$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19DE80CCD2051C277CABB92B55FA6DCC5A81AAEF.cer File: 19DE80CCD2051C277CABB92B55FA6DCC5A81AAEF.cer (raw, json) Hash identifier: z6J4wzqkOlOIHsTHgkXFkAivbkS9VGG5sMUAz/VYK0A= Subject key identifier: 19:DE:80:CC:D2:05:1C:27:7C:AB:B9:2B:55:FA:6D:CC:5A:81:AA:EF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 394F16606DC3B70D230C00AA40EA55929A183D33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BEE96C5D27B3A7C06762162752EE7395093ED01209A940D5908BBBFDAE84ABBD/0/19DE80CCD2051C277CABB92B55FA6DCC5A81AAEF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BEE96C5D27B3A7C06762162752EE7395093ED01209A940D5908BBBFDAE84ABBD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 08 Feb 2025 21:15:00 +0000 Certificate not after: Sat 07 Feb 2026 21:20:00 +0000 Subordinate resources: AS: 274029 IP: 2803:ecd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4f:16:60:6d:c3:b7:0d:23:0c:00:aa:40:ea:55:92:9a:18:3d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 8 21:15:00 2025 GMT Not After : Feb 7 21:20:00 2026 GMT Subject: CN=19DE80CCD2051C277CABB92B55FA6DCC5A81AAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:6c:15:aa:e7:f1:b1:06:45:b9:ee:4b:f6: 89:47:20:48:32:2a:28:70:30:c1:b8:34:53:9b:66: 89:fe:83:ad:6a:d1:33:f7:32:54:af:67:5c:1a:f3: 1c:7c:1f:47:de:93:bd:fa:a7:f2:0e:83:45:2e:bb: 2a:ff:cf:5e:24:c0:73:c7:3f:e5:da:0d:49:77:b5: 91:bb:ec:3c:10:5f:d2:94:12:d4:69:47:c0:e6:eb: 4f:0b:87:b4:ae:31:2d:04:97:f9:75:be:eb:a2:43: 21:09:1b:1e:09:f5:83:6b:02:c4:6a:03:15:68:67: 4b:bb:4f:e6:67:dd:76:b2:61:e0:95:40:ae:2e:b3: 29:97:a4:e5:2e:65:6e:6a:0d:bc:64:7f:7e:2b:d7: 0d:59:da:75:7b:c1:c9:30:b5:a8:89:8a:b1:07:10: e6:91:eb:34:bb:7d:0f:46:53:a9:2e:da:cd:c4:50: 68:fa:51:2c:b4:7e:d9:a0:dc:c9:93:07:23:35:93: 0a:eb:38:63:e2:de:09:1a:a4:27:58:09:5b:9b:4b: 33:5a:89:24:68:dc:bc:9e:47:16:6f:91:a5:ff:6a: cb:c1:67:95:d2:f2:af:cd:25:c6:ee:92:b2:c6:14: 06:11:ea:7e:fd:9b:b9:bd:6b:72:62:5e:a3:df:46: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:DE:80:CC:D2:05:1C:27:7C:AB:B9:2B:55:FA:6D:CC:5A:81:AA:EF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE96C5D27B3A7C06762162752EE7395093ED01209A940D5908BBBFDAE84ABBD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE96C5D27B3A7C06762162752EE7395093ED01209A940D5908BBBFDAE84ABBD/0/19DE80CCD2051C277CABB92B55FA6DCC5A81AAEF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ecd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274029 