$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer File: 5021716DB872AFEA302E881734C3D03B1DCE1384.cer (raw, json) Hash identifier: HHGdVeSCoZS7hsbv3aOt1cp4gB4+N0AdDfwJgHOPeTg= Subject key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1D76B237349644C659BBA520DF087B9056CD9A59 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:35:25 +0000 Certificate not after: Wed 04 Feb 2026 05:40:25 +0000 Subordinate resources: AS: 273015 IP: 2803:a390::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:76:b2:37:34:96:44:c6:59:bb:a5:20:df:08:7b:90:56:cd:9a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:35:25 2025 GMT Not After : Feb 4 05:40:25 2026 GMT Subject: CN=5021716DB872AFEA302E881734C3D03B1DCE1384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:7d:20:14:d4:5c:80:0b:b1:22:0b:03:62: de:e6:bc:93:10:15:cb:93:4f:63:23:56:b5:b5:40: 83:7d:28:93:05:9c:61:be:52:92:e1:14:8c:2f:86: 04:ee:94:e8:f3:78:87:aa:c6:e8:c6:d8:51:de:ea: 27:95:60:f0:cb:de:68:01:56:27:4d:f5:b8:65:2d: 21:47:7a:68:90:ba:c0:82:b1:40:18:ba:2f:51:2e: 59:e7:93:29:86:3d:65:79:cc:ff:de:6e:2c:ca:fe: 43:b1:f6:87:8a:04:a8:4d:e6:7a:93:80:31:76:1c: 6e:0f:09:3a:16:ab:77:fa:8b:f6:79:d4:7f:e1:0c: af:99:46:97:a3:27:36:8e:66:ba:bb:da:f9:a3:46: 24:5d:c2:51:55:6f:d0:9e:b0:09:1a:57:57:73:17: 4f:b5:b1:8a:ff:58:74:e1:25:6f:af:76:32:f6:48: 47:9f:47:82:95:01:fb:3e:0a:b8:26:de:6e:d1:d5: 71:6b:98:7e:cb:d8:3c:1e:e4:bd:2b:18:25:af:fc: 84:d5:41:51:05:4a:4f:88:77:72:85:dd:a4:9f:92: 93:aa:d8:dc:24:89:b1:59:e2:95:7e:f5:c7:93:1b: 34:72:f7:1e:4a:33:b0:27:7b:fd:74:90:dd:23:78: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:a390::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273015 Signature Algorithm: sha256WithRSAEncryption 32:d7:62:71:6c:1f:36:a8:5d:9c:6c:8c:38:66:e6:fb:13:8c: 83:48:f6:8d:ea:fa:fe:7b:d4:b6:50:e6:de:8f:74:ac:e0:bc: a0:74:26:d8:3d:77:20:b8:d6:a5:38:48:9f:26:38:55:d8:57: 31:7e:30:c2:59:97:9c:a6:dc:c0:f7:1c:9f:ec:2c:3a:1f:df: 96:d5:5d:c6:f0:3a:b6:a5:f4:38:6b:b3:57:e1:f7:8f:3e:20: e8:13:cf:bf:63:78:74:cb:77:c9:fe:f1:52:95:82:0a:d4:6a: f6:86:46:89:e1:39:d5:51:60:cc:3a:a0:cc:2d:7c:c8:4c:24: d4:53:4c:4c:b4:9e:fd:fb:6d:29:a6:08:e8:36:81:d9:ae:d1: e4:c3:cd:4f:14:58:80:e6:b3:f3:e4:d9:56:3a:0d:de:c5:ff: fd:21:58:cd:0e:1a:1b:21:65:e1:fd:2e:07:58:30:c9:df:ce: d1:1c:22:b3:87:c7:c7:57:d1:40:da:ec:f5:78:8c:ca:50:fe: c0:7e:c2:bf:b3:b6:53:32:0b:85:bb:51:c6:46:f2:30:95:63: e8:4f:e8:f1:8c:81:74:84:29:4a:4d:7e:e6:df:e4:8b:9d:25: 02:d4:f3:a7:a7:ae:05:c4:fd:c3:bd:34:de:f1:0c:eb:ec:f7: 67:c8:a3:8a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUHXayNzSWRMZZu6Ug3wh7kFbNmlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTM1MjVaFw0yNjAyMDQwNTQwMjVaMDMxMTAvBgNV BAMTKDUwMjE3MTZEQjg3MkFGRUEzMDJFODgxNzM0QzNEMDNCMURDRTEzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi830gFNRcgAuxIgsDYt7mvJMQ FcuTT2MjVrW1QIN9KJMFnGG+UpLhFIwvhgTulOjzeIeqxujG2FHe6ieVYPDL3mgB VidN9bhlLSFHemiQusCCsUAYui9RLlnnkymGPWV5zP/ebizK/kOx9oeKBKhN5nqT gDF2HG4PCToWq3f6i/Z51H/hDK+ZRpejJzaOZrq72vmjRiRdwlFVb9CesAkaV1dz F0+1sYr/WHThJW+vdjL2SEefR4KVAfs+Crgm3m7R1XFrmH7L2Dwe5L0rGCWv/ITV QVEFSk+Id3KF3aSfkpOq2NwkibFZ4pV+9ceTGzRy9x5KM7Ane/10kN0jeBwrAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQIXFtuHKv6jAu iBc0w9A7Hc4ThDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTI5N0I3MDc4RkIxQjUyMTAwNkQ3NTFB MzJBMkFDMzVGNjE0NjE3NTIyNDg0Rjg4N0U1RTc3QTJDRkM3NTI1Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81Mjk3QjcwNzhGQjFCNTIxMDA2RDc1MUEzMkEyQUMzNUY2MTQ2MTc1MjI0 ODRGODg3RTVFNzdBMkNGQzc1MjU3LzAvNTAyMTcxNkRCODcyQUZFQTMwMkU4ODE3 MzRDM0QwM0IxRENFMTM4NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOjkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKncwDQYJKoZIhvcNAQELBQADggEBADLXYnFs HzaoXZxsjDhm5vsTjINI9o3q+v571LZQ5t6PdKzgvKB0Jtg9dyC41qU4SJ8mOFXY VzF+MMJZl5ym3MD3HJ/sLDof35bVXcbwOral9Dhrs1fh948+IOgTz79jeHTLd8n+ 8VKVggrUavaGRonhOdVRYMw6oMwtfMhMJNRTTEy0nv37bSmmCOg2gdmu0eTDzU8U WIDms/Pk2VY6Dd7F//0hWM0OGhshZeH9LgdYMMnfztEcIrOHx8dX0UDa7PV4jMpQ /sB+wr+ztlMyC4W7UcZG8jCVY+hP6PGMgXSEKUpNfubf5IudJQLU86enrgXE/cO9 NN7xDOvs92fIo4o= -----END CERTIFICATE-----Generated at Sat Apr 12 10:01:48 2025 by rpki-client