$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer File: 1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.cer (raw, json) Hash identifier: MfLLX1dU1TpW4JG3ZdUcD91ZzuW9h902u+XMG/C0bK4= Subject key identifier: 1B:E0:79:B7:DC:5A:D1:40:CF:56:9F:92:71:CA:FC:1F:7B:63:95:8A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 59BF8D846C5751AC722EA57CAB1A681543C72B98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 07:09:10 +0000 Certificate not after: Wed 04 Feb 2026 07:14:10 +0000 Subordinate resources: AS: 272942 IP: 2803:990::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bf:8d:84:6c:57:51:ac:72:2e:a5:7c:ab:1a:68:15:43:c7:2b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 07:09:10 2025 GMT Not After : Feb 4 07:14:10 2026 GMT Subject: CN=1BE079B7DC5AD140CF569F9271CAFC1F7B63958A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:a2:f9:a8:43:19:f5:9e:1a:b3:1a:7c:3f: d0:14:5b:1a:0b:30:ed:06:81:12:1e:3d:1e:96:34: dc:f7:d5:70:04:0c:bd:8c:9e:b9:f1:54:33:07:14: 60:1a:43:29:3f:80:fe:27:c5:3a:1e:5f:a3:26:e3: a0:77:1d:a8:d2:fc:2e:f2:30:ec:5a:de:3c:91:c0: 5a:fb:87:73:91:c6:77:c7:bc:20:63:7b:ed:d4:b7: c1:b1:f9:37:db:33:ea:8d:91:e2:46:d8:56:60:0d: 95:16:be:94:82:52:55:5c:93:ea:4c:8d:ee:7c:79: 6b:b6:27:ff:23:74:76:49:ed:27:4b:52:05:9b:3b: dd:67:1b:ef:62:d6:cf:1f:31:30:ca:12:a6:96:64: f0:a6:ab:5b:90:21:e9:1a:0a:34:00:fc:40:31:12: c4:b9:de:8a:89:36:87:56:9e:af:ed:c5:25:54:ea: a3:9e:cd:cd:f9:e4:7b:fc:d9:75:3b:7d:5a:89:2d: 67:60:de:65:1b:52:17:a5:26:93:fb:f5:21:93:01: 79:80:f4:c8:69:f1:bb:e3:a1:6c:37:5e:91:9a:c6: 4c:91:ae:7c:6f:85:0f:52:24:d9:90:44:15:43:8d: 0a:38:0e:b3:04:a4:aa:32:fc:71:0f:11:39:fd:e8: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:E0:79:B7:DC:5A:D1:40:CF:56:9F:92:71:CA:FC:1F:7B:63:95:8A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1F75DCA34F0A409D21239F59F82A8722452836B63C2476E02044398C818EA231/0/1BE079B7DC5AD140CF569F9271CAFC1F7B63958A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:990::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272942 Signature Algorithm: sha256WithRSAEncryption d2:a2:cd:f9:5c:22:7c:29:be:d7:f7:b4:96:1c:ff:33:1a:9d: 51:9e:ad:e4:b1:50:7e:1c:4a:fd:58:a1:61:ca:d6:b8:9a:9b: 5e:4c:5b:f0:8f:63:87:44:17:e1:9c:01:f7:e4:40:43:cf:3f: d5:38:9f:8c:18:c2:44:07:bc:d1:db:b2:4e:66:42:62:28:53: 46:42:34:fa:b7:c6:e9:f8:7d:7e:f5:5c:24:32:2c:d2:17:ce: 94:a1:d6:a0:c8:01:c3:fc:84:13:31:1b:84:51:8b:06:28:70: af:8e:50:2e:e7:bf:a8:00:5d:76:c5:09:bd:e6:04:21:de:e7: 4b:8b:f6:1a:26:78:e0:3f:d1:6a:ed:52:8f:ba:18:c1:8d:f4: 84:6b:49:c2:21:b8:2c:ab:52:4e:2e:79:2f:ac:f6:fb:10:ae: 45:a0:71:80:a8:52:93:c8:f1:64:32:06:d4:92:7c:4e:d4:cc: 71:5b:05:84:54:18:39:9c:d2:c5:a3:c3:e9:f8:73:d6:e3:25: 09:73:aa:73:57:d8:36:e7:31:78:25:5d:05:bc:50:cb:b0:f7: cf:d2:f7:ef:8d:69:2c:51:e5:ea:a4:e9:15:b0:03:28:1f:d5: 2d:63:1b:4e:5c:dc:40:82:f1:80:bb:04:58:b2:34:b0:16:6c: 9b:23:d3:cb -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUWb+NhGxXUaxyLqV8qxpoFUPHK5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNzA5MTBaFw0yNjAyMDQwNzE0MTBaMDMxMTAvBgNV BAMTKDFCRTA3OUI3REM1QUQxNDBDRjU2OUY5MjcxQ0FGQzFGN0I2Mzk1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPq6L5qEMZ9Z4asxp8P9AUWxoL MO0GgRIePR6WNNz31XAEDL2MnrnxVDMHFGAaQyk/gP4nxToeX6Mm46B3HajS/C7y MOxa3jyRwFr7h3ORxnfHvCBje+3Ut8Gx+TfbM+qNkeJG2FZgDZUWvpSCUlVck+pM je58eWu2J/8jdHZJ7SdLUgWbO91nG+9i1s8fMTDKEqaWZPCmq1uQIekaCjQA/EAx EsS53oqJNodWnq/txSVU6qOezc355Hv82XU7fVqJLWdg3mUbUhelJpP79SGTAXmA 9Mhp8bvjoWw3XpGaxkyRrnxvhQ9SJNmQRBVDjQo4DrMEpKoy/HEPETn96Is7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb4Hm33FrRQM9W n5Jxyvwfe2OVijAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUY3NURDQTM0RjBBNDA5RDIxMjM5RjU5 RjgyQTg3MjI0NTI4MzZCNjNDMjQ3NkUwMjA0NDM5OEM4MThFQTIzMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRjc1RENBMzRGMEE0MDlEMjEyMzlGNTlGODJBODcyMjQ1MjgzNkI2M0My NDc2RTAyMDQ0Mzk4QzgxOEVBMjMxLzAvMUJFMDc5QjdEQzVBRDE0MENGNTY5Rjky NzFDQUZDMUY3QjYzOTU4QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMJkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKi4wDQYJKoZIhvcNAQELBQADggEBANKizflc Inwpvtf3tJYc/zManVGereSxUH4cSv1YoWHK1riam15MW/CPY4dEF+GcAffkQEPP P9U4n4wYwkQHvNHbsk5mQmIoU0ZCNPq3xun4fX71XCQyLNIXzpSh1qDIAcP8hBMx G4RRiwYocK+OUC7nv6gAXXbFCb3mBCHe50uL9homeOA/0WrtUo+6GMGN9IRrScIh uCyrUk4ueS+s9vsQrkWgcYCoUpPI8WQyBtSSfE7UzHFbBYRUGDmc0sWjw+n4c9bj JQlzqnNX2DbnMXglXQW8UMuw98/S9++NaSxR5eqk6RWwAygf1S1jG05c3ECC8YC7 BFiyNLAWbJsj08s= -----END CERTIFICATE-----Generated at Sat Apr 12 09:51:54 2025 by rpki-client