$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer File: 1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer (raw, json) Hash identifier: ouORhye4B34lFQjsQOJWiNYu9pNOi3F/BD+NcgRLVf0= Subject key identifier: 1D:07:C2:B7:CB:C7:C5:75:F5:78:D3:D3:BA:24:F0:3E:A5:DC:05:1D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 51FA08EB5A2903E1BB65E8A6A755E04BCA03C21A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:10:35 +0000 Certificate not after: Tue 03 Feb 2026 23:15:35 +0000 Subordinate resources: AS: 272914 IP: 2803:2e90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:fa:08:eb:5a:29:03:e1:bb:65:e8:a6:a7:55:e0:4b:ca:03:c2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:10:35 2025 GMT Not After : Feb 3 23:15:35 2026 GMT Subject: CN=1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:47:66:c2:96:69:f3:ef:2c:4f:28:7e:ec:1b: de:31:b3:57:cf:f4:16:cb:45:9b:3a:82:b6:61:89: dd:b4:d9:c1:96:81:70:b2:ad:1a:ca:11:6e:f6:8c: d6:c4:26:55:a2:7c:a0:12:98:b7:7b:cb:a5:73:11: 94:df:43:8b:4d:c3:d3:42:64:00:69:20:61:70:8f: 2a:14:2f:a4:cf:51:d1:b7:c1:ff:0e:a2:2b:1b:a3: b6:88:91:a1:d2:0d:0e:66:20:90:5e:6d:32:a6:92: 32:c6:c2:dc:a9:f8:1b:6a:34:01:7d:53:2e:6a:e5: 59:75:11:ad:74:a7:7b:06:f5:c0:9b:b0:4b:9f:72: b4:c9:e8:1a:1c:e4:60:1b:6d:06:cf:33:69:49:d5: fa:de:1c:7a:a4:31:93:df:bf:f8:64:62:b5:22:7a: 3a:38:dd:6b:1e:1d:a5:f0:0d:db:f7:25:27:9c:e9: 9f:4a:97:ae:0d:70:7b:7a:33:24:81:fc:1a:8c:ed: f7:9f:b1:34:e3:42:c0:f0:06:ad:46:99:a0:3a:01: 3f:d5:ce:cb:b2:3b:af:01:1d:e6:7c:f4:91:9f:dd: 23:6c:68:a4:e6:66:90:83:32:2e:45:19:84:61:b0: ba:d7:f1:82:b1:da:00:bb:a8:42:a1:b7:ae:bf:08: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:07:C2:B7:CB:C7:C5:75:F5:78:D3:D3:BA:24:F0:3E:A5:DC:05:1D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2e90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272914 Signature Algorithm: sha256WithRSAEncryption 74:48:9b:dd:b8:55:4f:11:a6:23:1f:27:b1:c3:9d:15:09:20: 77:8a:be:61:1c:1a:a7:94:a2:ef:85:a0:14:2c:14:d5:8e:f0: 47:a5:0f:34:96:69:de:6f:b0:3a:c7:07:d4:0d:b4:cc:49:62: 36:6f:b0:c1:31:04:7e:16:cc:0c:34:1d:a9:b0:b3:99:2a:05: 76:c6:2e:fb:fe:d6:2d:bd:5c:40:7a:4b:9c:1e:24:fc:92:2f: a9:a4:5c:a7:f8:b4:92:9a:d7:28:a9:53:1f:f7:a1:fc:bc:bc: 73:a0:87:80:15:b6:bd:8a:f1:0e:12:9c:cf:80:60:0d:ee:71: a7:2e:a2:ee:aa:e8:c7:ef:5e:66:95:8b:aa:91:e6:91:89:ed: b1:24:04:d0:5f:e6:8d:4f:10:75:5d:a9:81:fb:d1:a4:58:bb: ee:72:46:e3:7a:4e:f9:e0:83:91:42:fa:9e:45:ef:46:e2:a3: 32:55:1f:da:6f:4f:53:c0:0a:bb:fe:e8:37:40:ca:6a:b5:fb: e5:0b:e1:3c:ae:54:ad:14:5b:c7:1e:d3:d2:63:2d:e9:c9:cb: 86:fa:07:30:a7:7d:9a:ec:1d:63:ce:26:43:aa:3f:b7:a4:91: ba:13:69:8e:97:85:38:a8:30:dc:2e:7c:5a:a1:31:58:01:d4: a4:28:ba:dc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUUfoI61opA+G7Zeimp1XgS8oDwhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzEwMzVaFw0yNjAyMDMyMzE1MzVaMDMxMTAvBgNV BAMTKDFEMDdDMkI3Q0JDN0M1NzVGNTc4RDNEM0JBMjRGMDNFQTVEQzA1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCR2bClmnz7yxPKH7sG94xs1fP 9BbLRZs6grZhid202cGWgXCyrRrKEW72jNbEJlWifKASmLd7y6VzEZTfQ4tNw9NC ZABpIGFwjyoUL6TPUdG3wf8Ooisbo7aIkaHSDQ5mIJBebTKmkjLGwtyp+BtqNAF9 Uy5q5Vl1Ea10p3sG9cCbsEufcrTJ6Boc5GAbbQbPM2lJ1freHHqkMZPfv/hkYrUi ejo43WseHaXwDdv3JSec6Z9Kl64NcHt6MySB/BqM7fefsTTjQsDwBq1GmaA6AT/V zsuyO68BHeZ89JGf3SNsaKTmZpCDMi5FGYRhsLrX8YKx2gC7qEKht66/CLAxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdB8K3y8fFdfV4 09O6JPA+pdwFHTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjI3ODg2Q0ZGNjVEMjMwNEEyOTdBRjhE NEY0ODgyNUY4NjYzQTBCMEZENzA1NEUwMUNGMjZEOEQ3MzE0N0FGQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMjc4ODZDRkY2NUQyMzA0QTI5N0FGOEQ0RjQ4ODI1Rjg2NjNBMEIwRkQ3 MDU0RTAxQ0YyNkQ4RDczMTQ3QUZCLzAvMUQwN0MyQjdDQkM3QzU3NUY1NzhEM0Qz QkEyNEYwM0VBNURDMDUxRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMukDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKhIwDQYJKoZIhvcNAQELBQADggEBAHRIm924 VU8RpiMfJ7HDnRUJIHeKvmEcGqeUou+FoBQsFNWO8EelDzSWad5vsDrHB9QNtMxJ YjZvsMExBH4WzAw0Hamws5kqBXbGLvv+1i29XEB6S5weJPySL6mkXKf4tJKa1yip Ux/3ofy8vHOgh4AVtr2K8Q4SnM+AYA3ucacuou6q6MfvXmaVi6qR5pGJ7bEkBNBf 5o1PEHVdqYH70aRYu+5yRuN6Tvngg5FC+p5F70biozJVH9pvT1PACrv+6DdAymq1 ++UL4TyuVK0UW8ce09JjLenJy4b6BzCnfZrsHWPOJkOqP7ekkboTaY6XhTioMNwu fFqhMVgB1KQoutw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:28 2025 by rpki-client