$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer File: 211623745083F5BD547E7869C6748AF8F2418ECF.cer (raw, json) Hash identifier: ndEC/CflhuS5DgE2aBM0wY93preXfOCGD2KEzwxhRFI= Subject key identifier: 21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: E7E1CD5EC8C4E508BFB16699FF37284A50B0C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 19:58:22 +0000 Certificate not after: Wed 04 Feb 2026 20:03:22 +0000 Subordinate resources: AS: 263170 IP: 181.114.56.0/22 IP: 2803:2080::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e7:e1:cd:5e:c8:c4:e5:08:bf:b1:66:99:ff:37:28:4a:50:b0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 19:58:22 2025 GMT Not After : Feb 4 20:03:22 2026 GMT Subject: CN=211623745083F5BD547E7869C6748AF8F2418ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:ef:08:4d:fe:b5:80:5d:d0:b1:0f:da:fc: 30:a3:df:b1:46:58:7a:87:2f:cc:40:c9:3f:07:1e: 95:52:66:48:ad:63:a5:be:2b:3b:f1:94:0d:8e:93: 77:ee:09:27:97:0d:56:2d:5d:74:30:f1:1a:0a:3a: d2:93:83:fc:6d:8b:a2:ed:2c:72:1d:67:cd:f6:55: 85:ed:e3:3c:29:f2:3e:db:3c:d0:e8:7d:d3:41:2d: f4:3b:c4:8e:91:16:a6:34:cb:51:b3:0d:9a:e4:4e: d9:ba:2f:b8:6a:b4:02:89:76:af:d5:b8:4a:04:1e: f2:c8:31:a5:20:df:c8:10:59:86:fc:33:ac:d1:46: 4b:30:fd:84:10:31:60:91:05:35:69:8f:f4:ff:a0: 5e:06:d2:d6:0a:31:1c:53:dc:8a:b7:fc:a1:d9:86: f6:a1:78:0a:2c:27:08:50:9d:b0:25:1a:67:da:19: 33:6a:fd:b1:8c:5e:0a:16:34:d6:38:bd:00:14:33: a3:cf:70:0d:b4:6d:f4:af:aa:d5:92:20:3a:cc:11: 2e:34:e1:97:c0:d5:db:ed:2d:c6:23:9f:3a:3d:4d: fe:d9:df:10:f5:68:6e:6f:64:17:33:e8:8b:38:72: c6:a5:12:a4:f5:95:41:f9:9e:ce:42:86:93:d9:0a: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.114.56.0/22 IPv6: 2803:2080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263170 Signature Algorithm: sha256WithRSAEncryption dd:63:12:d3:08:4e:05:17:72:26:ba:ff:13:0c:47:e5:7d:74: 87:aa:bd:85:de:38:a1:2f:58:15:8c:1b:1f:4f:4f:72:9c:d6: b2:07:59:d9:9b:10:3a:6e:fc:5f:b7:5a:63:9e:f9:7f:69:e9: 34:e0:aa:d3:3d:15:a8:d2:d7:b7:80:71:0f:b0:41:8a:3f:5d: ea:79:96:ca:b5:94:02:18:71:7b:c1:b5:82:b7:5b:81:a6:72: d8:f3:53:cf:32:d0:d6:72:01:38:59:ef:04:71:45:40:d1:3c: 33:0a:f5:57:32:40:f9:ab:6e:98:05:e9:42:b6:88:8e:82:f7: d3:b0:10:42:25:9d:71:89:d9:8c:1f:7f:28:f1:25:28:de:12: 6e:28:69:27:d7:70:da:1c:66:79:cf:22:d5:ac:23:38:56:3b: 74:32:7b:6a:10:49:27:62:c6:0e:e2:d4:88:2c:8b:98:ce:88: eb:d1:ba:70:8f:d2:7c:03:98:87:fb:7e:97:e1:97:52:bc:5a: 44:01:97:55:6c:7d:c3:2c:3e:f1:b4:5e:9a:32:1e:b7:28:6a: 9e:8f:a2:df:b3:1d:b8:9c:4d:a8:8f:32:39:d0:ff:cc:81:1d: 38:e3:91:44:77:4d:dd:e0:c7:64:f1:55:22:9f:c7:e0:6a:da: 1a:cf:5c:17 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUAOfhzV7IxOUIv7Fmmf83KEpQsMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxOTU4MjJaFw0yNjAyMDQyMDAzMjJaMDMxMTAvBgNV BAMTKDIxMTYyMzc0NTA4M0Y1QkQ1NDdFNzg2OUM2NzQ4QUY4RjI0MThFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1f+8ITf61gF3QsQ/a/DCj37FG WHqHL8xAyT8HHpVSZkitY6W+KzvxlA2Ok3fuCSeXDVYtXXQw8RoKOtKTg/xti6Lt LHIdZ832VYXt4zwp8j7bPNDofdNBLfQ7xI6RFqY0y1GzDZrkTtm6L7hqtAKJdq/V uEoEHvLIMaUg38gQWYb8M6zRRksw/YQQMWCRBTVpj/T/oF4G0tYKMRxT3Iq3/KHZ hvaheAosJwhQnbAlGmfaGTNq/bGMXgoWNNY4vQAUM6PPcA20bfSvqtWSIDrMES40 4ZfA1dvtLcYjnzo9Tf7Z3xD1aG5vZBcz6Is4csalEqT1lUH5ns5ChpPZCkDXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhFiN0UIP1vVR+ eGnGdIr48kGOzzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjNBRDE2RUNGNENEOTQ1NUQwRTM5NTgw OTAwQjk3OTU3RTA1NkIwNEQzRUVGRUE1NEY3RThEMUMyNzY4MkQwMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GM0FEMTZFQ0Y0Q0Q5NDU1RDBFMzk1ODA5MDBCOTc5NTdFMDU2QjA0RDNF RUZFQTU0RjdFOEQxQzI3NjgyRDAwLzAvMjExNjIzNzQ1MDgzRjVCRDU0N0U3ODY5 QzY3NDhBRjhGMjQxOEVDRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtXI4MA0EAgAC MAcDBQAoAyCAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEAjANBgkqhkiG9w0B AQsFAAOCAQEA3WMS0whOBRdyJrr/EwxH5X10h6q9hd44oS9YFYwbH09PcpzWsgdZ 2ZsQOm78X7daY575f2npNOCq0z0VqNLXt4BxD7BBij9d6nmWyrWUAhhxe8G1grdb gaZy2PNTzzLQ1nIBOFnvBHFFQNE8Mwr1VzJA+atumAXpQraIjoL307AQQiWdcYnZ jB9/KPElKN4SbihpJ9dw2hxmec8i1awjOFY7dDJ7ahBJJ2LGDuLUiCyLmM6I69G6 cI/SfAOYh/t+l+GXUrxaRAGXVWx9wyw+8bRemjIetyhqno+i37MduJxNqI8yOdD/ zIEdOOORRHdN3eDHZPFVIp/H4GraGs9cFw== -----END CERTIFICATE-----Generated at Mon Apr 7 00:55:44 2025 by rpki-client