$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer File: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer (raw, json) Hash identifier: VnVL4WhFUmUC+/9sdlEM2SOISGg890QEz/3KaRN87LQ= Subject key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 20D9EE7F519B8ED2E74F13374AC805F451903E6C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 22:55:47 +0000 Certificate not after: Tue 03 Feb 2026 23:00:47 +0000 Subordinate resources: AS: 264630 IP: 200.106.248.0/21 IP: 2801:0:190::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d9:ee:7f:51:9b:8e:d2:e7:4f:13:37:4a:c8:05:f4:51:90:3e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 22:55:47 2025 GMT Not After : Feb 3 23:00:47 2026 GMT Subject: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:7a:b6:8e:f0:80:5e:67:be:5b:34:17:88: 1b:fe:6a:76:c6:b6:1c:84:3a:14:51:3c:aa:be:a9: 7e:dd:18:4a:7f:e8:88:66:b5:d1:92:5a:a7:bc:e0: 74:85:09:0e:9a:f3:f3:b2:77:be:64:e8:9a:5c:dc: 23:ac:35:a9:90:d6:4d:b8:a7:e4:63:dc:fb:12:6c: ad:18:5b:ad:ea:54:7b:da:64:40:a8:8c:ef:c1:18: 7d:29:f0:59:71:21:f5:85:1d:55:f3:76:f3:60:ac: 08:98:5c:1c:46:af:12:0f:b2:7a:8a:4f:2b:01:69: dc:41:be:11:a8:72:c4:c6:cd:fe:33:76:d9:80:ab: aa:d0:8a:9f:90:61:33:b8:ad:f5:9f:f4:e5:9e:71: 3b:92:c4:2e:ea:3c:3c:b7:c2:32:f7:d8:8d:09:02: 9b:7a:54:a1:e1:2d:42:e0:77:9e:a9:34:2b:77:de: 1b:66:b4:f6:f3:56:d9:92:9d:1a:c6:d4:e2:f9:52: 3c:65:07:1a:fc:03:cf:a9:9d:16:bf:1f:53:c1:4a: 5f:d1:bb:24:e7:e1:54:9f:dd:30:fb:b9:b8:c8:ee: bf:b4:3d:18:c2:f9:f3:5a:84:a5:09:a7:f7:9e:66: 4d:bc:68:49:31:37:d1:b4:f1:8d:bd:de:5d:0d:77: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.106.248.0/21 IPv6: 2801:0:190::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264630 Signature Algorithm: sha256WithRSAEncryption d1:15:b6:aa:ad:4a:f8:ce:d3:21:4b:03:7d:f0:39:6b:5b:ca: a0:a8:17:77:06:c0:48:7e:8b:01:4a:f8:9f:5b:0e:bf:7e:30: f6:e0:ec:14:7e:6e:be:a5:8b:2d:2c:d8:c7:3c:c1:f1:04:9b: df:73:65:ea:af:e6:be:d1:5e:46:ce:77:ba:4d:ce:7c:2f:6a: 5e:7e:99:fd:d1:dc:33:c5:a5:e1:db:45:af:f0:cb:48:68:95: 28:2c:73:91:ea:c0:51:1d:53:86:99:83:cb:49:5d:40:b1:10: e3:52:68:b3:0b:fa:19:fd:54:d8:fc:41:7d:37:e2:6d:e8:07: fc:5d:96:a7:95:75:7f:33:05:c6:04:3a:b7:a7:c5:0c:ef:8f: 44:4d:ca:39:66:e1:e9:b2:57:45:b9:3c:84:0d:92:c8:65:80: f5:ee:72:3e:4f:11:20:e4:67:55:94:b5:f3:4f:55:c8:25:b6: 3a:ff:4c:1e:d9:82:5c:f2:fc:30:70:89:6a:ed:e8:62:d5:32: 14:1c:17:62:40:cd:bc:c0:9b:94:68:62:6e:57:91:78:1e:cb: b9:e5:25:47:7a:da:a4:e1:2a:b0:4a:77:3f:ed:7a:bb:f3:cb: 33:e3:5e:67:bb:0c:67:ad:50:06:57:1b:b5:ea:17:e7:ee:58: 72:96:78:26 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUINnuf1GbjtLnTxM3SsgF9FGQPmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMjU1NDdaFw0yNjAyMDMyMzAwNDdaMDMxMTAvBgNV BAMTKDI1RERERUMyQTgwNDRGNjg4QUE3OTlBNjYxMkM0MzRCMkFCRUE5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY23q2jvCAXme+WzQXiBv+anbG thyEOhRRPKq+qX7dGEp/6IhmtdGSWqe84HSFCQ6a8/Oyd75k6Jpc3COsNamQ1k24 p+Rj3PsSbK0YW63qVHvaZECojO/BGH0p8FlxIfWFHVXzdvNgrAiYXBxGrxIPsnqK TysBadxBvhGocsTGzf4zdtmAq6rQip+QYTO4rfWf9OWecTuSxC7qPDy3wjL32I0J Apt6VKHhLULgd56pNCt33htmtPbzVtmSnRrG1OL5UjxlBxr8A8+pnRa/H1PBSl/R uyTn4VSf3TD7ubjI7r+0PRjC+fNahKUJp/eeZk28aEkxN9G08Y293l0Nd0OrAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQl3d7CqARPaIqn maZhLENLKr6peTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjE0OUMxQTYzRUExNDY4OUVBMDRGQUFG NjVFRENFOUQ1NzA2QTc2RDBGNjkwQzkzOTAzNjk2ODc4OERGMjkyRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMTQ5QzFBNjNFQTE0Njg5RUEwNEZBQUY2NUVEQ0U5RDU3MDZBNzZEMEY2 OTBDOTM5MDM2OTY4Nzg4REYyOTJGLzAvMjVERERFQzJBODA0NEY2ODhBQTc5OUE2 NjEyQzQzNEIyQUJFQTk3OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDyGr4MA8EAgAC MAkDBwAoAQAAAZAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAm2MA0GCSqGSIb3 DQEBCwUAA4IBAQDRFbaqrUr4ztMhSwN98DlrW8qgqBd3BsBIfosBSvifWw6/fjD2 4OwUfm6+pYstLNjHPMHxBJvfc2Xqr+a+0V5Gzne6Tc58L2pefpn90dwzxaXh20Wv 8MtIaJUoLHOR6sBRHVOGmYPLSV1AsRDjUmizC/oZ/VTY/EF9N+Jt6Af8XZanlXV/ MwXGBDq3p8UM749ETco5ZuHpsldFuTyEDZLIZYD17nI+TxEg5GdVlLXzT1XIJbY6 /0we2YJc8vwwcIlq7ehi1TIUHBdiQM28wJuUaGJuV5F4Hsu55SVHetqk4SqwSnc/ 7Xq788sz415nuwxnrVAGVxu16hfn7lhylngm -----END CERTIFICATE-----Generated at Mon Apr 7 00:55:35 2025 by rpki-client