$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer File: 2C9D167009E76DD836E1D87197E06CE80F77DEC8.cer (raw, json) Hash identifier: RmgOGUimj5sUGcvLTngWycFiySpsBTXw6QlDQECBo30= Subject key identifier: 2C:9D:16:70:09:E7:6D:D8:36:E1:D8:71:97:E0:6C:E8:0F:77:DE:C8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5A1B4676D3CDF03ABE4009DE4F63EED2EF5D5813 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:26 +0000 Certificate not after: Tue 03 Feb 2026 18:59:26 +0000 Subordinate resources: IP: 2801:15:3800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1b:46:76:d3:cd:f0:3a:be:40:09:de:4f:63:ee:d2:ef:5d:58:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:26 2025 GMT Not After : Feb 3 18:59:26 2026 GMT Subject: CN=2C9D167009E76DD836E1D87197E06CE80F77DEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:19:e7:b2:b8:a6:68:6d:42:7c:a9:99:8e: ea:5f:b9:f6:00:0a:32:6b:ab:c3:02:e2:eb:26:1b: 05:e7:6f:4b:d4:70:ad:00:79:41:04:5c:1a:7d:80: c9:fe:0b:6d:fa:56:b7:7b:9e:db:47:8c:b6:1d:05: c0:d7:cf:ed:9e:aa:23:44:14:ad:b8:96:d5:61:1f: 87:88:98:40:d5:e8:0b:26:d2:2f:b8:a8:9e:1e:f6: e2:70:9f:d8:1d:9b:5c:5f:e6:35:69:2c:d4:c8:ed: 04:b5:02:0d:fc:ef:5d:8c:59:35:b9:ed:1d:90:06: 15:df:bb:86:1d:b4:03:c4:d6:30:65:82:82:a0:7e: 10:93:a1:86:42:e9:87:e6:68:9d:29:ec:83:01:1c: e0:ca:89:08:26:ad:6d:28:ef:5e:0e:fb:d7:18:51: fc:8d:9c:65:31:ac:eb:31:23:3a:a5:bc:de:a9:f9: 8e:4c:58:65:46:85:3a:11:f3:9e:8e:7f:19:30:11: 5f:d6:69:39:cf:8f:ee:5b:d9:6b:49:60:47:4a:54: bd:c3:65:ee:51:e3:1a:d2:fc:76:f4:d8:bc:86:b0: 77:4f:6d:d9:41:12:5b:bc:6a:0f:cd:83:42:f9:24: 9a:6f:92:d4:95:6b:d8:ad:a4:29:5a:22:d6:85:21: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:9D:16:70:09:E7:6D:D8:36:E1:D8:71:97:E0:6C:E8:0F:77:DE:C8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/62DF6504FFDA7601362C0BC3611109D6B935B3E5F07043E2659DAC64752DABFF/0/2C9D167009E76DD836E1D87197E06CE80F77DEC8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:15:3800::/48 Signature Algorithm: sha256WithRSAEncryption 60:08:66:c2:2d:ba:15:1f:f8:32:1f:7c:3f:77:9d:13:4c:8e: 42:c1:33:b4:f9:0e:62:69:12:cf:19:61:f0:88:5e:b0:ee:d4: dc:db:21:57:8b:e9:33:26:e1:77:17:32:d1:e4:ca:82:84:a2: 8f:48:81:ab:f7:23:80:47:55:05:4e:82:9f:26:f9:74:d7:5c: 84:61:6e:b2:6b:9f:1a:c5:8c:75:4c:b3:c2:ea:88:a2:c8:26: 5d:b4:0b:13:62:4e:24:41:de:3d:5e:5b:8e:e3:6d:11:84:79: 1f:55:53:e8:5a:84:d8:29:b4:ef:04:76:cd:10:18:26:e4:45: 9c:77:6b:66:13:d5:4f:ae:08:05:78:12:8e:cc:bd:67:10:05: 74:75:69:c9:6d:e3:2f:96:44:e3:f8:9d:8a:95:42:90:fc:38: 97:24:7f:3c:06:c9:ae:08:6c:16:03:36:bf:4b:dd:0e:3e:98: 11:5d:2c:a6:9b:dd:dd:97:c4:7a:6e:0a:ce:30:b7:9e:c8:7b: a2:92:46:1a:0d:ee:8b:d7:f0:83:f0:b6:ec:f6:f7:29:cf:4f: 95:c6:23:cd:27:2c:66:02:b7:3c:76:b8:9e:1f:00:df:b0:25: 5f:8e:0b:47:4f:f5:9e:e7:27:9a:d6:a6:d4:1c:96:cd:b0:13: c3:07:36:83 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUWhtGdtPN8Dq+QAneT2Pu0u9dWBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MjZaFw0yNjAyMDMxODU5MjZaMDMxMTAvBgNV BAMTKDJDOUQxNjcwMDlFNzZERDgzNkUxRDg3MTk3RTA2Q0U4MEY3N0RFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnhnnsrimaG1CfKmZjupfufYA CjJrq8MC4usmGwXnb0vUcK0AeUEEXBp9gMn+C236Vrd7nttHjLYdBcDXz+2eqiNE FK24ltVhH4eImEDV6Asm0i+4qJ4e9uJwn9gdm1xf5jVpLNTI7QS1Ag38712MWTW5 7R2QBhXfu4YdtAPE1jBlgoKgfhCToYZC6YfmaJ0p7IMBHODKiQgmrW0o714O+9cY UfyNnGUxrOsxIzqlvN6p+Y5MWGVGhToR856OfxkwEV/WaTnPj+5b2WtJYEdKVL3D Ze5R4xrS/Hb02LyGsHdPbdlBElu8ag/Ng0L5JJpvktSVa9itpClaItaFIWH/AgMB AAGjggOHMIIDgzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsnRZwCedt2Dbh 2HGX4GzoD3feyDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjJERjY1MDRGRkRBNzYwMTM2MkMwQkMz NjExMTA5RDZCOTM1QjNFNUYwNzA0M0UyNjU5REFDNjQ3NTJEQUJGRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MkRGNjUwNEZGREE3NjAxMzYyQzBCQzM2MTExMDlENkI5MzVCM0U1RjA3 MDQzRTI2NTlEQUM2NDc1MkRBQkZGLzAvMkM5RDE2NzAwOUU3NkREODM2RTFEODcx OTdFMDZDRTgwRjc3REVDOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAFTgAMA0G CSqGSIb3DQEBCwUAA4IBAQBgCGbCLboVH/gyH3w/d50TTI5CwTO0+Q5iaRLPGWHw iF6w7tTc2yFXi+kzJuF3FzLR5MqChKKPSIGr9yOAR1UFToKfJvl011yEYW6ya58a xYx1TLPC6oiiyCZdtAsTYk4kQd49XluO420RhHkfVVPoWoTYKbTvBHbNEBgm5EWc d2tmE9VPrggFeBKOzL1nEAV0dWnJbeMvlkTj+J2KlUKQ/DiXJH88BsmuCGwWAza/ S90OPpgRXSymm93dl8R6bgrOMLeeyHuikkYaDe6L1/CD8Lbs9vcpz0+VxiPNJyxm Arc8drieHwDfsCVfjgtHT/We5yea1qbUHJbNsBPDBzaD -----END CERTIFICATE-----Generated at Sun Apr 6 18:48:34 2025 by rpki-client