$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.cer File: 4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.cer (raw, json) Hash identifier: ME5o37qt/Ht0sWxgiKwrxHtY6EBd8gnuRPu6HQL6tSc= Subject key identifier: 4C:36:55:2D:17:EE:EB:8C:C6:5A:E8:FB:33:25:1E:48:AA:0B:20:89 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 09F25F620A4D7AD85D01F8F2D087AC547B44CA89 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 08 Nov 2024 20:40:01 +0000 Certificate not after: Fri 07 Nov 2025 20:45:01 +0000 Subordinate resources: AS: 64165 IP: 2803:d0d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f2:5f:62:0a:4d:7a:d8:5d:01:f8:f2:d0:87:ac:54:7b:44:ca:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Nov 8 20:40:01 2024 GMT Not After : Nov 7 20:45:01 2025 GMT Subject: CN=4C36552D17EEEB8CC65AE8FB33251E48AA0B2089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:22:9c:2d:3e:60:ee:e6:df:8e:50:66:2f: f2:59:13:36:13:29:14:a7:d3:38:7b:f8:05:83:ec: 78:5c:6d:f5:64:b9:3c:35:32:11:16:27:d9:96:c6: 8a:c2:ed:f4:ad:3b:76:04:d7:29:47:7b:33:a3:84: 72:b3:b4:63:16:85:8c:44:11:14:08:65:c7:6d:49: e8:c3:68:20:75:38:49:9f:59:5d:b3:d3:93:7e:5e: 7a:12:5c:40:3a:97:08:48:1d:11:fd:fa:e1:4d:1a: 60:c1:11:f2:39:13:80:08:57:56:85:b7:4c:69:0b: 35:6a:2b:f5:94:d0:b0:6e:02:6e:84:3a:1b:7e:16: de:23:d4:09:99:49:b1:92:e1:ad:70:9e:b9:d6:fe: 41:b6:9d:e3:ff:fd:20:16:30:92:d5:4c:9d:2c:b6: 72:5b:5f:27:cb:dd:2a:bf:8b:2b:27:bd:01:18:50: af:c6:41:15:39:af:8f:8a:92:ee:f9:1d:20:b1:5f: 5f:7e:f4:96:aa:db:64:de:30:07:db:8d:20:bd:43: 50:e0:01:d7:c2:5c:04:33:26:17:6a:b0:8b:91:1e: 80:a2:eb:f6:af:18:fc:a1:52:60:56:01:68:32:36: 08:a5:a3:9d:4c:b8:21:2b:ce:f2:48:58:85:3a:ac: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:36:55:2D:17:EE:EB:8C:C6:5A:E8:FB:33:25:1E:48:AA:0B:20:89 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d0d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64165 Signature Algorithm: sha256WithRSAEncryption 0d:ec:c3:19:47:47:b4:a0:1f:ac:66:31:ad:1e:3c:f5:8c:b1: d3:40:48:96:02:e2:4c:db:05:1e:f9:f2:2e:73:8d:fb:cd:86: a8:ba:77:6f:7e:ca:43:c0:fb:15:56:8f:a9:6f:d9:ca:35:8f: d3:23:a4:38:bf:ee:2b:88:24:0b:90:7c:d6:09:56:36:83:ad: 0e:35:1c:9b:0c:9f:a9:d4:5e:9c:0b:73:1f:46:68:a8:80:77: ae:b0:f5:07:63:3a:79:0e:aa:13:d7:b8:57:1d:6f:c8:8b:08: c2:fb:b0:21:a7:fd:da:96:5c:23:68:12:b6:b0:49:33:ea:30: e9:90:5d:3b:4d:3d:31:2e:cf:41:e4:a1:a0:53:39:1f:8c:2b: 42:11:6c:0c:04:04:81:55:55:89:c3:2f:e5:15:1e:58:c3:2d: 34:c6:f3:cf:ac:51:4a:e2:02:cb:e9:d2:0f:72:1b:94:22:11: ad:86:31:af:b4:52:73:12:c2:f0:ad:cf:71:19:17:40:4e:09: b7:d6:a4:32:51:69:a1:0f:fd:66:e2:3c:12:73:fa:02:87:9d: 62:2f:f3:e9:0a:0b:3f:a3:7b:65:34:13:d3:9c:47:e3:e2:05: 74:95:2e:f4:30:a2:16:8a:39:3b:6b:7d:5a:02:a8:cd:04:c5: 59:0a:a1:01 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCfJfYgpNethdAfjy0IesVHtEyokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDExMDgyMDQwMDFaFw0yNTExMDcyMDQ1MDFaMDMxMTAvBgNV BAMTKDRDMzY1NTJEMTdFRUVCOENDNjVBRThGQjMzMjUxRTQ4QUEwQjIwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnCKcLT5g7ubfjlBmL/JZEzYT KRSn0zh7+AWD7HhcbfVkuTw1MhEWJ9mWxorC7fStO3YE1ylHezOjhHKztGMWhYxE ERQIZcdtSejDaCB1OEmfWV2z05N+XnoSXEA6lwhIHRH9+uFNGmDBEfI5E4AIV1aF t0xpCzVqK/WU0LBuAm6EOht+Ft4j1AmZSbGS4a1wnrnW/kG2neP//SAWMJLVTJ0s tnJbXyfL3Sq/iysnvQEYUK/GQRU5r4+Kku75HSCxX19+9Jaq22TeMAfbjSC9Q1Dg AdfCXAQzJhdqsIuRHoCi6/avGPyhUmBWAWgyNgilo51MuCErzvJIWIU6rGR3AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMNlUtF+7rjMZa 6PszJR5IqgsgiTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRURCRTA2MzRCNDAyQ0Y4QzRCMkQ0MkI4 QjIzMUQwRkMwOUZBMDM5QkI2NjdBRDZBRThCMkVGRUQ3MzdCNjA1RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FREJFMDYzNEI0MDJDRjhDNEIyRDQyQjhCMjMxRDBGQzA5RkEwMzlCQjY2 N0FENkFFOEIyRUZFRDczN0I2MDVELzAvNEMzNjU1MkQxN0VFRUI4Q0M2NUFFOEZC MzMyNTFFNDhBQTBCMjA4OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPQ0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMA+qUwDQYJKoZIhvcNAQELBQADggEBAA3swxlH R7SgH6xmMa0ePPWMsdNASJYC4kzbBR758i5zjfvNhqi6d29+ykPA+xVWj6lv2co1 j9MjpDi/7iuIJAuQfNYJVjaDrQ41HJsMn6nUXpwLcx9GaKiAd66w9QdjOnkOqhPX uFcdb8iLCML7sCGn/dqWXCNoErawSTPqMOmQXTtNPTEuz0HkoaBTOR+MK0IRbAwE BIFVVYnDL+UVHljDLTTG88+sUUriAsvp0g9yG5QiEa2GMa+0UnMSwvCtz3EZF0BO CbfWpDJRaaEP/WbiPBJz+gKHnWIv8+kKCz+je2U0E9OcR+PiBXSVLvQwohaKOTtr fVoCqM0ExVkKoQE= -----END CERTIFICATE-----Generated at Sun Apr 6 09:23:34 2025 by rpki-client