$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer File: 41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer (raw, json) Hash identifier: UyAzozt0akGjJkfnJXUEgDQJltuuh9LWwf+Gmv3QJR4= Subject key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 42AD9D33AF7AAF401E3855463700928D1DFD5D9A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 09:34:28 +0000 Certificate not after: Wed 04 Feb 2026 09:39:28 +0000 Subordinate resources: AS: 273142 IP: 2803:2c50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ad:9d:33:af:7a:af:40:1e:38:55:46:37:00:92:8d:1d:fd:5d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 09:34:28 2025 GMT Not After : Feb 4 09:39:28 2026 GMT Subject: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:e3:aa:12:a5:62:13:7e:1e:04:a8:31:37: 4c:88:14:93:a3:4d:0f:94:4e:66:a9:91:c6:8d:b2: 9a:35:49:78:9c:45:32:d8:e8:0c:cd:c1:4b:4b:ba: 68:1e:c6:32:8e:da:26:3a:e5:58:bf:98:c2:a3:be: e2:09:55:12:f7:2e:8f:ba:82:d1:9b:ea:d8:0a:09: 53:05:50:d2:fa:cd:05:2d:f8:92:6e:f3:c0:34:fc: 5d:cf:1c:a5:50:e2:40:65:be:6e:e1:e4:5d:08:7f: cb:97:94:3e:4e:82:0a:f6:4d:03:31:e8:39:e0:0e: 9a:83:d5:95:ee:95:81:09:96:bf:57:6b:32:a3:01: 21:89:cb:90:a6:72:8d:97:f8:4e:eb:9b:b6:1d:14: 6d:9c:de:37:74:41:7e:7d:ef:34:18:24:2e:fa:78: ac:7d:5f:2f:84:37:52:ad:5c:e4:4a:cd:7d:0e:85: 19:8e:f5:4a:89:65:b7:df:40:d7:f6:db:01:a2:31: f8:ed:68:2d:e1:82:9d:7b:ac:82:25:09:1a:03:d0: a8:3a:92:94:aa:af:ca:a9:64:7a:dc:72:d5:c2:db: 99:e5:6e:34:24:8e:14:be:e0:a0:63:a4:66:31:2a: 3a:1d:46:30:58:fd:13:17:ee:4a:19:d5:d2:5b:88: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2c50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273142 Signature Algorithm: sha256WithRSAEncryption a6:9d:cb:70:bc:0e:42:d2:bb:36:f0:61:8d:79:f2:01:38:cd: 91:e8:8f:28:09:b4:0d:2f:16:2b:2a:f0:9d:6d:09:b8:34:7f: b1:7a:c7:b5:7f:18:d3:7b:33:24:81:74:11:d2:e6:72:eb:13: 9f:db:6f:ac:0c:09:91:f6:e2:33:ee:c5:8b:fd:6a:88:5d:ce: 02:81:6a:4e:8e:7f:ea:f4:cd:62:5a:b0:23:35:e8:0a:36:68: c0:26:99:25:bd:5d:31:f0:be:9e:e2:c1:8d:bc:05:99:84:45: 2d:d1:63:bd:d0:33:d2:7c:ec:44:01:e6:6a:9a:85:e6:50:79: f7:ec:bb:c7:f8:9e:f1:db:84:02:88:ea:23:e6:ab:9d:81:7e: 30:b3:49:aa:e1:a4:79:34:00:9f:48:53:c5:de:b2:cc:2b:91: 1d:06:3d:3b:9a:a2:53:f3:56:34:c0:c4:8a:dc:88:c1:e8:43: ba:ec:6a:68:0b:c5:6a:79:cf:4e:5c:1e:97:6d:e4:02:1e:82: c8:70:fc:31:a8:8c:26:e1:b3:5d:b7:07:4a:00:0f:87:7d:2f: 36:f8:bc:ba:4e:6d:71:b7:68:1c:2e:ec:bc:c8:f5:71:5f:ee: 01:8a:c2:1c:bf:72:58:3d:f5:f5:7c:63:15:7d:48:10:14:18: 20:29:93:10 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQq2dM696r0AeOFVGNwCSjR39XZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwOTM0MjhaFw0yNjAyMDQwOTM5MjhaMDMxMTAvBgNV BAMTKDQxQjgxMDNEQ0U4OEREREVBREJBQzMwODc5QzRBNzg1RjE1MTdFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOR+OqEqViE34eBKgxN0yIFJOj TQ+UTmapkcaNspo1SXicRTLY6AzNwUtLumgexjKO2iY65Vi/mMKjvuIJVRL3Lo+6 gtGb6tgKCVMFUNL6zQUt+JJu88A0/F3PHKVQ4kBlvm7h5F0If8uXlD5Oggr2TQMx 6DngDpqD1ZXulYEJlr9XazKjASGJy5Cmco2X+E7rm7YdFG2c3jd0QX597zQYJC76 eKx9Xy+EN1KtXORKzX0OhRmO9UqJZbffQNf22wGiMfjtaC3hgp17rIIlCRoD0Kg6 kpSqr8qpZHrcctXC25nlbjQkjhS+4KBjpGYxKjodRjBY/RMX7koZ1dJbiBOrAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBuBA9zojd3q26 wwh5xKeF8VF+4jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTE3ODI1NUFCMzk5RDFEQTUzOEFEMkUw OUIzMTI5MkZGQkJGNERBNzY2NTZEMzk4RUNCQkVFMEZDQkVGMDlERS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MTc4MjU1QUIzOTlEMURBNTM4QUQyRTA5QjMxMjkyRkZCQkY0REE3NjY1 NkQzOThFQ0JCRUUwRkNCRUYwOURFLzAvNDFCODEwM0RDRTg4RERERUFEQkFDMzA4 NzlDNEE3ODVGMTUxN0VFMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMsUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKvYwDQYJKoZIhvcNAQELBQADggEBAKady3C8 DkLSuzbwYY158gE4zZHojygJtA0vFisq8J1tCbg0f7F6x7V/GNN7MySBdBHS5nLr E5/bb6wMCZH24jPuxYv9aohdzgKBak6Of+r0zWJasCM16Ao2aMAmmSW9XTHwvp7i wY28BZmERS3RY73QM9J87EQB5mqaheZQeffsu8f4nvHbhAKI6iPmq52BfjCzSarh pHk0AJ9IU8XesswrkR0GPTuaolPzVjTAxIrciMHoQ7rsamgLxWp5z05cHpdt5AIe gshw/DGojCbhs123B0oAD4d9Lzb4vLpObXG3aBwu7LzI9XFf7gGKwhy/clg99fV8 YxV9SBAUGCApkxA= -----END CERTIFICATE-----Generated at Sun Apr 6 19:56:53 2025 by rpki-client