$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.cer File: 54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.cer (raw, json) Hash identifier: xh5MBEfzLSwagYxBpaKxNFOqDoggUqFduP41bkUUkRI= Subject key identifier: 54:BF:01:E8:FE:FC:44:F8:7E:2F:D9:CC:82:97:7E:2D:63:E6:3E:C0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 03CB338666FE85A19C0191C6409DC406112113B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:10 +0000 Certificate not after: Tue 03 Feb 2026 18:59:10 +0000 Subordinate resources: AS: 263720 IP: 132.255.200.0/22 IP: 2803:5780::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:33:86:66:fe:85:a1:9c:01:91:c6:40:9d:c4:06:11:21:13:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:10 2025 GMT Not After : Feb 3 18:59:10 2026 GMT Subject: CN=54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:0f:f6:8c:04:08:75:72:ef:26:45:94:e0: f0:05:3d:ad:c4:b9:28:0f:ec:57:a1:2f:b5:31:78: e9:2b:54:d9:71:1c:65:cf:97:f0:a5:37:b9:cc:62: 0d:e7:42:8d:34:9e:d3:e0:44:4c:44:1b:e7:fc:73: 4d:97:6b:03:cb:81:13:c4:ed:74:ea:92:51:e8:cb: dd:57:f3:0b:0a:12:72:e3:b8:0b:60:af:7b:2e:fe: c0:5d:f8:11:b5:4d:59:db:ec:b8:32:05:b0:cf:91: 98:1d:42:f2:6a:fe:d9:66:2e:0d:e2:b1:df:4b:44: c8:3d:48:c3:cd:70:c9:cf:b1:b1:22:03:bb:6d:c3: 88:1f:15:c2:41:69:30:f7:4e:f0:72:c4:0e:ca:38: 51:0a:e8:13:bd:e3:f6:45:c7:09:83:cf:65:57:f7: 53:97:44:08:5b:4a:78:fa:84:d2:7f:89:35:da:26: 05:c3:ca:50:6a:4a:c8:3c:14:5b:1b:56:cc:a8:c4: 24:27:4d:81:31:6c:f6:8a:9b:d0:e4:b8:c1:b2:29: 56:c9:2d:fa:f2:1c:50:3d:7b:c5:05:c7:ca:86:39: e4:6e:58:5b:6b:40:10:8a:e9:90:e6:ed:d8:5e:eb: 40:6e:17:ee:46:3b:cd:85:ad:da:73:73:1c:2d:17: cb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:BF:01:E8:FE:FC:44:F8:7E:2F:D9:CC:82:97:7E:2D:63:E6:3E:C0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EE11B84CD61D902CE28213D0C39918102FCB56822AF6777BC9B24B1037D6BF1E/0/54BF01E8FEFC44F87E2FD9CC82977E2D63E63EC0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.200.0/22 IPv6: 2803:5780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263720 Signature Algorithm: sha256WithRSAEncryption 30:44:9b:df:e1:85:91:4a:ed:6f:be:bc:79:1f:cb:b9:71:a1: 74:f9:b2:49:77:2c:b7:cd:89:75:5b:b4:a5:37:85:f6:62:46: c0:52:51:3f:b0:5f:f4:38:92:62:79:27:62:b4:ea:28:78:e9: 32:0e:1c:bd:b6:05:68:82:cb:4a:9b:2f:d5:ff:9a:b5:67:d2: 34:11:fb:60:44:b1:9d:d4:cd:1b:9a:1e:0e:b9:5b:f5:a1:d4: cd:b8:37:96:96:f4:36:c3:b6:5a:e4:89:1b:c1:0c:27:4e:bd: 77:08:14:59:eb:95:cc:3a:b5:7f:f4:a5:bc:a9:a7:2c:e4:a0: 29:c2:d7:3d:ef:ab:3f:c9:b4:d7:41:dc:c0:b9:78:d8:c7:5f: 08:ca:35:76:69:15:68:d1:50:89:06:88:ff:36:cc:d6:f6:7e: 43:ba:1e:f2:7a:b9:2d:6f:44:e2:f3:05:b1:7b:65:e4:03:47: 52:ba:b4:32:72:a5:7e:c3:b5:a6:88:b0:84:37:a9:c5:96:6a: 3f:fb:66:b1:bc:e4:93:4f:97:75:26:90:79:c8:bc:c2:ab:9d: 1c:47:cd:c1:06:72:60:87:5d:8a:4b:c4:d0:18:55:52:51:2a: dd:d0:b4:a9:5d:a5:58:4f:e8:7e:36:a1:a5:6a:03:f6:a6:d5: 30:3a:3f:94 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUA8szhmb+haGcAZHGQJ3EBhEhE7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MTBaFw0yNjAyMDMxODU5MTBaMDMxMTAvBgNV BAMTKDU0QkYwMUU4RkVGQzQ0Rjg3RTJGRDlDQzgyOTc3RTJENjNFNjNFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYQ/2jAQIdXLvJkWU4PAFPa3E uSgP7FehL7UxeOkrVNlxHGXPl/ClN7nMYg3nQo00ntPgRExEG+f8c02XawPLgRPE 7XTqklHoy91X8wsKEnLjuAtgr3su/sBd+BG1TVnb7LgyBbDPkZgdQvJq/tlmLg3i sd9LRMg9SMPNcMnPsbEiA7ttw4gfFcJBaTD3TvByxA7KOFEK6BO94/ZFxwmDz2VX 91OXRAhbSnj6hNJ/iTXaJgXDylBqSsg8FFsbVsyoxCQnTYExbPaKm9DkuMGyKVbJ LfryHFA9e8UFx8qGOeRuWFtrQBCK6ZDm7dhe60BuF+5GO82FrdpzcxwtF8szAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUvwHo/vxE+H4v 2cyCl34tY+Y+wDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUUxMUI4NENENjFEOTAyQ0UyODIxM0Qw QzM5OTE4MTAyRkNCNTY4MjJBRjY3NzdCQzlCMjRCMTAzN0Q2QkYxRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FRTExQjg0Q0Q2MUQ5MDJDRTI4MjEzRDBDMzk5MTgxMDJGQ0I1NjgyMkFG Njc3N0JDOUIyNEIxMDM3RDZCRjFFLzAvNTRCRjAxRThGRUZDNDRGODdFMkZEOUND ODI5NzdFMkQ2M0U2M0VDMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQChP/IMA0EAgAC MAcDBQAoA1eAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGKDANBgkqhkiG9w0B AQsFAAOCAQEAMESb3+GFkUrtb768eR/LuXGhdPmySXcst82JdVu0pTeF9mJGwFJR P7Bf9DiSYnknYrTqKHjpMg4cvbYFaILLSpsv1f+atWfSNBH7YESxndTNG5oeDrlb 9aHUzbg3lpb0NsO2WuSJG8EMJ069dwgUWeuVzDq1f/SlvKmnLOSgKcLXPe+rP8m0 10HcwLl42MdfCMo1dmkVaNFQiQaI/zbM1vZ+Q7oe8nq5LW9E4vMFsXtl5ANHUrq0 MnKlfsO1poiwhDepxZZqP/tmsbzkk0+XdSaQeci8wqudHEfNwQZyYIddikvE0BhV UlEq3dC0qV2lWE/ofjahpWoD9qbVMDo/lA== -----END CERTIFICATE-----Generated at Mon Apr 7 00:42:26 2025 by rpki-client