$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/371E5A26C210869532E000462FB1803BC6DD1E13.cer File: 371E5A26C210869532E000462FB1803BC6DD1E13.cer (raw, json) Hash identifier: sQ5wAV4rlXOlEPHMWs+80ox8gNWFkfETc5Q4hiX1MmM= Subject key identifier: 37:1E:5A:26:C2:10:86:95:32:E0:00:46:2F:B1:80:3B:C6:DD:1E:13 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 59C269208B87090F268C40A652E074BDE7886E7B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/371E5A26C210869532E000462FB1803BC6DD1E13.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 21:37:11 +0000 Certificate not after: Wed 04 Feb 2026 21:42:11 +0000 Subordinate resources: AS: 264812 IP: 170.238.108.0/22 IP: 2803:acc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c2:69:20:8b:87:09:0f:26:8c:40:a6:52:e0:74:bd:e7:88:6e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 21:37:11 2025 GMT Not After : Feb 4 21:42:11 2026 GMT Subject: CN=371E5A26C210869532E000462FB1803BC6DD1E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:0d:57:ca:13:36:d3:06:f2:86:bd:14:24: cf:7e:d8:78:4f:3d:48:9e:ab:f6:b2:31:36:33:d4: 37:ad:f6:69:49:c0:2e:1f:fa:d1:c5:d0:50:82:2a: 38:74:7e:dd:e3:40:8c:36:9a:0e:f1:ce:d9:04:5a: 59:70:af:ce:0e:b4:fe:07:f4:a0:a0:56:7a:86:17: f3:29:62:30:bf:2a:6d:69:7b:42:92:42:89:3e:74: ed:1e:6e:2d:40:15:10:66:8f:69:fc:f1:34:d8:05: d9:0d:da:82:31:b3:68:0a:a7:02:d7:74:9d:77:5e: 92:5c:b4:0d:04:d2:ee:1b:fa:b4:46:c7:ae:ae:ab: 8b:db:19:ad:6f:3f:8b:87:99:cb:3c:31:ff:1d:94: 81:a9:4d:a3:d7:52:16:d4:da:85:a5:1c:41:56:26: 5b:9e:6a:a9:0e:3f:79:7d:31:35:fd:16:e9:66:ad: fc:b0:4f:2d:d0:db:66:d5:c0:bf:76:83:5d:2a:cc: 2f:c7:72:a1:ba:dc:e5:6e:62:9b:7d:b5:1c:1d:71: 4d:46:17:de:50:8c:88:99:12:25:39:79:ec:a1:f1: c7:6f:53:16:a0:ce:0e:93:a5:f7:1f:86:18:d9:ba: 54:64:5a:56:74:ad:4d:a2:b3:b2:bd:29:cc:11:c6: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:1E:5A:26:C2:10:86:95:32:E0:00:46:2F:B1:80:3B:C6:DD:1E:13 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/371E5A26C210869532E000462FB1803BC6DD1E13.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.108.0/22 IPv6: 2803:acc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264812 Signature Algorithm: sha256WithRSAEncryption 48:d5:df:9b:7a:d7:98:55:51:2b:f2:cd:fc:58:4b:47:c2:9e: 16:6c:97:e5:53:b9:58:55:64:04:3e:05:41:33:ad:8e:f9:07: 77:a6:8a:ec:c8:22:f4:8b:2a:3a:3b:a4:e5:ee:97:bc:d3:d5: ac:5c:d8:03:43:7b:23:54:e1:af:54:16:89:17:41:0e:11:b2: ad:db:e3:62:bf:3c:8b:89:24:6b:b5:0c:6c:39:3e:63:fc:a0: 69:94:d8:ea:96:ab:4d:22:dd:77:e0:b7:7b:2c:75:bd:19:67: 83:f9:19:f7:f2:f3:c6:56:c4:f5:71:a7:18:9c:32:14:cc:1f: 37:a0:ed:e7:d2:44:cb:b8:dc:30:36:22:f4:64:ee:63:34:01: 5f:13:fd:9d:e8:3e:95:6e:d7:8e:bb:57:09:df:63:9c:67:c9: 86:0c:62:e9:1a:a0:3e:c3:31:21:f0:87:a6:15:bc:8e:ba:96: ad:88:3d:68:6b:0d:68:73:02:1a:3e:73:0f:4e:6c:65:3e:a5: 21:b0:b1:3a:07:fd:42:8a:15:ea:ba:c1:23:0d:0e:9f:11:f5: 25:22:ee:d4:51:04:e2:9b:c5:95:be:9d:04:2c:87:03:94:04: a5:c6:d9:c6:b9:a5:83:37:40:d5:01:88:a4:b4:57:8c:c7:81: 0b:95:b8:73 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUWcJpIIuHCQ8mjECmUuB0veeIbnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMTM3MTFaFw0yNjAyMDQyMTQyMTFaMDMxMTAvBgNV BAMTKDM3MUU1QTI2QzIxMDg2OTUzMkUwMDA0NjJGQjE4MDNCQzZERDFFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2A1XyhM20wbyhr0UJM9+2HhP PUieq/ayMTYz1Det9mlJwC4f+tHF0FCCKjh0ft3jQIw2mg7xztkEWllwr84OtP4H 9KCgVnqGF/MpYjC/Km1pe0KSQok+dO0ebi1AFRBmj2n88TTYBdkN2oIxs2gKpwLX dJ13XpJctA0E0u4b+rRGx66uq4vbGa1vP4uHmcs8Mf8dlIGpTaPXUhbU2oWlHEFW JlueaqkOP3l9MTX9FulmrfywTy3Q22bVwL92g10qzC/HcqG63OVuYpt9tRwdcU1G F95QjIiZEiU5eeyh8cdvUxagzg6TpfcfhhjZulRkWlZ0rU2is7K9KcwRxkULAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3HlomwhCGlTLg AEYvsYA7xt0eEzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDdBNzZERjAzREQxNzlDRkRCMEFDQTM5 QTc4N0NCNTgxQ0FBM0UzMEY0QkM5NDc4NjhDNUY0NjQyOEEyQTIyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EN0E3NkRGMDNERDE3OUNGREIwQUNBMzlBNzg3Q0I1ODFDQUEzRTMwRjRC Qzk0Nzg2OEM1RjQ2NDI4QTJBMjJDLzAvMzcxRTVBMjZDMjEwODY5NTMyRTAwMDQ2 MkZCMTgwM0JDNkREMUUxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqu5sMA0EAgAC MAcDBQAoA6zAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKbDANBgkqhkiG9w0B AQsFAAOCAQEASNXfm3rXmFVRK/LN/FhLR8KeFmyX5VO5WFVkBD4FQTOtjvkHd6aK 7Mgi9IsqOjuk5e6XvNPVrFzYA0N7I1Thr1QWiRdBDhGyrdvjYr88i4kka7UMbDk+ Y/ygaZTY6parTSLdd+C3eyx1vRlng/kZ9/LzxlbE9XGnGJwyFMwfN6Dt59JEy7jc MDYi9GTuYzQBXxP9neg+lW7XjrtXCd9jnGfJhgxi6RqgPsMxIfCHphW8jrqWrYg9 aGsNaHMCGj5zD05sZT6lIbCxOgf9QooV6rrBIw0OnxH1JSLu1FEE4pvFlb6dBCyH A5QEpcbZxrmlgzdA1QGIpLRXjMeBC5W4cw== -----END CERTIFICATE-----Generated at Sat Apr 12 09:59:32 2025 by rpki-client