$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer File: 1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer (raw, json) Hash identifier: KmcBKg+HAGsf1OVhKNVeb+b0MVfvPThBkHqdZeNpM+0= Subject key identifier: 1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1056A31D532A91458FE6A2DC62D3B99A7F472844 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 04:09:36 +0000 Certificate not after: Thu 05 Feb 2026 04:14:36 +0000 Subordinate resources: AS: 267731 IP: 45.166.76.0 -- 45.166.78.255 IP: 2803:95a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:56:a3:1d:53:2a:91:45:8f:e6:a2:dc:62:d3:b9:9a:7f:47:28:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 04:09:36 2025 GMT Not After : Feb 5 04:14:36 2026 GMT Subject: CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:f8:3c:86:b9:23:62:5c:a4:47:d4:6d:f6: 2b:6e:a9:f6:82:15:4d:a7:dd:4a:aa:09:f3:56:b7: 8d:cc:2e:0e:6c:19:ee:a4:48:70:88:5e:99:f0:5b: 4a:e3:94:94:39:2b:e5:7c:c1:c1:63:0b:3f:33:22: 71:60:8b:38:4a:02:fa:56:76:cf:2c:9e:0d:a4:c7: 4d:de:95:a0:6b:a4:57:91:1e:3d:97:75:69:8b:02: 86:1d:4f:4f:1f:14:88:b6:52:2b:65:55:50:40:7f: 01:89:da:a3:c3:9d:fd:16:86:21:06:e9:92:13:db: dd:87:f5:9a:11:f2:21:dd:c1:b7:f5:78:f3:0a:af: 06:09:23:09:b8:13:b9:72:57:ce:f3:5e:e5:d2:2a: 0a:75:21:cd:aa:fb:d7:4f:b9:30:34:fa:e9:bc:80: 5e:87:7d:26:39:21:1f:cf:56:2d:fd:1e:e0:5b:83: 63:21:fa:ff:21:52:c2:00:99:28:26:5f:cf:d6:48: 62:ae:c8:6f:c8:96:3d:b7:cc:05:2b:30:0e:28:9c: 8f:be:80:6d:e0:39:99:c2:65:d9:ca:38:cb:56:28: 23:50:16:1e:86:13:9d:f0:0f:bf:e7:21:d4:3a:be: d0:68:2e:90:c7:44:60:76:ea:cc:af:a7:01:97:ca: 7a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.76.0-45.166.78.255 IPv6: 2803:95a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267731 Signature Algorithm: sha256WithRSAEncryption bc:b5:69:40:09:8c:bc:b7:c7:5a:9d:03:f0:af:9a:7c:47:1d: 85:c9:e1:ff:06:64:ef:9f:54:35:26:9d:27:4b:50:19:36:43: db:22:4a:51:bf:2a:ca:ab:eb:3d:e4:86:a7:18:8f:38:44:47: 17:5f:32:88:5f:c2:e9:75:8a:70:9c:32:b0:0e:f5:46:c7:4c: fa:51:e4:64:3d:76:66:ee:f3:75:60:36:b5:4b:78:04:c6:8a: 9b:80:39:a1:a6:74:1d:fb:9a:f8:5a:a6:9b:ef:57:41:e9:2e: af:8d:94:80:4b:6d:7b:23:b2:dc:f8:e3:44:04:46:16:93:52: 9a:97:62:e3:13:c7:12:31:3f:af:59:a2:31:31:f1:ba:29:55: ec:c8:bd:72:fc:08:9e:39:5b:22:e1:05:d9:c6:f4:59:0a:17: 35:af:27:ad:6d:2d:61:a8:3f:11:7b:a6:e8:41:ea:b1:35:48: 42:3e:7e:e0:f5:c0:9c:0b:c1:b0:8a:c3:18:83:ae:fd:96:03: 79:df:dc:08:0b:94:33:9d:91:9b:5c:ba:d5:a7:8f:23:41:9f: 7a:d0:9e:e2:25:d9:ac:d9:88:3a:74:1b:df:bc:04:f7:0a:71: 74:77:e7:d9:0c:ba:c4:0d:b1:75:6d:46:09:03:17:5e:cc:cd: 6b:7c:d0:5d -----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgIUEFajHVMqkUWP5qLcYtO5mn9HKEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwNDA5MzZaFw0yNjAyMDUwNDE0MzZaMDMxMTAvBgNV BAMTKDFGNUY1QzExQzQ5NzE2RDg0NkVBQUZDM0Q4MjVFM0NFQTJDRjkxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcm/g8hrkjYlykR9Rt9ituqfaC FU2n3UqqCfNWt43MLg5sGe6kSHCIXpnwW0rjlJQ5K+V8wcFjCz8zInFgizhKAvpW ds8sng2kx03elaBrpFeRHj2XdWmLAoYdT08fFIi2UitlVVBAfwGJ2qPDnf0WhiEG 6ZIT292H9ZoR8iHdwbf1ePMKrwYJIwm4E7lyV87zXuXSKgp1Ic2q+9dPuTA0+um8 gF6HfSY5IR/PVi39HuBbg2Mh+v8hUsIAmSgmX8/WSGKuyG/Ilj23zAUrMA4onI++ gG3gOZnCZdnKOMtWKCNQFh6GE53wD7/nIdQ6vtBoLpDHRGB26syvpwGXynrRAgMB AAGjggO3MIIDszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfX1wRxJcW2Ebq r8PYJePOos+R2zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRERCMjAxRjZGQTgyRDU1MUZENDgwNDUy MEZBNzdERTNBNjdCRDE0NjFCNjQwOTlDNUREOUZDNUY1RkIwNEY5OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EREIyMDFGNkZBODJENTUxRkQ0ODA0NTIwRkE3N0RFM0E2N0JEMTQ2MUI2 NDA5OUM1REQ5RkM1RjVGQjA0Rjk4LzAvMUY1RjVDMTFDNDk3MTZEODQ2RUFBRkMz RDgyNUUzQ0VBMkNGOTFEQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAItpkwDBAAt pk4wDQQCAAIwBwMFACgDlaAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBXTMA0G CSqGSIb3DQEBCwUAA4IBAQC8tWlACYy8t8danQPwr5p8Rx2FyeH/BmTvn1Q1Jp0n S1AZNkPbIkpRvyrKq+s95IanGI84REcXXzKIX8LpdYpwnDKwDvVGx0z6UeRkPXZm 7vN1YDa1S3gExoqbgDmhpnQd+5r4Wqab71dB6S6vjZSAS217I7Lc+ONEBEYWk1Ka l2LjE8cSMT+vWaIxMfG6KVXsyL1y/AieOVsi4QXZxvRZChc1ryetbS1hqD8Re6bo QeqxNUhCPn7g9cCcC8GwisMYg679lgN539wIC5QznZGbXLrVp48jQZ960J7iJdms 2Yg6dBvfvAT3CnF0d+fZDLrEDbF1bUYJAxdezM1rfNBd -----END CERTIFICATE-----Generated at Sat Apr 12 09:57:13 2025 by rpki-client