$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer File: 3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer (raw, json) Hash identifier: 0UB+EVpmkNVbqGh9dHyRUBm8ZB9k49TAJYLLUcT4j2Y= Subject key identifier: 3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 010933238BBEBB3DCE3519D2B510C53F320E3B0B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 01:22:23 +0000 Certificate not after: Wed 04 Feb 2026 01:27:23 +0000 Subordinate resources: AS: 269934 IP: 45.190.13.0/24 IP: 190.83.2.0/23 IP: 2803:4ae0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:09:33:23:8b:be:bb:3d:ce:35:19:d2:b5:10:c5:3f:32:0e:3b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 01:22:23 2025 GMT Not After : Feb 4 01:27:23 2026 GMT Subject: CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:53:89:14:70:7c:a7:88:f4:92:df:ae:1e: 80:6a:4a:f7:4b:f4:45:9a:88:4b:b7:cf:24:1e:c5: 74:bb:17:4e:a6:c0:6f:2c:11:c1:af:04:85:f7:79: ac:67:06:56:e7:0d:0e:53:d4:75:83:7b:88:4b:e3: c1:58:4b:5b:94:75:1f:d6:4c:39:22:79:a6:61:98: 05:6f:43:4a:0f:57:7e:69:36:f2:15:34:dd:88:62: 45:09:9a:46:8d:90:51:b0:d3:e8:d0:93:e7:7c:af: a9:9c:bb:46:45:76:35:e8:21:84:0d:58:c3:24:27: a6:97:c0:87:2c:44:c1:9d:20:d6:c1:3c:76:b1:39: 74:d9:cd:ef:ec:f9:83:d0:b4:ae:c7:86:55:0f:47: c1:fe:c2:01:a2:c3:5d:bd:20:68:39:ca:5c:b7:dd: f6:7a:f0:e4:e1:18:af:7d:85:0e:cb:f5:5e:3f:64: 1a:d3:66:e6:fb:12:c8:96:26:5d:9d:0d:42:eb:08: 30:e3:62:dd:d2:c0:2d:9e:ef:c6:e2:ef:f3:a0:2b: 11:b3:a9:53:19:f8:79:e0:c8:f9:55:e7:f5:98:43: 50:23:1e:5c:b7:ce:2a:0e:9b:f8:ca:80:fb:13:db: 33:37:5b:cf:c7:d4:ee:d1:71:ae:1b:47:5f:7f:a5: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.13.0/24 190.83.2.0/23 IPv6: 2803:4ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269934 Signature Algorithm: sha256WithRSAEncryption 83:75:40:b6:f0:dd:d3:28:d6:d7:3e:de:54:4c:59:e0:4e:21: 69:4f:78:76:04:54:ea:b5:f3:13:bb:af:de:01:8e:d7:98:06: 96:b9:1a:7c:d6:3c:61:49:98:e2:9e:05:b0:c0:6b:8a:36:67: a9:51:88:a7:3d:a3:87:98:48:01:3a:4e:d0:a5:43:c9:e1:1a: fe:32:01:28:0b:c6:b2:45:20:c0:22:e9:35:4e:ca:c1:b4:aa: d1:c0:c6:70:e8:ef:65:a9:38:08:26:42:62:35:13:42:2c:5b: cc:d1:5b:41:19:ff:b6:ec:fb:1b:e7:84:f0:ff:8a:ba:04:c5: e9:1a:0f:33:b6:68:ef:d5:16:a5:f8:29:e7:62:2d:37:99:aa: 49:b2:e9:51:bd:79:51:a5:ec:c0:6b:d1:20:88:d8:79:ec:be: df:b8:a4:54:f8:f9:08:08:ae:97:eb:5f:d4:74:b3:ca:a6:42: ef:fc:23:16:77:8a:c7:83:8f:0a:42:39:5d:00:e8:9d:69:aa: d7:9e:f0:0a:92:04:d8:7e:81:84:e8:cb:ed:1d:3e:90:dd:b7: 17:dc:27:79:b8:4c:1d:0d:00:8f:7b:75:9a:e6:ee:20:1c:93: d9:cc:00:5d:67:b8:45:24:6b:97:d5:7f:1e:b5:84:4e:69:a1: f2:db:4c:fc -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUAQkzI4u+uz3ONRnStRDFPzIOOwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMTIyMjNaFw0yNjAyMDQwMTI3MjNaMDMxMTAvBgNV BAMTKDNENUQ0MTYwNkUzMDM1OEQwMkRERkUxMjFFNTI5MzRERkQ5NkVFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVHVOJFHB8p4j0kt+uHoBqSvdL 9EWaiEu3zyQexXS7F06mwG8sEcGvBIX3eaxnBlbnDQ5T1HWDe4hL48FYS1uUdR/W TDkieaZhmAVvQ0oPV35pNvIVNN2IYkUJmkaNkFGw0+jQk+d8r6mcu0ZFdjXoIYQN WMMkJ6aXwIcsRMGdINbBPHaxOXTZze/s+YPQtK7HhlUPR8H+wgGiw129IGg5yly3 3fZ68OThGK99hQ7L9V4/ZBrTZub7EsiWJl2dDULrCDDjYt3SwC2e78bi7/OgKxGz qVMZ+HngyPlV5/WYQ1AjHly3zioOm/jKgPsT2zM3W8/H1O7Rca4bR19/pU1lAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9XUFgbjA1jQLd /hIeUpNN/Zbu/jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzJFMTE2RDE3RkNFMEU1OTA4RkRGOTJG OUZGODM0MkExQTk1QjZFMDg2MDY4ODlENzJBRkM0OUIwNUUyMjM4Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMkUxMTZEMTdGQ0UwRTU5MDhGREY5MkY5RkY4MzQyQTFBOTVCNkUwODYw Njg4OUQ3MkFGQzQ5QjA1RTIyMzg2LzAvM0Q1RDQxNjA2RTMwMzU4RDAyRERGRTEy MUU1MjkzNERGRDk2RUVGRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALb4NAwQBvlMC MA0EAgACMAcDBQAoA0rgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQebjANBgkq hkiG9w0BAQsFAAOCAQEAg3VAtvDd0yjW1z7eVExZ4E4haU94dgRU6rXzE7uv3gGO 15gGlrkafNY8YUmY4p4FsMBrijZnqVGIpz2jh5hIATpO0KVDyeEa/jIBKAvGskUg wCLpNU7KwbSq0cDGcOjvZak4CCZCYjUTQixbzNFbQRn/tuz7G+eE8P+KugTF6RoP M7Zo79UWpfgp52ItN5mqSbLpUb15UaXswGvRIIjYeey+37ikVPj5CAiul+tf1HSz yqZC7/wjFneKx4OPCkI5XQDonWmq157wCpIE2H6BhOjL7R0+kN23F9wnebhMHQ0A j3t1mubuIByT2cwAXWe4RSRrl9V/HrWETmmh8ttM/A== -----END CERTIFICATE-----Generated at Sun Apr 6 21:14:46 2025 by rpki-client