU2RDM3MDUzMzU4NTY2MkYyRDY5NDNGOTA5QkI3Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENDJDOUY2MjAyRTZCMkUwQjBENzIwOTIxNTU4RThDNjNBRTZEMzcwNTMz NTg1NjYyRjJENjk0M0Y5MDlCQjdDLzAvMTk0QkM4NzhBMDExNjczMzkxN0ZBRTcx QTk4RDc5OUNBNDQ0MkQ2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFvgFgAwQGvguA MA0EAgACMAcDBQAoAAIgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjURMA0GCSqG SIb3DQEBCwUAA4IBAQBxYHuGPmBkYuhPzEdRG2EL4xeaupLcknesCeSQy1gYieBT zWLg5bJuNDOS00l7Sg7rS1FzAkS7Ev2NS/savx+t6K8S1x/tDxYO9pKgwME+PjTo 5ZV+P1pKveWXk6gnOOyJP0M5p+We60WQRjdr1R3gAi7lGIGQIoh/V5AB0VG6PBln WdmAUv4JNhOPXKbXBKit+5OkfT2a8+5abT4K5XL7asCGz2QWiFHk3abuSWpxQutG s+coj2ZUuN9PGFfC7MUgHdLKCSbkbrzHj1JEsBPEAIOXGG0ZKhxhX+7g/b/iE4wg EojCpbCUTOnmAlGoWTAKny8eHgte6m/WP5dARdWe -----END CERTIFICATE-----Generated at Mon Apr 7 03:27:15 2025 by rpki-client