$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E9130D019A915F19ADB27283B971267AFC5BC20.cer File: 1E9130D019A915F19ADB27283B971267AFC5BC20.cer (raw, json) Hash identifier: crM5S/rjO0i7Yc7HEn3a80fv/Y+qnGXCgcYOld0v0sw= Subject key identifier: 1E:91:30:D0:19:A9:15:F1:9A:DB:27:28:3B:97:12:67:AF:C5:BC:20 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4A3E6BC4DEE1D134731BFA2B2E6407F308BE39EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/1E9130D019A915F19ADB27283B971267AFC5BC20.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 28 Mar 2025 10:45:03 +0000 Certificate not after: Fri 27 Mar 2026 10:50:03 +0000 Subordinate resources: AS: 274078 IP: 2803:4ad0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3e:6b:c4:de:e1:d1:34:73:1b:fa:2b:2e:64:07:f3:08:be:39:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 28 10:45:03 2025 GMT Not After : Mar 27 10:50:03 2026 GMT Subject: CN=1E9130D019A915F19ADB27283B971267AFC5BC20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:c2:b5:ee:20:5e:6f:07:2f:5a:76:e2:95: 19:dd:09:96:4f:52:40:e5:f1:8a:63:7b:6d:f9:f3: 0b:45:c5:15:79:8c:7d:ec:af:77:60:fd:3b:1e:7e: 5c:86:6b:ab:f4:ee:bb:ae:90:27:44:da:9f:5a:ba: 0f:f8:a4:93:d6:0e:d1:a3:8b:56:48:9f:66:34:d6: 83:7f:23:c3:6a:27:ed:9d:af:d7:1a:b8:f2:a8:42: f7:2b:6c:87:07:6b:85:f1:b2:11:31:48:fa:fb:1a: 56:b4:0c:7d:93:da:eb:01:cd:75:78:76:55:d2:32: 80:95:47:72:7d:31:49:27:c2:07:88:14:50:20:fc: b9:2b:5f:1f:de:67:e4:34:3b:9a:91:42:ce:6e:d5: 14:f6:33:af:18:4e:ed:fa:50:ae:f0:da:14:67:df: 50:20:3c:18:ad:17:94:53:aa:54:8a:0c:0b:02:91: b8:a3:af:f5:03:6d:7d:fc:d3:6e:16:0e:49:93:a8: ce:85:16:6c:29:2c:fa:81:d8:85:f3:b2:db:1c:e9: 60:b1:20:a6:96:d3:02:da:8d:ac:6a:70:65:2b:03: 7d:d9:2b:b7:c9:eb:cd:b4:7c:e5:10:bb:df:74:8a: a7:ff:0a:34:6e:ae:cb:ba:6e:20:8b:36:c5:85:86: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:91:30:D0:19:A9:15:F1:9A:DB:27:28:3B:97:12:67:AF:C5:BC:20 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D842E79B7EC1CDFA94601E3E6814A77255FB16A61DA2455F719057EB8CC5D41A/0/1E9130D019A915F19ADB27283B971267AFC5BC20.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4ad0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274078 Signature Algorithm: sha256WithRSAEncryption 93:2b:15:c0:80:d2:7b:85:55:ae:52:a2:a9:05:44:12:21:b3: 0c:bd:7d:7b:1d:24:c2:b7:bf:f8:16:93:ff:a9:33:0d:20:d4: d2:9b:3b:0e:c7:b6:57:3c:a8:2d:8c:f3:3e:e8:7f:1f:95:56: 3e:2f:37:1c:28:70:1b:ac:83:9d:d1:b4:27:34:5a:30:c9:9e: fe:e3:e2:f8:32:2a:25:66:43:3e:14:7d:bb:d9:ee:e1:13:0b: 20:37:3b:7c:29:6f:54:ba:bf:dc:6f:c3:ad:7e:1c:8f:e2:8b: b3:d0:12:8d:77:8c:02:8f:1a:b2:98:45:12:4b:d7:91:44:93: e3:44:a7:ef:f7:8a:49:73:42:09:45:d0:bb:25:0e:cb:21:a3: d6:d7:51:9f:f6:02:cd:21:4a:1f:77:aa:11:37:1e:a0:6a:01: 6c:34:39:13:44:8f:5d:2c:4e:db:47:3c:57:06:6d:e3:cd:39: 8f:d1:77:db:b4:63:2f:68:9b:50:fb:57:1c:db:29:32:c7:2f: 1e:db:cc:a3:6b:bb:24:89:17:bd:09:bf:67:bb:7c:aa:83:2b: c8:62:9f:21:f9:b3:00:67:ed:8c:6f:22:4d:2c:ae:57:4b:8a: c3:97:8e:9e:b4:2a:53:76:f8:69:f4:61:3e:92:59:ba:a2:e2: bc:53:29:e3 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUSj5rxN7h0TRzG/orLmQH8wi+OewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAzMjgxMDQ1MDNaFw0yNjAzMjcxMDUwMDNaMDMxMTAvBgNV BAMTKDFFOTEzMEQwMTlBOTE1RjE5QURCMjcyODNCOTcxMjY3QUZDNUJDMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJq8K17iBebwcvWnbilRndCZZP UkDl8Ypje2358wtFxRV5jH3sr3dg/TseflyGa6v07ruukCdE2p9aug/4pJPWDtGj i1ZIn2Y01oN/I8NqJ+2dr9cauPKoQvcrbIcHa4XxshExSPr7Gla0DH2T2usBzXV4 dlXSMoCVR3J9MUknwgeIFFAg/LkrXx/eZ+Q0O5qRQs5u1RT2M68YTu36UK7w2hRn 31AgPBitF5RTqlSKDAsCkbijr/UDbX38024WDkmTqM6FFmwpLPqB2IXzstsc6WCx IKaW0wLajaxqcGUrA33ZK7fJ6820fOUQu990iqf/CjRursu6biCLNsWFhogbAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQekTDQGakV8Zrb Jyg7lxJnr8W8IDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDg0MkU3OUI3RUMxQ0RGQTk0NjAxRTNF NjgxNEE3NzI1NUZCMTZBNjFEQTI0NTVGNzE5MDU3RUI4Q0M1RDQxQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EODQyRTc5QjdFQzFDREZBOTQ2MDFFM0U2ODE0QTc3MjU1RkIxNkE2MURB MjQ1NUY3MTkwNTdFQjhDQzVENDFBLzAvMUU5MTMwRDAxOUE5MTVGMTlBREIyNzI4 M0I5NzEyNjdBRkM1QkMyMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANK0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELp4wDQYJKoZIhvcNAQELBQADggEBAJMrFcCA 0nuFVa5SoqkFRBIhswy9fXsdJMK3v/gWk/+pMw0g1NKbOw7Htlc8qC2M8z7ofx+V Vj4vNxwocBusg53RtCc0WjDJnv7j4vgyKiVmQz4UfbvZ7uETCyA3O3wpb1S6v9xv w61+HI/ii7PQEo13jAKPGrKYRRJL15FEk+NEp+/3iklzQglF0LslDssho9bXUZ/2 As0hSh93qhE3HqBqAWw0ORNEj10sTttHPFcGbePNOY/Rd9u0Yy9om1D7VxzbKTLH Lx7bzKNruySJF70Jv2e7fKqDK8hinyH5swBn7YxvIk0srldLisOXjp60KlN2+Gn0 YT6SWbqi4rxTKeM= -----END CERTIFICATE-----Generated at Sat Apr 12 09:57:10 2025 by rpki-client