$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.cer File: 1EB366A35C302CF4E20900E65713C5A4AC4C0424.cer (raw, json) Hash identifier: Bg6vD4tcVP9P0thhOag4KNnnw/f0Hr2slw3o1V2sVGU= Subject key identifier: 1E:B3:66:A3:5C:30:2C:F4:E2:09:00:E6:57:13:C5:A4:AC:4C:04:24 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5F637A840D872EE3661E1060F7B5064486F7A758 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 26 Mar 2025 23:57:30 +0000 Certificate not after: Thu 26 Mar 2026 00:02:30 +0000 Subordinate resources: AS: 273007 IP: 2803:5c50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:63:7a:84:0d:87:2e:e3:66:1e:10:60:f7:b5:06:44:86:f7:a7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 26 23:57:30 2025 GMT Not After : Mar 26 00:02:30 2026 GMT Subject: CN=1EB366A35C302CF4E20900E65713C5A4AC4C0424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:0d:c5:02:93:d4:5e:74:96:87:c4:e5:22: 54:53:cd:19:1e:ba:0d:9b:d6:eb:ef:ff:f2:8a:3b: 0f:f1:66:29:ab:bd:b8:79:3b:df:57:0c:28:47:92: 5b:3b:0d:b1:37:49:14:5e:fc:d7:05:80:ae:2b:31: 76:23:0b:8b:bc:66:42:b3:d5:ee:29:c7:81:0f:46: 53:dd:a6:61:16:69:ba:3e:ba:fb:2f:19:7c:08:c5: 22:69:7e:09:5f:2a:3b:61:cf:77:58:ec:60:52:4c: 69:8e:11:7c:a2:68:60:e1:93:1f:0c:76:d8:56:37: 65:66:74:00:70:44:47:c8:c3:a5:e0:e3:78:6c:60: a3:0f:fe:d1:69:fd:c5:18:87:28:5f:9c:49:98:a2: 23:19:9b:f3:b1:d0:cc:12:e1:d3:24:17:67:17:4e: fa:dc:70:b5:fe:b5:72:a9:85:20:5f:4e:75:ed:9f: 25:7c:82:fc:cd:7d:c3:ca:b5:ab:21:21:59:93:86: a4:c5:c7:72:5d:ef:fa:e5:7a:90:f3:26:00:bc:b8: b7:a1:4e:5c:6f:cb:1e:88:52:61:9f:00:e8:ac:7c: 32:a8:dc:a5:84:a2:04:da:67:6d:6a:c0:b2:cf:01: 82:b1:49:3d:ec:14:f4:63:32:7a:95:b5:4d:61:10: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:B3:66:A3:5C:30:2C:F4:E2:09:00:E6:57:13:C5:A4:AC:4C:04:24 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5c50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273007 Signature Algorithm: sha256WithRSAEncryption 69:fd:5f:3d:10:94:29:24:c8:e7:c0:15:28:87:bf:e2:2b:29: 32:d2:b7:c1:72:51:ef:50:a8:29:fa:0b:e3:0f:61:95:86:c0: bc:4f:3b:9f:a6:89:f7:60:f1:4f:68:c4:d7:59:64:d8:c6:8a: 6b:33:42:26:87:79:d4:3b:b9:93:70:c4:d3:1d:ff:22:28:12: 2f:87:9d:5f:f5:0d:1a:74:35:32:ad:8c:dc:4f:df:7a:8c:62: 86:1c:3d:ae:73:fb:b0:87:61:c9:f6:cc:5b:2f:f4:23:2f:9b: 03:37:b2:b6:42:de:e9:2c:a5:6c:94:ab:54:75:83:a0:8f:b4: e0:d2:0f:12:92:9b:99:36:8b:a8:9d:28:72:8b:4d:31:f4:8e: 0b:a5:39:51:42:0a:f6:4c:c5:01:13:9c:84:fd:94:83:12:0c: e0:bd:c0:92:71:b5:1e:1a:52:b2:0f:7c:22:4c:1a:bf:8b:7e: 0d:f5:d6:a0:8c:dc:c6:3e:68:f9:2c:34:46:58:06:0d:ac:c4: 1f:ac:e6:c4:1c:ad:ec:bf:9b:1f:82:14:d5:41:dd:1e:79:8a: 26:44:67:c4:29:01:f9:cf:9f:3b:1d:ff:f6:2d:44:86:e0:77: 4a:73:b4:28:af:23:0a:2d:42:d4:50:90:6e:fd:07:0d:37:0a: 95:2f:16:15 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUX2N6hA2HLuNmHhBg97UGRIb3p1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAzMjYyMzU3MzBaFw0yNjAzMjYwMDAyMzBaMDMxMTAvBgNV BAMTKDFFQjM2NkEzNUMzMDJDRjRFMjA5MDBFNjU3MTNDNUE0QUM0QzA0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhw3FApPUXnSWh8TlIlRTzRke ug2b1uvv//KKOw/xZimrvbh5O99XDChHkls7DbE3SRRe/NcFgK4rMXYjC4u8ZkKz 1e4px4EPRlPdpmEWabo+uvsvGXwIxSJpfglfKjthz3dY7GBSTGmOEXyiaGDhkx8M dthWN2VmdABwREfIw6Xg43hsYKMP/tFp/cUYhyhfnEmYoiMZm/Ox0MwS4dMkF2cX TvrccLX+tXKphSBfTnXtnyV8gvzNfcPKtashIVmThqTFx3Jd7/rlepDzJgC8uLeh Tlxvyx6IUmGfAOisfDKo3KWEogTaZ21qwLLPAYKxST3sFPRjMnqVtU1hELKBAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQes2ajXDAs9OIJ AOZXE8WkrEwEJDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzZFNDFENTQwMDI2RTA1MTFDRkMyOTVF MzNFMjlBMEJBODZBMzVBMkI1RTA5QUU4QTlERUQ2Nzk0QkQ1N0VCNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNkU0MUQ1NDAwMjZFMDUxMUNGQzI5NUUzM0UyOUEwQkE4NkEzNUEyQjVF MDlBRThBOURFRDY3OTRCRDU3RUI2LzAvMUVCMzY2QTM1QzMwMkNGNEUyMDkwMEU2 NTcxM0M1QTRBQzRDMDQyNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANcUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKm8wDQYJKoZIhvcNAQELBQADggEBAGn9Xz0Q lCkkyOfAFSiHv+IrKTLSt8FyUe9QqCn6C+MPYZWGwLxPO5+mifdg8U9oxNdZZNjG imszQiaHedQ7uZNwxNMd/yIoEi+HnV/1DRp0NTKtjNxP33qMYoYcPa5z+7CHYcn2 zFsv9CMvmwM3srZC3ukspWyUq1R1g6CPtODSDxKSm5k2i6idKHKLTTH0jgulOVFC CvZMxQETnIT9lIMSDOC9wJJxtR4aUrIPfCJMGr+Lfg311qCM3MY+aPksNEZYBg2s xB+s5sQcrey/mx+CFNVB3R55iiZEZ8QpAfnPnzsd//YtRIbgd0pztCivIwotQtRQ kG79Bw03CpUvFhU= -----END CERTIFICATE-----Generated at Sat Apr 12 09:51:58 2025 by rpki-client