$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E987EE11A4D8C39E36727363E117EC929A11A78.cer File: 4E987EE11A4D8C39E36727363E117EC929A11A78.cer (raw, json) Hash identifier: DMR6xb1DJFXMITIYNFcRQvU2l0bfi1YrjZJrhEEml/0= Subject key identifier: 4E:98:7E:E1:1A:4D:8C:39:E3:67:27:36:3E:11:7E:C9:29:A1:1A:78 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7D752A94E216C2B03F7545D4447CBBFD453C13AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/4E987EE11A4D8C39E36727363E117EC929A11A78.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 02 Jun 2025 03:46:01 +0000 Certificate not after: Mon 01 Jun 2026 03:51:01 +0000 Subordinate resources: IP: 170.238.8.0/22 IP: 2803:d2c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:75:2a:94:e2:16:c2:b0:3f:75:45:d4:44:7c:bb:fd:45:3c:13:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 2 03:46:01 2025 GMT Not After : Jun 1 03:51:01 2026 GMT Subject: CN=4E987EE11A4D8C39E36727363E117EC929A11A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:b8:dd:16:99:b7:ff:da:ad:57:fb:8d:0b: 97:50:85:71:3b:65:17:ce:20:ab:c3:8a:e4:85:6c: a1:f5:c9:35:69:51:5b:2a:c0:03:d6:9d:42:8c:f7: 47:30:50:b6:8c:46:92:3d:c4:ae:38:2a:25:7a:63: 0b:22:b1:2a:a7:9e:8d:85:e4:9b:b8:9a:37:4b:5a: a7:20:79:2a:11:46:0e:a5:61:e0:28:fa:57:81:c4: 6a:86:13:c5:04:7d:6a:5e:0a:e6:bf:15:2f:3f:94: 84:60:72:36:27:70:11:3d:0c:ae:6c:b8:09:90:b1: a3:c8:d4:c4:31:4e:39:b6:5c:cd:ae:ea:8e:77:33: 03:98:10:53:65:1c:2d:70:95:c4:7f:4c:51:aa:f8: b9:6b:03:af:6a:d8:6c:7e:60:3f:e2:66:2f:87:16: f4:36:fb:7d:bb:f9:1f:ba:cd:fc:3d:5a:ed:82:44: 19:cb:0c:b1:39:11:f0:dc:80:48:1c:a6:8c:78:0b: 76:dc:14:fd:09:69:87:6f:82:48:06:56:9c:86:93: 9f:72:8e:51:2a:71:71:64:f5:93:ba:0f:7e:4b:68: 69:9f:5a:7d:e0:8c:bf:a5:05:ba:7d:15:1a:4f:c6: 69:5c:89:4d:cb:5b:ce:ee:36:0a:2c:0f:9d:5e:1d: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:98:7E:E1:1A:4D:8C:39:E3:67:27:36:3E:11:7E:C9:29:A1:1A:78 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/4E987EE11A4D8C39E36727363E117EC929A11A78.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.8.0/22 IPv6: 2803:d2c0::/32 Signature Algorithm: sha256WithRSAEncryption d2:6d:75:57:84:20:32:17:1f:91:ba:a4:f1:92:9e:4b:2d:78: c5:f6:fa:5f:aa:e4:e8:ff:15:68:b8:ef:ef:d7:48:0d:3a:af: da:c5:50:60:b3:07:de:89:a1:5c:bc:c2:0e:62:4a:a7:aa:f5: 06:94:6d:28:d5:bd:1d:3b:85:d6:95:30:24:b0:86:89:af:77: 56:f8:0b:3a:a8:58:96:96:41:ef:ad:75:1c:24:5c:8e:26:50: 44:22:4a:09:77:e3:6b:3a:40:1b:cc:05:94:83:5e:0b:5e:1f: e9:e9:cb:7c:c5:ed:0a:5e:26:b5:2b:0b:31:d1:52:be:6a:6d: 86:a1:c2:e5:e1:69:3b:92:0d:28:7a:95:77:f3:90:55:78:51: 6c:56:82:cc:03:d7:23:d4:c5:51:4c:01:a5:72:ce:24:c6:5c: 0e:05:c9:fb:b6:ae:38:66:c3:32:ad:92:d9:66:ec:5a:b5:74: a8:02:7a:57:5f:62:f6:b5:6d:47:13:01:e7:49:f1:e7:b3:95: 48:75:f7:5b:6f:91:74:30:eb:8e:8c:63:06:dd:ce:e0:41:8d: b9:9c:01:02:cf:e6:cb:c8:c1:d6:23:be:d4:93:a0:d9:09:69: b0:d7:9a:73:72:e9:c2:b6:c0:6b:47:61:f4:d6:d9:af:3f:9a: b1:88:a2:80 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUfXUqlOIWwrA/dUXURHy7/UU8E64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA2MDIwMzQ2MDFaFw0yNjA2MDEwMzUxMDFaMDMxMTAvBgNV BAMTKDRFOTg3RUUxMUE0RDhDMzlFMzY3MjczNjNFMTE3RUM5MjlBMTFBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhLjdFpm3/9qtV/uNC5dQhXE7 ZRfOIKvDiuSFbKH1yTVpUVsqwAPWnUKM90cwULaMRpI9xK44KiV6YwsisSqnno2F 5Ju4mjdLWqcgeSoRRg6lYeAo+leBxGqGE8UEfWpeCua/FS8/lIRgcjYncBE9DK5s uAmQsaPI1MQxTjm2XM2u6o53MwOYEFNlHC1wlcR/TFGq+LlrA69q2Gx+YD/iZi+H FvQ2+327+R+6zfw9Wu2CRBnLDLE5EfDcgEgcpox4C3bcFP0JaYdvgkgGVpyGk59y jlEqcXFk9ZO6D35LaGmfWn3gjL+lBbp9FRpPxmlciU3LW87uNgosD51eHY8xAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROmH7hGk2MOeNn JzY+EX7JKaEaeDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzNDMENDQzFBOTRDRjgyMjQ3RDJGQTgz MDFGNDlBNzU0OUIzNEMwNzE1QjdFMTAwQzk5Q0VCQTI2NTUxM0M3Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DM0MwQ0NDMUE5NENGODIyNDdEMkZBODMwMUY0OUE3NTQ5QjM0QzA3MTVC N0UxMDBDOTlDRUJBMjY1NTEzQzcyLzAvNEU5ODdFRTExQTREOEMzOUUzNjcyNzM2 M0UxMTdFQzkyOUExMUE3OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqu4IMA0EAgAC MAcDBQAoA9LAMA0GCSqGSIb3DQEBCwUAA4IBAQDSbXVXhCAyFx+RuqTxkp5LLXjF 9vpfquTo/xVouO/v10gNOq/axVBgswfeiaFcvMIOYkqnqvUGlG0o1b0dO4XWlTAk sIaJr3dW+As6qFiWlkHvrXUcJFyOJlBEIkoJd+NrOkAbzAWUg14LXh/p6ct8xe0K Xia1Kwsx0VK+am2GocLl4Wk7kg0oepV385BVeFFsVoLMA9cj1MVRTAGlcs4kxlwO Bcn7tq44ZsMyrZLZZuxatXSoAnpXX2L2tW1HEwHnSfHns5VIdfdbb5F0MOuOjGMG 3c7gQY25nAECz+bLyMHWI77Uk6DZCWmw15pzcunCtsBrR2H01tmvP5qxiKKA -----END CERTIFICATE-----Generated at Mon Jun 2 17:28:23 2025 by rpki-client