$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer File: 1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer (raw, json) Hash identifier: 9zzRG6QAb1nkObaDqyU6WfarF8YCQCuTPtQt9IpxMN8= Subject key identifier: 1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3A3840991AA3EA81B1316841C0B969425F4A5DFB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:01:58 +0000 Certificate not after: Wed 04 Feb 2026 20:06:58 +0000 Subordinate resources: IP: 45.5.164.0/22 IP: 2801:17:d000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:38:40:99:1a:a3:ea:81:b1:31:68:41:c0:b9:69:42:5f:4a:5d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:01:58 2025 GMT Not After : Feb 4 20:06:58 2026 GMT Subject: CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:ee:f0:7f:d9:3a:3e:da:00:e8:0f:89:35: c3:81:31:66:7c:59:44:78:a0:72:29:ed:30:59:90: dd:fc:05:98:cd:15:3c:9e:31:96:a3:bb:32:15:9b: c4:ae:f4:5d:a7:8e:63:1d:10:eb:4f:48:4e:ec:e2: c2:67:c1:75:c2:e6:2d:b8:a3:29:01:79:e0:6d:17: cd:12:56:2b:1b:ca:28:cf:1c:b1:c0:ad:5c:f4:c9: e2:fe:3c:08:78:17:67:86:7d:0f:d7:8a:e3:33:15: 35:20:3a:cf:21:70:0e:17:94:64:5a:7a:08:62:93: 97:fa:31:df:0d:5f:c4:10:93:67:24:6b:7e:ec:7b: bd:3f:89:2f:f8:83:5a:32:12:eb:e5:0a:08:53:aa: 9f:c6:3f:39:35:64:b6:43:ee:cd:a1:d8:70:4d:c6: 83:a6:f8:8e:a8:43:aa:d7:74:7c:88:c2:8d:a9:3f: 20:48:e9:58:95:7d:bb:e9:72:29:32:cd:89:45:a0: 11:40:fb:56:a8:13:5c:5e:0c:c0:77:aa:f1:3d:b8: 5e:cd:00:94:8b:66:23:5e:0b:7e:0b:7e:81:55:07: 2b:f4:ac:a5:6a:85:20:55:dc:3d:ab:b8:26:97:09: 10:4b:43:81:bd:62:ad:bb:89:b4:c1:58:e3:d5:fa: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.164.0/22 IPv6: 2801:17:d000::/48 Signature Algorithm: sha256WithRSAEncryption 43:87:95:48:7a:bc:5d:b8:80:f5:ea:f6:d4:17:65:55:52:ce: f2:96:6b:60:66:85:0d:7f:0c:b9:06:b3:25:3b:f2:b2:5e:1f: e6:e3:aa:87:2e:84:a1:8c:84:b7:e8:76:a2:02:a8:56:6e:5e: 95:9a:45:55:57:c7:fe:e0:13:88:59:de:07:1f:b6:5b:2d:8e: 50:3d:5c:b3:a5:1b:be:aa:7c:da:28:8a:49:8b:ec:74:b0:9e: 8b:bc:af:b9:3e:3c:19:8d:44:e0:08:a7:8c:74:44:89:45:e5: c6:10:73:06:8e:1b:58:0e:f3:9e:e5:c6:5f:29:b0:da:36:82: 77:f2:e9:6b:dd:d8:4a:6c:a3:af:29:36:d8:ed:ba:4a:8f:39: b2:2f:b9:81:14:02:79:ec:e0:47:a5:4f:aa:6e:88:00:c6:cd: ef:0e:63:cf:f2:7f:53:de:ea:d2:5a:b8:84:21:4f:24:a5:b8: 14:d8:2d:97:3b:79:62:eb:56:de:f3:ae:5b:67:f5:dc:8f:f6: 99:17:59:66:f7:cc:2e:05:c7:21:2b:b6:fc:d5:5b:c4:10:ea: ce:21:cc:69:52:d0:d4:7b:18:44:33:57:cd:f1:0c:b9:02:21: 63:d8:f7:2c:7f:d0:dc:c8:94:c1:f1:f6:dc:c7:04:3b:57:0e: cd:99:1e:b5 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUOjhAmRqj6oGxMWhBwLlpQl9KXfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMDAxNThaFw0yNjAyMDQyMDA2NThaMDMxMTAvBgNV BAMTKDFENzQ1RUJGMzVGNUVCOUM3MEM0MkQ1MzkyREM5Nzc2QTdFRDJGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Q+7wf9k6PtoA6A+JNcOBMWZ8 WUR4oHIp7TBZkN38BZjNFTyeMZajuzIVm8Su9F2njmMdEOtPSE7s4sJnwXXC5i24 oykBeeBtF80SVisbyijPHLHArVz0yeL+PAh4F2eGfQ/XiuMzFTUgOs8hcA4XlGRa eghik5f6Md8NX8QQk2cka37se70/iS/4g1oyEuvlCghTqp/GPzk1ZLZD7s2h2HBN xoOm+I6oQ6rXdHyIwo2pPyBI6ViVfbvpcikyzYlFoBFA+1aoE1xeDMB3qvE9uF7N AJSLZiNeC34LfoFVByv0rKVqhSBV3D2ruCaXCRBLQ4G9Yq27ibTBWOPV+tAjAgMB AAGjggOVMIIDkTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQddF6/NfXrnHDE LVOS3Jd2p+0vwjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTExNTgxNUYzOUFCM0I2NjFDRThEMzNE QzYzNUVDNzMyNkE0QUQ5RkIyMDNEODM5NkQ1NjY2RUQ2N0JBNkY3Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMTE1ODE1RjM5QUIzQjY2MUNFOEQzM0RDNjM1RUM3MzI2QTRBRDlGQjIw M0Q4Mzk2RDU2NjZFRDY3QkE2Rjc2LzAvMUQ3NDVFQkYzNUY1RUI5QzcwQzQyRDUz OTJEQzk3NzZBN0VEMkZDMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLQWkMA8EAgAC MAkDBwAoAQAX0AAwDQYJKoZIhvcNAQELBQADggEBAEOHlUh6vF24gPXq9tQXZVVS zvKWa2BmhQ1/DLkGsyU78rJeH+bjqocuhKGMhLfodqICqFZuXpWaRVVXx/7gE4hZ 3gcftlstjlA9XLOlG76qfNooikmL7HSwnou8r7k+PBmNROAIp4x0RIlF5cYQcwaO G1gO857lxl8psNo2gnfy6Wvd2Epso68pNtjtukqPObIvuYEUAnns4EelT6puiADG ze8OY8/yf1Pe6tJauIQhTySluBTYLZc7eWLrVt7zrltn9dyP9pkXWWb3zC4FxyEr tvzVW8QQ6s4hzGlS0NR7GEQzV83xDLkCIWPY9yx/0NzIlMHx9tzHBDtXDs2ZHrU= -----END CERTIFICATE-----Generated at Mon Apr 14 12:34:58 2025 by rpki-client