$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer File: 2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer (raw, json) Hash identifier: Am4nnS42wHWj49jIJaD5KhxWICHxJvh/mVkB+ns0Fk8= Subject key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 56B106DD04FAA1FE3956E6B99BA57CA7327026CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:16 +0000 Certificate not after: Tue 03 Feb 2026 18:59:16 +0000 Subordinate resources: AS: 264729 -- 264730 IP: 167.28.0.0/16 IP: 170.233.152.0/22 IP: 2801:1b:9000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b1:06:dd:04:fa:a1:fe:39:56:e6:b9:9b:a5:7c:a7:32:70:26:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:16 2025 GMT Not After : Feb 3 18:59:16 2026 GMT Subject: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:8a:6c:12:6b:97:73:3c:95:d2:bf:b4:84: 0d:4c:68:c5:0e:5b:3a:e9:b6:4a:1c:29:71:33:e0: 29:1c:d3:d2:9e:48:d8:ee:43:97:fb:b8:0a:6b:63: a3:fc:41:63:f3:da:31:b6:78:86:fe:aa:3f:5e:0d: 6d:d4:fc:1b:ca:c7:04:1b:18:d3:02:b2:8c:ef:f2: 2d:70:8c:e8:b5:c4:ab:83:fd:8a:fa:0d:d6:9f:fd: 28:cb:f5:8f:65:6a:6d:37:cc:7c:cb:bb:4f:40:99: 53:08:3a:a5:c0:b7:ec:c8:45:64:e9:cc:c7:4c:db: da:b8:65:89:de:2e:0c:74:19:fd:16:2b:a9:d8:8c: b4:81:b1:55:6c:ee:e6:be:99:28:37:e2:e8:02:86: 20:6e:74:dc:cf:1f:6a:21:aa:47:36:bb:21:72:90: 08:1c:39:c5:00:57:1c:8d:de:4c:b4:5c:b1:99:51: a3:85:92:f7:82:00:57:44:9a:b2:a4:2c:58:c1:81: 9c:80:21:0f:d3:a8:62:da:ec:69:2b:ce:95:6b:01: cb:d3:ef:35:af:b9:4b:d3:55:7e:f0:fa:6b:a9:01: cc:81:35:0b:40:0f:55:7f:aa:53:7c:0f:9b:17:6e: c9:79:2e:76:b7:6a:87:31:85:e2:69:25:b0:d7:24: 47:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.28.0.0/16 170.233.152.0/22 IPv6: 2801:1b:9000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264729-264730 Signature Algorithm: sha256WithRSAEncryption 53:25:69:11:fb:dc:06:65:1c:36:d7:1f:02:24:73:f3:7b:da: 3f:00:6f:59:3f:69:22:6f:25:92:08:03:5f:1f:aa:f9:c2:79: 52:29:73:53:79:31:2b:d3:7b:93:dd:88:3f:1c:50:62:b7:f7: 27:7d:eb:05:6f:ee:00:9a:34:4f:cb:b8:09:60:2e:be:ba:83: c3:21:d1:fc:3e:76:bf:b2:3c:9a:42:a2:c2:95:6b:8b:7f:94: e7:ad:a4:d4:6e:62:84:e2:bb:4b:02:01:ae:d8:1c:d5:42:4d: b1:0a:20:c8:41:00:73:42:c3:77:73:d7:84:83:b0:86:fc:ee: 38:ff:55:c9:d6:23:d3:11:de:04:48:86:f5:76:80:f3:dd:59: 34:5b:6c:1a:76:12:ec:43:e4:14:7b:10:49:d8:b0:9f:ca:5f: ef:8f:1e:0e:07:b0:c9:22:01:04:43:4c:65:c0:60:d9:d0:70: 0e:c4:41:e0:01:46:4e:85:ab:76:b0:1b:07:5e:a1:2b:94:4d: d5:06:42:f7:cf:21:af:93:48:a4:23:15:17:e6:5f:2e:48:77: 1d:89:29:3c:b4:de:20:7a:f0:d3:52:ca:50:35:b5:9d:45:3a: b1:2d:41:6f:8e:91:ac:73:a0:cf:d3:f5:2c:ac:9c:c2:64:0f: 6e:96:65:fe -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUVrEG3QT6of45Vua5m6V8pzJwJsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MTZaFw0yNjAyMDMxODU5MTZaMDMxMTAvBgNV BAMTKDJFRDQ3QzJGQjc1RDIzNjdFMDFDNzZFRjVCRDkzNjQyRkU1NkYwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqYpsEmuXczyV0r+0hA1MaMUO WzrptkocKXEz4Ckc09KeSNjuQ5f7uAprY6P8QWPz2jG2eIb+qj9eDW3U/BvKxwQb GNMCsozv8i1wjOi1xKuD/Yr6Ddaf/SjL9Y9lam03zHzLu09AmVMIOqXAt+zIRWTp zMdM29q4ZYneLgx0Gf0WK6nYjLSBsVVs7ua+mSg34ugChiBudNzPH2ohqkc2uyFy kAgcOcUAVxyN3ky0XLGZUaOFkveCAFdEmrKkLFjBgZyAIQ/TqGLa7GkrzpVrAcvT 7zWvuUvTVX7w+mupAcyBNQtAD1V/qlN8D5sXbsl5Lna3aocxheJpJbDXJEdrAgMB AAGjggO9MIIDuTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu1Hwvt10jZ+Ac du9b2TZC/lbwUTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEIxODE1RUFCNUZCNEU5NUIzNjFFMEIx NkUwMTI3NjdCN0Q4ODQ0RjhGNkE0ODBENTdFQzI4QUFFRDE1NDVCNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84QjE4MTVFQUI1RkI0RTk1QjM2MUUwQjE2RTAxMjc2N0I3RDg4NDRGOEY2 QTQ4MEQ1N0VDMjhBQUVEMTU0NUI3LzAvMkVENDdDMkZCNzVEMjM2N0UwMUM3NkVG NUJEOTM2NDJGRTU2RjA1MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDARBAIAATALAwMApxwDBAKq6Zgw DwQCAAIwCQMHACgBABuQADAhBggrBgEFBQcBCAEB/wQSMBCgDjAMMAoCAwQKGQID BAoaMA0GCSqGSIb3DQEBCwUAA4IBAQBTJWkR+9wGZRw21x8CJHPze9o/AG9ZP2ki byWSCANfH6r5wnlSKXNTeTEr03uT3Yg/HFBit/cnfesFb+4AmjRPy7gJYC6+uoPD IdH8Pna/sjyaQqLClWuLf5TnraTUbmKE4rtLAgGu2BzVQk2xCiDIQQBzQsN3c9eE g7CG/O44/1XJ1iPTEd4ESIb1doDz3Vk0W2wadhLsQ+QUexBJ2LCfyl/vjx4OB7DJ IgEEQ0xlwGDZ0HAOxEHgAUZOhat2sBsHXqErlE3VBkL3zyGvk0ikIxUX5l8uSHcd iSk8tN4gevDTUspQNbWdRTqxLUFvjpGsc6DP0/UsrJzCZA9ulmX+ -----END CERTIFICATE-----Generated at Sun Apr 6 12:27:08 2025 by rpki-client