$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.cer File: 54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.cer (raw, json) Hash identifier: DTRp6sVah2u41+Ip4OQUrfehvi8hCy1LJlZ3e/MAJB4= Subject key identifier: 54:AE:4F:90:93:F4:3A:67:A2:FE:13:41:FD:24:90:AA:6C:8A:6C:F9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1443C3652377C25078269CB6094BC3617FC2A83C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 15:00:54 +0000 Certificate not after: Wed 04 Feb 2026 15:05:54 +0000 Subordinate resources: AS: 272902 IP: 200.123.54.0/24 IP: 2803:d690::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 00:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:43:c3:65:23:77:c2:50:78:26:9c:b6:09:4b:c3:61:7f:c2:a8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 15:00:54 2025 GMT Not After : Feb 4 15:05:54 2026 GMT Subject: CN=54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:90:08:96:6b:c0:1d:04:f4:e0:d9:ac:de: ba:6d:1e:3c:4d:9f:44:b7:16:4e:4f:a0:76:54:1e: 44:b6:f3:e3:6a:72:1e:07:92:5c:5a:c4:0a:05:36: 0b:ef:93:5c:0b:4c:8d:98:fb:9b:a7:ce:2c:f7:fe: 08:3f:30:84:aa:d1:7c:f2:c5:fb:f1:0d:be:55:8f: ef:cb:19:90:2b:31:03:aa:4f:85:f2:04:2e:2e:64: 50:10:0d:db:60:38:b1:df:d2:72:42:ef:39:be:ae: a8:e5:9e:8f:9e:eb:d4:38:30:c9:c5:ac:14:e6:ab: e9:f0:90:89:d3:48:1b:7f:99:38:f3:fd:a9:b5:96: 72:fa:57:78:fa:26:4d:69:e0:68:9a:6c:76:80:97: f3:05:52:0d:ee:9a:d4:ca:5b:da:54:55:dc:38:0c: c2:49:79:92:3b:44:42:f9:8f:f9:84:86:94:f6:39: 27:ac:c0:e2:df:13:a0:ea:d6:bd:95:25:9a:11:12: 32:39:a4:8a:38:9a:1d:9c:91:18:3e:29:b9:a3:d4: 61:b7:9d:78:7b:03:3c:6e:d6:38:df:d8:c6:fd:85: 71:f6:33:a0:fd:33:74:96:56:5c:4c:8a:bf:ee:bd: cd:6e:3a:06:df:a2:9a:1e:b8:4a:85:42:ef:06:65: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:AE:4F:90:93:F4:3A:67:A2:FE:13:41:FD:24:90:AA:6C:8A:6C:F9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.123.54.0/24 IPv6: 2803:d690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272902 Signature Algorithm: sha256WithRSAEncryption 69:dd:e7:78:8d:2d:58:3d:1b:f7:22:41:3c:f3:90:0f:66:99: 34:77:bd:68:e6:2a:43:76:40:f9:9c:2b:6e:0c:46:34:ef:d2: 96:f8:53:8d:23:15:d7:d1:6d:2e:35:32:be:f8:26:0a:ae:3e: 09:46:4b:98:8c:cf:e4:b3:9f:bc:5f:c9:26:98:f0:fe:1e:e6: 4a:39:41:6d:1f:46:ed:00:2d:bc:b4:c6:cb:e3:56:73:6e:db: 48:91:c2:67:c7:01:20:6b:85:ed:b6:7e:23:35:a3:cf:ea:be: 25:54:d7:97:c7:ba:b8:24:fe:d8:e8:d1:a0:e2:39:af:31:20: bd:00:1c:f8:85:99:25:fe:b9:02:4c:aa:4b:52:f7:45:57:b2: e7:01:6d:5b:44:28:0b:bb:93:96:51:e4:ff:98:e4:2c:32:9e: e1:ac:d3:d5:35:5f:2f:55:03:f5:ca:25:d7:16:a5:1c:bb:47: c3:5f:af:d2:cb:3c:dd:fe:8a:64:6f:49:dd:24:27:35:67:1e: d0:f1:dc:ff:c4:ff:31:47:fa:43:63:31:99:cd:57:5b:b5:7b: d9:7e:b6:30:25:63:57:4b:7c:5f:02:d4:bd:42:8e:18:99:f6: 9f:d6:f4:4d:da:f8:1d:e2:32:fd:7f:c0:21:1c:85:77:6d:64: 2c:b8:e7:bf -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUFEPDZSN3wlB4Jpy2CUvDYX/CqDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNTAwNTRaFw0yNjAyMDQxNTA1NTRaMDMxMTAvBgNV BAMTKDU0QUU0RjkwOTNGNDNBNjdBMkZFMTM0MUZEMjQ5MEFBNkM4QTZDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJZAIlmvAHQT04Nms3rptHjxN n0S3Fk5PoHZUHkS28+Nqch4HklxaxAoFNgvvk1wLTI2Y+5unziz3/gg/MISq0Xzy xfvxDb5Vj+/LGZArMQOqT4XyBC4uZFAQDdtgOLHf0nJC7zm+rqjlno+e69Q4MMnF rBTmq+nwkInTSBt/mTjz/am1lnL6V3j6Jk1p4GiabHaAl/MFUg3umtTKW9pUVdw4 DMJJeZI7REL5j/mEhpT2OSeswOLfE6Dq1r2VJZoREjI5pIo4mh2ckRg+Kbmj1GG3 nXh7Azxu1jjf2Mb9hXH2M6D9M3SWVlxMir/uvc1uOgbfopoeuEqFQu8GZa//AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUrk+Qk/Q6Z6L+ E0H9JJCqbIps+TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUFCRDQ2NEJDQ0M3NDAyMjY4NEY0M0Qz Qjk0NTc0QzA4NUU1MEE0MTY2RDQyMTI1NzdFMjBCNTI1MTA0RUEzOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQUJENDY0QkNDQzc0MDIyNjg0RjQzRDNCOTQ1NzRDMDg1RTUwQTQxNjZE NDIxMjU3N0UyMEI1MjUxMDRFQTM5LzAvNTRBRTRGOTA5M0Y0M0E2N0EyRkUxMzQx RkQyNDkwQUE2QzhBNkNGOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAyHs2MA0EAgAC MAcDBQAoA9aQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqBjANBgkqhkiG9w0B AQsFAAOCAQEAad3neI0tWD0b9yJBPPOQD2aZNHe9aOYqQ3ZA+ZwrbgxGNO/SlvhT jSMV19FtLjUyvvgmCq4+CUZLmIzP5LOfvF/JJpjw/h7mSjlBbR9G7QAtvLTGy+NW c27bSJHCZ8cBIGuF7bZ+IzWjz+q+JVTXl8e6uCT+2OjRoOI5rzEgvQAc+IWZJf65 AkyqS1L3RVey5wFtW0QoC7uTllHk/5jkLDKe4azT1TVfL1UD9col1xalHLtHw1+v 0ss83f6KZG9J3SQnNWce0PHc/8T/MUf6Q2Mxmc1XW7V72X62MCVjV0t8XwLUvUKO GJn2n9b0Tdr4HeIy/X/AIRyFd21kLLjnvw== -----END CERTIFICATE-----Generated at Wed Jul 30 14:12:44 2025 by rpki-client