$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer File: 1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer (raw, json) Hash identifier: n/AmyHBEYIcTiMBwy2pBptw3GfVcKNBS+mpyJSeApEQ= Subject key identifier: 1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 685B8F0D71477309F2DA53C5D596216AF47B2E24 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 15:24:04 +0000 Certificate not after: Wed 04 Feb 2026 15:29:04 +0000 Subordinate resources: IP: 131.196.212.0/22 IP: 2801:15:3000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5b:8f:0d:71:47:73:09:f2:da:53:c5:d5:96:21:6a:f4:7b:2e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 15:24:04 2025 GMT Not After : Feb 4 15:29:04 2026 GMT Subject: CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:4e:4c:2b:e7:94:3f:7c:ad:b1:5f:43:28: d3:49:23:92:1f:a3:7d:29:74:dc:f9:4a:e0:a0:de: ef:d4:62:ae:06:81:97:78:34:76:45:72:c0:5d:fd: 6f:83:be:df:3d:b1:e9:87:21:e1:c0:1f:38:be:6c: 7b:7a:7f:d2:76:a2:ab:1f:32:29:17:00:ad:ca:e6: 9d:7e:f0:8f:0c:f0:c7:3a:33:86:cb:71:9b:9d:f1: 9a:e0:6e:0e:d9:16:e0:ae:e8:36:10:e3:39:76:42: 95:62:21:63:fb:37:d8:80:36:39:73:b6:bc:1e:88: 52:33:64:f2:66:47:d3:f2:6b:99:65:1d:87:de:4c: 84:cd:86:24:f2:07:b6:9b:34:5c:72:9b:0b:ee:a5: ec:a5:5b:ca:cd:28:67:a9:b0:27:81:81:5b:b4:34: e1:b8:17:ad:46:29:c4:07:7a:13:34:fa:f9:a9:72: 75:ec:3e:37:d5:56:d4:4e:d3:5f:2b:64:7f:2c:38: fc:48:71:2d:7e:d3:01:a6:b7:47:97:3f:fe:4c:d8: c2:df:2c:da:84:93:8a:33:0f:b6:0c:84:ad:c4:e3: cf:2a:6c:0f:de:46:c2:4f:96:12:fd:d6:ad:51:90: 6f:a3:27:a1:52:26:87:74:3e:64:3f:b7:1c:ac:f1: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.212.0/22 IPv6: 2801:15:3000::/48 Signature Algorithm: sha256WithRSAEncryption 89:9e:63:af:30:ba:e7:8a:71:bb:f1:c9:db:ca:df:33:37:78: 41:f6:2b:bc:f9:0b:80:ba:d7:86:d9:7e:01:6a:d7:e3:2b:05: 6c:ef:db:2c:bf:74:93:b2:43:7f:05:a3:7b:9b:41:ba:ec:49: 6a:12:d6:da:c8:4b:cb:df:9b:77:57:a8:e8:0a:53:a5:69:78: 73:ae:ba:5c:29:11:72:9a:fa:f5:7f:d6:bd:bc:61:29:49:78: f8:0d:99:ec:77:a9:47:ed:2e:42:66:1a:4a:84:14:c8:40:08: 0b:81:56:b4:09:08:0d:28:e9:d7:87:c3:6e:ce:be:69:28:00: c0:9b:36:6f:77:36:da:c2:dc:38:66:15:59:33:0a:33:45:f0: 55:b5:4f:f4:37:29:26:9c:2f:00:78:01:68:b5:50:a7:61:3d: 8d:b8:1b:b8:e8:18:e9:4d:f5:2f:d3:27:e0:b7:f0:e8:92:0e: 9d:45:9f:c4:76:fa:c2:9e:6c:27:9d:b1:11:fb:71:c9:67:20: 57:f7:b6:46:68:5d:0f:8d:41:d2:5a:17:58:f7:c4:28:60:14: c6:e8:3f:9f:6c:7f:c8:d7:52:3f:5b:f5:ff:6b:e9:42:44:ef: 9d:5c:30:ca:8c:b0:33:ea:b8:b4:bb:51:9b:d9:7f:c7:07:ff: 71:79:03:61 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUaFuPDXFHcwny2lPF1ZYhavR7LiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNTI0MDRaFw0yNjAyMDQxNTI5MDRaMDMxMTAvBgNV BAMTKDFCOTA2NkIyQzg5MjNFRDcwRTFCQkQ5QzhFRTE1RjI3M0Q2NzE2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Dk5MK+eUP3ytsV9DKNNJI5If o30pdNz5SuCg3u/UYq4GgZd4NHZFcsBd/W+Dvt89semHIeHAHzi+bHt6f9J2oqsf MikXAK3K5p1+8I8M8Mc6M4bLcZud8Zrgbg7ZFuCu6DYQ4zl2QpViIWP7N9iANjlz trweiFIzZPJmR9Pya5llHYfeTITNhiTyB7abNFxymwvupeylW8rNKGepsCeBgVu0 NOG4F61GKcQHehM0+vmpcnXsPjfVVtRO018rZH8sOPxIcS1+0wGmt0eXP/5M2MLf LNqEk4ozD7YMhK3E488qbA/eRsJPlhL91q1RkG+jJ6FSJod0PmQ/txys8ZojAgMB AAGjggOVMIIDkTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbkGayyJI+1w4b vZyO4V8nPWcW6TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDkwNTQ2MjE4RTkzMjFDOTQ5Q0E1REI3 QjI5RjVBOTk3RkIwNDc1MTlCM0U2N0I1RDNDQUJEQjlCOTM2QjVEMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wOTA1NDYyMThFOTMyMUM5NDlDQTVEQjdCMjlGNUE5OTdGQjA0NzUxOUIz RTY3QjVEM0NBQkRCOUI5MzZCNUQwLzAvMUI5MDY2QjJDODkyM0VENzBFMUJCRDlD OEVFMTVGMjczRDY3MTZFOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCg8TUMA8EAgAC MAkDBwAoAQAVMAAwDQYJKoZIhvcNAQELBQADggEBAImeY68wuueKcbvxydvK3zM3 eEH2K7z5C4C614bZfgFq1+MrBWzv2yy/dJOyQ38Fo3ubQbrsSWoS1trIS8vfm3dX qOgKU6VpeHOuulwpEXKa+vV/1r28YSlJePgNmex3qUftLkJmGkqEFMhACAuBVrQJ CA0o6deHw27OvmkoAMCbNm93NtrC3DhmFVkzCjNF8FW1T/Q3KSacLwB4AWi1UKdh PY24G7joGOlN9S/TJ+C38OiSDp1Fn8R2+sKebCedsRH7cclnIFf3tkZoXQ+NQdJa F1j3xChgFMboP59sf8jXUj9b9f9r6UJE751cMMqMsDPquLS7UZvZf8cH/3F5A2E= -----END CERTIFICATE-----Generated at Sat Apr 5 23:55:48 2025 by rpki-client