$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.cer File: 5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.cer (raw, json) Hash identifier: jt0KsMRuahst1JkeZvjKNjIOdm2GPi2xQYgrlrvgK4U= Subject key identifier: 58:89:CE:AB:5F:6F:13:99:C6:38:E6:A5:1D:68:E2:60:D3:5B:4C:B2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 231F278A97C1817B503D9847C3274F0DC136F4A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:54:39 +0000 Certificate not after: Wed 04 Feb 2026 20:59:39 +0000 Subordinate resources: AS: 272102 IP: 2803:e710::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1f:27:8a:97:c1:81:7b:50:3d:98:47:c3:27:4f:0d:c1:36:f4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:54:39 2025 GMT Not After : Feb 4 20:59:39 2026 GMT Subject: CN=5889CEAB5F6F1399C638E6A51D68E260D35B4CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:95:ac:1e:d5:51:e6:99:a0:69:4c:62:a7: f6:7e:2b:7b:cc:11:77:7c:ea:9e:a1:1f:ca:33:12: 7c:de:2c:79:b2:67:5b:ec:93:2b:82:b8:95:e6:05: a9:fc:ea:83:7a:68:87:37:bc:36:b4:88:2b:ae:d7: 06:48:0a:3a:66:25:5b:86:ff:8c:68:65:f1:36:cc: 6c:e6:a9:20:71:1d:8b:76:72:df:f9:ac:bb:0f:43: 60:3e:c7:ed:7e:34:79:30:12:b8:e0:76:fd:75:1f: ac:00:2f:6b:5b:6b:02:dc:2b:c9:b7:30:54:4f:d0: 7a:f9:f4:1e:54:02:57:6e:2b:03:70:d3:a0:77:80: 03:0b:0c:9b:50:fa:d9:e7:16:12:4a:49:09:6c:a3: 9f:f1:9e:d9:c9:60:2e:a2:21:45:3a:b2:92:8a:56: 22:24:48:d5:8e:d6:69:db:07:30:0e:35:27:11:e8: 1b:da:7f:dd:a0:d4:a4:65:af:0a:f8:8e:49:e0:62: 17:8a:43:5d:c0:54:84:f6:f0:34:c4:a8:35:f4:32: 07:70:1c:ee:fc:41:9f:3d:80:ab:88:42:81:2e:12: 99:9c:79:ac:17:3d:0d:41:be:77:1f:94:a4:ae:29: 1a:d8:c9:4f:d4:d4:4b:91:74:96:5a:d6:2b:19:fb: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:89:CE:AB:5F:6F:13:99:C6:38:E6:A5:1D:68:E2:60:D3:5B:4C:B2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A80539EE11EA8AE3493B36CF24553E941B0B5FCBD97D9D06DA2D8A0239C4AD4B/0/5889CEAB5F6F1399C638E6A51D68E260D35B4CB2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e710::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272102 Signature Algorithm: sha256WithRSAEncryption 14:81:c8:44:dc:7c:2d:a3:cc:a8:68:2c:c4:db:bf:83:11:bd: af:8c:18:17:cb:c0:47:32:f3:0d:be:d3:c6:64:80:c3:00:57: ce:ed:8c:45:7a:ae:96:75:55:01:f2:e2:10:fd:ef:d2:d3:16: 78:f0:fb:9c:49:5a:3a:b5:6a:96:af:e6:34:ad:b7:fd:3a:ee: 8d:b4:5b:99:46:16:62:9d:9e:32:78:71:32:d0:28:0f:46:3c: e6:c0:09:13:ae:6b:a5:ed:34:c8:f2:ea:22:2a:4e:86:05:55: ae:45:22:2e:5d:5a:e2:48:58:d3:55:ca:be:de:ec:49:d6:9f: ae:4f:fc:33:31:5d:e3:ed:44:7b:df:ae:3c:7b:01:64:ed:61: be:fd:81:b2:b8:25:36:23:af:c8:5f:a0:50:15:6d:7a:54:d9: ba:79:0b:38:5f:4d:0d:9e:1a:8a:f7:de:c9:06:2f:42:9b:61: df:ad:74:7a:71:ba:71:e6:1a:58:df:31:fd:32:52:af:bf:62: 3d:3b:be:f7:8e:27:cd:44:80:21:ed:c0:43:0c:f0:19:3a:73: 34:6a:00:ae:1a:04:72:21:00:37:6a:e4:53:64:d8:82:4d:80: 58:e5:fb:36:7f:a9:36:9b:a8:b9:80:05:84:0e:12:22:05:80: 2e:49:de:71 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUIx8nipfBgXtQPZhHwydPDcE29KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMDU0MzlaFw0yNjAyMDQyMDU5MzlaMDMxMTAvBgNV BAMTKDU4ODlDRUFCNUY2RjEzOTlDNjM4RTZBNTFENjhFMjYwRDM1QjRDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPZWsHtVR5pmgaUxip/Z+K3vM EXd86p6hH8ozEnzeLHmyZ1vskyuCuJXmBan86oN6aIc3vDa0iCuu1wZICjpmJVuG /4xoZfE2zGzmqSBxHYt2ct/5rLsPQ2A+x+1+NHkwErjgdv11H6wAL2tbawLcK8m3 MFRP0Hr59B5UAlduKwNw06B3gAMLDJtQ+tnnFhJKSQlso5/xntnJYC6iIUU6spKK ViIkSNWO1mnbBzAONScR6Bvaf92g1KRlrwr4jkngYheKQ13AVIT28DTEqDX0Mgdw HO78QZ89gKuIQoEuEpmceawXPQ1BvncflKSuKRrYyU/U1EuRdJZa1isZ+1lVAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRYic6rX28TmcY4 5qUdaOJg01tMsjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTgwNTM5RUUxMUVBOEFFMzQ5M0IzNkNG MjQ1NTNFOTQxQjBCNUZDQkQ5N0Q5RDA2REEyRDhBMDIzOUM0QUQ0Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BODA1MzlFRTExRUE4QUUzNDkzQjM2Q0YyNDU1M0U5NDFCMEI1RkNCRDk3 RDlEMDZEQTJEOEEwMjM5QzRBRDRCLzAvNTg4OUNFQUI1RjZGMTM5OUM2MzhFNkE1 MUQ2OEUyNjBEMzVCNENCMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPnEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJuYwDQYJKoZIhvcNAQELBQADggEBABSByETc fC2jzKhoLMTbv4MRva+MGBfLwEcy8w2+08ZkgMMAV87tjEV6rpZ1VQHy4hD979LT Fnjw+5xJWjq1apav5jStt/067o20W5lGFmKdnjJ4cTLQKA9GPObACROua6XtNMjy 6iIqToYFVa5FIi5dWuJIWNNVyr7e7EnWn65P/DMxXePtRHvfrjx7AWTtYb79gbK4 JTYjr8hfoFAVbXpU2bp5CzhfTQ2eGor33skGL0KbYd+tdHpxunHmGljfMf0yUq+/ Yj07vveOJ81EgCHtwEMM8Bk6czRqAK4aBHIhADdq5FNk2IJNgFjl+zZ/qTabqLmA BYQOEiIFgC5J3nE= -----END CERTIFICATE-----Generated at Sat Apr 12 10:01:50 2025 by rpki-client