$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.cer File: 596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.cer (raw, json) Hash identifier: EX3LYsFJEHma7F10EnlLWQCuqXwCuhGtCFSARUNRv6Y= Subject key identifier: 59:6D:2E:DA:6E:CC:42:DC:01:32:B3:F7:02:8F:4D:83:8C:A0:BF:5F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2BCEE4222340C8DD099A3B91F707DEB00688A0C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 22:22:28 +0000 Certificate not after: Wed 04 Feb 2026 22:27:28 +0000 Subordinate resources: AS: 265758 IP: 131.196.180.0/22 IP: 2803:5bc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ce:e4:22:23:40:c8:dd:09:9a:3b:91:f7:07:de:b0:06:88:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 22:22:28 2025 GMT Not After : Feb 4 22:27:28 2026 GMT Subject: CN=596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:a3:bf:c2:cc:80:43:e6:52:b2:9f:38:ba: 48:22:f6:5a:e6:ae:3f:3f:72:64:8c:b5:7e:9e:87: 91:8b:83:69:0f:3d:43:d8:1c:af:91:16:f3:75:c4: c7:9d:ee:3d:ca:20:eb:ab:15:66:c3:6f:a3:c1:8c: 8b:88:a7:44:76:7d:e5:92:e3:c8:15:12:db:33:10: 02:fe:7e:ca:26:b1:cb:0b:14:f8:6a:5c:f4:b6:49: a6:46:19:cd:87:e5:d2:c3:88:c1:64:8b:1a:d4:fe: c4:00:21:b3:66:96:2e:9d:b1:13:e0:95:ce:9e:a4: 58:e4:15:d4:d1:9f:b3:c8:92:c8:cf:47:74:32:7e: 89:61:bb:db:1b:21:f3:d6:49:8c:e5:3f:5e:9c:83: 69:0f:83:d3:e2:fc:8c:1f:11:65:be:37:55:02:82: 20:db:d3:05:25:65:71:28:7b:0e:03:ac:a7:ef:fb: e3:9b:3f:cc:90:ed:63:0f:c4:5d:7d:e2:a4:98:0f: 5f:b4:5a:38:96:1e:26:8a:a0:fe:d3:23:a2:4c:2d: 3b:db:b6:76:c6:9f:15:89:d7:06:3f:17:13:4a:01: c0:43:21:8b:dc:1b:2c:d6:2a:f6:95:05:a6:9d:4f: dd:fe:c7:37:5a:ee:ad:3b:92:9b:96:e3:95:80:9e: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:6D:2E:DA:6E:CC:42:DC:01:32:B3:F7:02:8F:4D:83:8C:A0:BF:5F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.180.0/22 IPv6: 2803:5bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265758 Signature Algorithm: sha256WithRSAEncryption 9d:a1:a3:fb:a8:ec:c3:eb:41:04:a9:07:cc:35:98:77:2a:a5: 21:1f:7b:75:44:9d:14:49:37:6b:6a:a7:55:90:bc:9f:ca:35: 27:27:f6:81:32:8d:36:ef:da:9c:4a:90:a7:43:64:31:06:06: 0b:09:d3:bd:ca:da:5b:7b:d0:1f:c9:ab:09:7e:bd:5a:c4:e0: 20:21:43:b5:5f:c3:ae:f3:77:94:e5:41:9b:70:24:19:b9:9a: 2c:2b:08:1e:6a:97:46:99:e3:c8:60:bd:b7:c8:5b:65:86:c7: 57:b4:b2:6f:da:bf:b6:4a:a0:6b:52:49:88:3c:df:2f:b1:d5: 4d:d9:a1:00:0d:ab:7b:9a:0f:f9:49:35:97:cd:cc:5f:75:ef: d7:85:40:8c:ad:c9:b8:28:c9:81:f4:cc:75:e3:92:8d:1a:91: 8f:2b:00:2d:18:9b:c5:43:0a:15:fd:c3:2d:ae:ea:d1:a2:ef: 64:96:6e:70:88:10:8c:a2:5e:2c:33:12:6c:cf:34:0c:ac:3c: 42:ee:a3:50:3e:8d:d6:83:81:b6:92:ba:e5:14:a4:7e:d1:61: 3c:90:c9:b1:7b:92:3e:2b:1b:b4:d3:e7:52:db:f2:a2:b5:8e: 64:c1:5b:7b:55:f9:c5:2b:1c:a9:4f:6c:a6:e6:c8:c8:40:75: be:bc:9a:7c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUK87kIiNAyN0JmjuR9wfesAaIoMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMjIyMjhaFw0yNjAyMDQyMjI3MjhaMDMxMTAvBgNV BAMTKDU5NkQyRURBNkVDQzQyREMwMTMyQjNGNzAyOEY0RDgzOENBMEJGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsDaO/wsyAQ+ZSsp84ukgi9lrm rj8/cmSMtX6eh5GLg2kPPUPYHK+RFvN1xMed7j3KIOurFWbDb6PBjIuIp0R2feWS 48gVEtszEAL+fsomscsLFPhqXPS2SaZGGc2H5dLDiMFkixrU/sQAIbNmli6dsRPg lc6epFjkFdTRn7PIksjPR3Qyfolhu9sbIfPWSYzlP16cg2kPg9Pi/IwfEWW+N1UC giDb0wUlZXEoew4DrKfv++ObP8yQ7WMPxF194qSYD1+0WjiWHiaKoP7TI6JMLTvb tnbGnxWJ1wY/FxNKAcBDIYvcGyzWKvaVBaadT93+xzda7q07kpuW45WAnrbNAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZbS7absxC3AEy s/cCj02DjKC/XzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOURGOTkzNzE3N0IxRUMxNjA1NTJDNUFE MkZBMDVFNDFDRUE3OEMwMEQ1NzFCQjRDNzU1ODM0RTRDMERDRDQ4Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85REY5OTM3MTc3QjFFQzE2MDU1MkM1QUQyRkEwNUU0MUNFQTc4QzAwRDU3 MUJCNEM3NTU4MzRFNEMwRENENDg3LzAvNTk2RDJFREE2RUNDNDJEQzAxMzJCM0Y3 MDI4RjREODM4Q0EwQkY1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg8S0MA0EAgAC MAcDBQAoA1vAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOHjANBgkqhkiG9w0B AQsFAAOCAQEAnaGj+6jsw+tBBKkHzDWYdyqlIR97dUSdFEk3a2qnVZC8n8o1Jyf2 gTKNNu/anEqQp0NkMQYGCwnTvcraW3vQH8mrCX69WsTgICFDtV/DrvN3lOVBm3Ak GbmaLCsIHmqXRpnjyGC9t8hbZYbHV7Syb9q/tkqga1JJiDzfL7HVTdmhAA2re5oP +Uk1l83MX3Xv14VAjK3JuCjJgfTMdeOSjRqRjysALRibxUMKFf3DLa7q0aLvZJZu cIgQjKJeLDMSbM80DKw8Qu6jUD6N1oOBtpK65RSkftFhPJDJsXuSPisbtNPnUtvy orWOZMFbe1X5xSscqU9spubIyEB1vryafA== -----END CERTIFICATE-----Generated at Wed Apr 9 02:41:04 2025 by rpki-client