$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer File: 1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer (raw, json) Hash identifier: lYKdQlHGEIyj3CoDC/2o4EgB4hH/agiCT/r2tb4tBnQ= Subject key identifier: 1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 03161259FA6497041FE26EFBC64284DD5AF89125 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 13:12:36 +0000 Certificate not after: Wed 04 Feb 2026 13:17:36 +0000 Subordinate resources: AS: 263196 IP: 143.202.136.0/22 IP: 186.148.80.0/21 IP: 2803:4b00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:16:12:59:fa:64:97:04:1f:e2:6e:fb:c6:42:84:dd:5a:f8:91:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 13:12:36 2025 GMT Not After : Feb 4 13:17:36 2026 GMT Subject: CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:1c:e3:5e:e7:33:82:97:19:fa:59:ac:80: 6a:68:70:f7:7c:6b:55:91:f2:e5:ac:54:fb:4d:d2: 8c:89:69:93:fd:5d:db:84:93:da:c1:be:0f:8c:12: 12:e8:9d:ae:12:0d:7f:f8:b3:ec:14:28:87:29:62: 54:9c:88:c7:05:2b:13:79:db:27:ee:33:eb:16:e7: bd:35:8c:8f:04:e1:5b:89:57:ba:d2:30:01:7b:b5: c7:ed:c7:9c:a3:e4:05:58:6b:20:b9:a0:c4:69:ec: 6d:14:f6:1e:09:24:63:38:b8:18:58:aa:9d:41:3b: 96:18:e4:ad:5d:de:ee:73:4d:da:19:45:99:bf:b2: 2f:4e:db:c0:b1:20:7e:85:40:c6:5f:9a:fb:5d:a6: 20:12:ed:98:a6:08:8c:7b:b4:1b:2f:a0:7d:d9:bd: 62:48:b7:d3:63:14:75:c5:da:72:74:cf:95:15:eb: 07:9a:6f:a4:a9:b0:6c:64:63:23:a6:54:b1:a1:e0: 7e:c0:f5:8a:a8:3f:ff:a5:19:08:f0:99:84:3f:e7: 15:47:aa:70:6b:74:77:37:98:40:99:e7:f7:51:77: 4b:5f:87:42:8a:df:41:8d:87:08:82:41:c0:86:7c: 5a:1a:e2:f2:e5:e6:fb:d4:a5:b4:76:1d:43:6c:4b: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.136.0/22 186.148.80.0/21 IPv6: 2803:4b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263196 Signature Algorithm: sha256WithRSAEncryption 39:5c:9b:7c:f0:c6:7f:0a:87:07:20:d1:d5:bf:9c:ae:eb:6b: 0a:31:b8:00:5c:0f:d6:04:e0:de:9d:76:1b:00:c2:52:2d:17: e1:16:65:6e:e9:bb:7d:f2:24:d3:b4:17:5d:16:c2:07:7c:2b: a2:ad:c3:8e:c8:10:7a:b4:c4:d5:ea:4d:75:8b:16:f2:eb:b5: 56:e6:01:bb:36:3b:dd:64:65:0d:4e:f9:de:a1:d5:90:3c:4d: 9c:d7:3a:52:ea:15:e8:80:60:d4:f0:d8:ff:08:0e:05:8c:dd: 78:28:84:65:a9:a6:33:c0:c7:0f:5a:69:f1:d6:c4:1c:18:1c: 94:91:29:db:3e:27:43:7f:ea:d3:a4:4d:5d:b3:7d:07:30:90: 4f:bd:93:34:21:2c:70:a4:6f:81:34:41:b1:6d:55:3f:a8:d2: be:4a:23:60:7a:02:e1:21:c5:e6:70:ff:54:e4:27:86:bd:c6: 8d:63:72:4f:d3:83:e9:e0:77:f3:dd:1c:a1:cd:55:a8:fb:a4: 02:b6:c9:b1:cf:5f:c6:4b:7e:79:3a:84:b3:88:1d:bc:01:06: 98:9f:fd:4f:5d:b0:b9:c2:e9:6e:73:0f:c5:bd:41:81:3b:4b: 7a:7c:5b:cb:ba:a6:7b:15:94:2b:51:c8:9d:88:08:8d:ec:4d: 0f:1a:31:0d -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUAxYSWfpklwQf4m77xkKE3Vr4kSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMzEyMzZaFw0yNjAyMDQxMzE3MzZaMDMxMTAvBgNV BAMTKDFCRjZBNEQ3QzBGOTU0RDdERTk0RUY0MTdDRDQ1M0I4QTQyMTc4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZhzjXuczgpcZ+lmsgGpocPd8 a1WR8uWsVPtN0oyJaZP9XduEk9rBvg+MEhLona4SDX/4s+wUKIcpYlSciMcFKxN5 2yfuM+sW5701jI8E4VuJV7rSMAF7tcftx5yj5AVYayC5oMRp7G0U9h4JJGM4uBhY qp1BO5YY5K1d3u5zTdoZRZm/si9O28CxIH6FQMZfmvtdpiAS7ZimCIx7tBsvoH3Z vWJIt9NjFHXF2nJ0z5UV6weab6SpsGxkYyOmVLGh4H7A9YqoP/+lGQjwmYQ/5xVH qnBrdHc3mECZ5/dRd0tfh0KK30GNhwiCQcCGfFoa4vLl5vvUpbR2HUNsS6szAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb9qTXwPlU196U 70F81FO4pCF4YDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjRDNDVBMkNEMkU0MEUxODhDMEU2Njcy RDAxMTQ2MUU2MEE3OThGM0Y2MzNCNEJGOEU2RTlBRjk5OEYyMDBGNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNEM0NUEyQ0QyRTQwRTE4OEMwRTY2NzJEMDExNDYxRTYwQTc5OEYzRjYz M0I0QkY4RTZFOUFGOTk4RjIwMEY0LzAvMUJGNkE0RDdDMEY5NTREN0RFOTRFRjQx N0NENDUzQjhBNDIxNzg2MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCj8qIAwQDupRQ MA0EAgACMAcDBQAoA0sAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEHDANBgkq hkiG9w0BAQsFAAOCAQEAOVybfPDGfwqHByDR1b+crutrCjG4AFwP1gTg3p12GwDC Ui0X4RZlbum7ffIk07QXXRbCB3wroq3DjsgQerTE1epNdYsW8uu1VuYBuzY73WRl DU753qHVkDxNnNc6UuoV6IBg1PDY/wgOBYzdeCiEZammM8DHD1pp8dbEHBgclJEp 2z4nQ3/q06RNXbN9BzCQT72TNCEscKRvgTRBsW1VP6jSvkojYHoC4SHF5nD/VOQn hr3GjWNyT9OD6eB3890coc1VqPukArbJsc9fxkt+eTqEs4gdvAEGmJ/9T12wucLp bnMPxb1BgTtLenxby7qmexWUK1HInYgIjexNDxoxDQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:07 2025 by rpki-client