$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer File: 2F03E5143F966EB03984AA596151B47F0A7C38E2.cer (raw, json) Hash identifier: 7fT/mO7vrYQXAYCzqZZ26e51Ob9lo86O0CMykm+tUdE= Subject key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4AF5EF982A9351F04CB7F19446D7AF1EED347390 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 21:19:24 +0000 Certificate not after: Wed 04 Feb 2026 21:24:24 +0000 Subordinate resources: AS: 273001 IP: 45.65.136.0/22 IP: 2803:a5c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f5:ef:98:2a:93:51:f0:4c:b7:f1:94:46:d7:af:1e:ed:34:73:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 21:19:24 2025 GMT Not After : Feb 4 21:24:24 2026 GMT Subject: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:cf:c9:0c:74:b5:c6:21:54:b8:3f:12:41: 82:7d:f1:7b:4d:aa:e3:6e:9a:ad:ce:05:59:8f:eb: 6a:f5:a4:dd:5c:c1:b1:59:4a:51:b5:69:fe:65:62: 02:8c:1d:31:93:fa:36:e2:20:5e:c3:5b:1d:a6:93: 9c:29:55:6c:9b:3f:89:d9:17:50:d0:ed:00:97:6f: 2c:9a:d6:16:f1:01:4c:a5:4e:a2:43:92:9e:c8:f9: 33:67:ca:70:39:6e:bb:8c:5d:02:95:b5:67:c7:df: 2c:2a:6c:7b:b1:c7:e6:99:8f:06:1d:94:19:21:ff: 12:06:64:f6:32:04:f3:c0:c7:43:fd:35:58:77:1c: 64:59:a2:75:bb:02:d0:e4:a4:77:b7:58:67:e8:6e: 99:a5:84:07:d0:95:f5:51:f9:35:fe:75:18:c7:7c: 1b:0e:ff:24:42:6c:8f:0f:d6:6b:79:02:0e:26:93: 94:15:c1:58:fd:aa:ac:1d:c8:27:51:85:b5:70:dc: 37:85:6a:f0:ea:59:97:81:b3:d2:75:70:19:1e:89: 34:49:2a:57:14:e7:c9:e1:56:00:05:ed:5b:b1:8d: 01:ac:2d:65:a2:3b:e9:99:a8:ab:b0:1d:f5:a0:e5: 31:31:2e:55:55:24:d1:95:d9:a0:52:94:d0:0b:20: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.136.0/22 IPv6: 2803:a5c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273001 Signature Algorithm: sha256WithRSAEncryption 90:c2:2e:21:20:e1:ae:54:07:1a:f7:74:e5:c5:34:a3:2d:5f: 59:d4:24:a7:3f:57:aa:a0:54:17:d6:0b:7b:59:1a:b4:56:b0: 3b:7d:ed:8a:cc:6b:9a:bc:ff:fb:e9:85:88:0e:7b:4e:d7:4e: c8:e7:95:1c:fe:99:4f:33:ab:e6:d0:c7:b7:3d:63:09:f3:33: dc:ee:ad:13:5e:f8:05:29:6a:e6:ca:e0:80:35:7b:d6:20:e8: 20:42:ec:1b:26:a2:cd:30:e0:fc:5f:b1:f3:6e:c4:c5:52:5b: 27:03:1d:b3:37:a5:a5:df:e9:e7:38:2a:df:33:f4:ae:3e:9b: 54:6c:60:e2:a0:b7:5c:81:19:79:d6:14:2c:bf:b7:ca:96:c7: f2:ed:a4:b8:a1:50:31:bd:98:31:d0:03:82:c7:bd:25:35:97: 84:02:81:16:37:ba:92:14:09:98:7c:c8:b6:46:d1:98:7c:bc: 45:0f:5c:19:be:df:17:77:ae:2f:5e:fd:8b:89:cc:0a:a7:95: 08:36:68:5d:e7:05:0e:28:46:fe:53:b8:41:9b:25:3e:50:7e: 43:22:ce:1c:e7:87:e5:8c:78:2a:1e:2d:e8:95:c1:04:13:36: a6:41:3b:9e:e7:a0:37:e3:2c:27:81:74:8d:6f:eb:93:5c:bd: 77:b5:d5:73 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSvXvmCqTUfBMt/GURtevHu00c5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMTE5MjRaFw0yNjAyMDQyMTI0MjRaMDMxMTAvBgNV BAMTKDJGMDNFNTE0M0Y5NjZFQjAzOTg0QUE1OTYxNTFCNDdGMEE3QzM4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXgs/JDHS1xiFUuD8SQYJ98XtN quNumq3OBVmP62r1pN1cwbFZSlG1af5lYgKMHTGT+jbiIF7DWx2mk5wpVWybP4nZ F1DQ7QCXbyya1hbxAUylTqJDkp7I+TNnynA5bruMXQKVtWfH3ywqbHuxx+aZjwYd lBkh/xIGZPYyBPPAx0P9NVh3HGRZonW7AtDkpHe3WGfobpmlhAfQlfVR+TX+dRjH fBsO/yRCbI8P1mt5Ag4mk5QVwVj9qqwdyCdRhbVw3DeFavDqWZeBs9J1cBkeiTRJ KlcU58nhVgAF7VuxjQGsLWWiO+mZqKuwHfWg5TExLlVVJNGV2aBSlNALIN0/AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvA+UUP5ZusDmE qllhUbR/Cnw44jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUYzODNDNTJERDU3N0QyRDFBRjFCQUZC NDI2N0VFRDc2QjlCNTU0MEZGRDQ1MkY3QzY2QzAxMjlBODIwNDUxOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RjM4M0M1MkRENTc3RDJEMUFGMUJBRkI0MjY3RUVENzZCOUI1NTQwRkZE NDUyRjdDNjZDMDEyOUE4MjA0NTE5LzAvMkYwM0U1MTQzRjk2NkVCMDM5ODRBQTU5 NjE1MUI0N0YwQTdDMzhFMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUGIMA0EAgAC MAcDBQAoA6XAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqaTANBgkqhkiG9w0B AQsFAAOCAQEAkMIuISDhrlQHGvd05cU0oy1fWdQkpz9XqqBUF9YLe1katFawO33t isxrmrz/++mFiA57TtdOyOeVHP6ZTzOr5tDHtz1jCfMz3O6tE174BSlq5srggDV7 1iDoIELsGyaizTDg/F+x827ExVJbJwMdszelpd/p5zgq3zP0rj6bVGxg4qC3XIEZ edYULL+3ypbH8u2kuKFQMb2YMdADgse9JTWXhAKBFje6khQJmHzItkbRmHy8RQ9c Gb7fF3euL179i4nMCqeVCDZoXecFDihG/lO4QZslPlB+QyLOHOeH5Yx4Kh4t6JXB BBM2pkE7nuegN+MsJ4F0jW/rk1y9d7XVcw== -----END CERTIFICATE-----Generated at Mon Apr 7 03:23:03 2025 by rpki-client