Signature Algorithm: sha256WithRSAEncryption 29:88:05:b8:1c:ff:32:fb:ad:2b:df:05:c6:66:a8:86:6a:2a: e8:15:e4:05:fe:e0:58:c3:7e:ab:7d:30:e5:22:b6:0a:54:ea: 2f:a8:af:d5:5d:38:3e:04:9b:6c:f6:78:55:8e:e2:41:35:96: 03:da:bb:14:22:2d:9a:bf:1d:03:30:0d:58:88:10:20:34:93: c2:ff:ad:28:e5:b5:34:32:be:fc:40:eb:4a:46:4d:3d:02:e9: 3d:35:78:c5:8c:3d:12:a6:40:9d:e9:4a:94:07:8e:b5:c8:87: 70:4d:49:55:86:9a:1d:3b:de:a1:1a:ef:54:6b:a9:5c:09:57: bd:1a:82:ff:79:3c:c0:88:d4:a1:b3:cb:c8:63:4d:fd:f0:2d: b5:b7:2d:d1:b3:ad:a5:06:b9:aa:72:d7:92:c4:ce:ed:1e:6e: c2:b1:f2:6c:5b:a1:fb:73:00:45:82:2c:92:fd:e3:04:dc:c0: 23:1f:6f:89:38:35:8d:00:81:4c:db:18:25:a8:f0:95:6f:03: d7:da:98:43:90:5e:57:88:4e:d6:bc:36:6e:c4:93:54:8d:e4: 4f:ff:d5:7d:cf:2b:ba:b3:ea:5d:cf:86:5b:4b:8f:e9:fe:79: eb:a5:02:95:d4:03:0d:83:11:03:57:60:2f:71:a3:7e:b1:80: 77:41:a3:46 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUOU8WYG3Dtw0jDACqQOpVkpoYPTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDgyMTE1MDBaFw0yNjAyMDcyMTIwMDBaMDMxMTAvBgNV BAMTKDE5REU4MENDRDIwNTFDMjc3Q0FCQjkyQjU1RkE2RENDNUE4MUFBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLkWwVqufxsQZFue5L9olHIEgy KihwMMG4NFObZon+g61q0TP3MlSvZ1wa8xx8H0fek736p/IOg0Uuuyr/z14kwHPH P+XaDUl3tZG77DwQX9KUEtRpR8Dm608Lh7SuMS0El/l1vuuiQyEJGx4J9YNrAsRq AxVoZ0u7T+Zn3XayYeCVQK4usymXpOUuZW5qDbxkf34r1w1Z2nV7wckwtaiJirEH EOaR6zS7fQ9GU6ku2s3EUGj6USy0ftmg3MmTByM1kwrrOGPi3gkapCdYCVubSzNa iSRo3LyeRxZvkaX/asvBZ5XS8q/NJcbukrLGFAYR6n79m7m9a3JiXqPfRih7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZ3oDM0gUcJ3yr uStV+m3MWoGq7zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkVFOTZDNUQyN0IzQTdDMDY3NjIxNjI3 NTJFRTczOTUwOTNFRDAxMjA5QTk0MEQ1OTA4QkJCRkRBRTg0QUJCRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRUU5NkM1RDI3QjNBN0MwNjc2MjE2Mjc1MkVFNzM5NTA5M0VEMDEyMDlB OTQwRDU5MDhCQkJGREFFODRBQkJELzAvMTlERTgwQ0NEMjA1MUMyNzdDQUJCOTJC NTVGQTZEQ0M1QTgxQUFFRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPs0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELm0wDQYJKoZIhvcNAQELBQADggEBACmIBbgc /zL7rSvfBcZmqIZqKugV5AX+4FjDfqt9MOUitgpU6i+or9VdOD4Em2z2eFWO4kE1 lgPauxQiLZq/HQMwDViIECA0k8L/rSjltTQyvvxA60pGTT0C6T01eMWMPRKmQJ3p SpQHjrXIh3BNSVWGmh073qEa71RrqVwJV70agv95PMCI1KGzy8hjTf3wLbW3LdGz raUGuapy15LEzu0ebsKx8mxboftzAEWCLJL94wTcwCMfb4k4NY0AgUzbGCWo8JVv A9famEOQXleITta8Nm7Ek1SN5E//1X3PK7qz6l3PhltLj+n+eeulApXUAw2DEQNX YC9xo36xgHdBo0Y= -----END CERTIFICATE-----Generated at Sat Apr 12 09:54:17 2025 by rpki-client