$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.cer File: 512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.cer (raw, json) Hash identifier: INF4A/6dQApRgse40cfL9a9RpVkbo2l7pSVIlX/zMk4= Subject key identifier: 51:21:37:FB:88:5E:12:4B:6C:D4:DE:71:BB:CC:6E:13:EB:AB:08:C0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 73A63A584E9C28D931A3E1E110C9014C4D6DDE87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:26:30 +0000 Certificate not after: Tue 03 Feb 2026 20:31:30 +0000 Subordinate resources: AS: 272105 IP: 2803:5710::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a6:3a:58:4e:9c:28:d9:31:a3:e1:e1:10:c9:01:4c:4d:6d:de:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:26:30 2025 GMT Not After : Feb 3 20:31:30 2026 GMT Subject: CN=512137FB885E124B6CD4DE71BBCC6E13EBAB08C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:49:ef:28:80:73:57:f0:ac:89:8c:a6:bc: 57:f4:20:52:bd:50:85:ac:8d:b9:d6:0c:73:07:02: 00:82:23:c4:a2:df:3f:1f:94:2b:d0:aa:3d:24:6d: af:11:c5:81:48:10:e1:0e:9b:ea:45:22:ab:94:c0: 6a:25:c4:e4:96:ad:d1:f2:55:f0:fd:2e:b0:95:7b: 83:1d:52:26:a8:fd:66:64:95:fa:26:58:f3:63:fa: 86:ac:03:bb:d4:3f:c7:92:c7:16:f1:78:c4:36:68: 20:5f:53:0e:ac:2e:29:23:1a:eb:d5:3a:b8:18:da: b9:41:68:89:d7:24:a9:84:4a:58:3c:e7:f9:c8:02: e4:74:52:d0:67:38:22:0a:00:15:a5:aa:47:02:fe: 5d:f0:0c:7d:de:79:7f:ac:1c:e1:fe:30:8c:c8:a4: b0:fa:db:69:77:55:6a:e9:eb:77:92:ec:6e:d6:a0: 8a:77:77:2a:ed:e9:cf:e6:d3:32:a2:07:fe:15:8f: ef:1b:36:f6:1e:b1:4f:bc:3a:50:18:c3:94:44:57: e5:46:19:a0:2b:80:58:9d:bf:c9:89:ce:d1:f0:fa: 5d:3c:e5:61:d3:af:2d:8e:a2:35:6b:da:77:a2:d7: a8:d8:2e:c2:56:63:88:e1:61:42:ea:aa:db:21:bc: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:21:37:FB:88:5E:12:4B:6C:D4:DE:71:BB:CC:6E:13:EB:AB:08:C0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2C6BE65A1D8035D0C6FEE37E39E63617AB684E498742D252D832F71E092CF1A4/0/512137FB885E124B6CD4DE71BBCC6E13EBAB08C0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5710::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272105 Signature Algorithm: sha256WithRSAEncryption 84:dc:83:2c:5e:1d:84:d2:3a:16:d4:0b:d4:89:12:0c:a3:ba: e2:98:48:d7:21:78:19:25:57:4d:25:05:a0:b4:17:6f:cb:ca: c4:f0:55:77:8a:06:60:a4:a6:f5:ce:c5:0f:25:c3:97:79:b1: cf:25:31:11:8c:ce:c4:2b:40:6c:57:a9:f1:4c:17:7a:35:1a: 98:e2:f2:f1:ed:18:88:1d:60:f8:8c:96:8f:92:09:bb:89:2e: b0:f6:7a:29:52:50:8e:38:df:33:05:00:49:e0:70:39:44:6d: 0f:ac:49:83:54:8b:cf:96:44:de:81:dc:f2:47:fc:9e:6b:94: f7:e1:d9:c8:ea:34:03:9d:72:ee:36:d2:74:3b:bd:2b:31:ed: 69:20:4d:d0:b0:76:c6:9a:b2:c0:c3:e3:54:0e:b7:4f:66:5d: 0e:de:49:d9:34:f0:6e:e9:a7:4f:db:82:72:e1:1d:f5:0c:0f: 47:d3:9f:c5:cf:c4:14:81:28:9d:61:6f:58:6c:6d:59:84:1e: 4f:37:9c:45:25:1c:33:b7:60:6a:2b:4a:df:fb:06:22:63:d9: 6a:3c:3b:06:52:ca:eb:0e:b7:8d:90:53:b2:bc:7d:28:4f:66: 63:f0:11:de:6a:54:d7:73:30:0d:98:3a:7e:14:d8:c7:93:bc: 9c:c7:46:84 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUc6Y6WE6cKNkxo+HhEMkBTE1t3ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDI2MzBaFw0yNjAyMDMyMDMxMzBaMDMxMTAvBgNV BAMTKDUxMjEzN0ZCODg1RTEyNEI2Q0Q0REU3MUJCQ0M2RTEzRUJBQjA4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2knvKIBzV/CsiYymvFf0IFK9 UIWsjbnWDHMHAgCCI8Si3z8flCvQqj0kba8RxYFIEOEOm+pFIquUwGolxOSWrdHy VfD9LrCVe4MdUiao/WZklfomWPNj+oasA7vUP8eSxxbxeMQ2aCBfUw6sLikjGuvV OrgY2rlBaInXJKmESlg85/nIAuR0UtBnOCIKABWlqkcC/l3wDH3eeX+sHOH+MIzI pLD622l3VWrp63eS7G7WoIp3dyrt6c/m0zKiB/4Vj+8bNvYesU+8OlAYw5REV+VG GaArgFidv8mJztHw+l085WHTry2OojVr2nei16jYLsJWY4jhYULqqtshvLAHAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRITf7iF4SS2zU 3nG7zG4T66sIwDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkM2QkU2NUExRDgwMzVEMEM2RkVFMzdF MzlFNjM2MTdBQjY4NEU0OTg3NDJEMjUyRDgzMkY3MUUwOTJDRjFBNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQzZCRTY1QTFEODAzNUQwQzZGRUUzN0UzOUU2MzYxN0FCNjg0RTQ5ODc0 MkQyNTJEODMyRjcxRTA5MkNGMUE0LzAvNTEyMTM3RkI4ODVFMTI0QjZDRDRERTcx QkJDQzZFMTNFQkFCMDhDMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANXEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJukwDQYJKoZIhvcNAQELBQADggEBAITcgyxe HYTSOhbUC9SJEgyjuuKYSNcheBklV00lBaC0F2/LysTwVXeKBmCkpvXOxQ8lw5d5 sc8lMRGMzsQrQGxXqfFMF3o1Gpji8vHtGIgdYPiMlo+SCbuJLrD2eilSUI443zMF AEngcDlEbQ+sSYNUi8+WRN6B3PJH/J5rlPfh2cjqNAOdcu420nQ7vSsx7WkgTdCw dsaassDD41QOt09mXQ7eSdk08G7pp0/bgnLhHfUMD0fTn8XPxBSBKJ1hb1hsbVmE Hk83nEUlHDO3YGorSt/7BiJj2Wo8OwZSyusOt42QU7K8fShPZmPwEd5qVNdzMA2Y On4U2MeTvJzHRoQ= -----END CERTIFICATE-----Generated at Sun Apr 6 08:03:02 2025 by rpki-client