$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer File: 5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer (raw, json) Hash identifier: 9UAmYR3ZnF29SIEqgluyaVbet9Vchyz8TnkYnycanXc= Subject key identifier: 5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6F7969E40F0020D18C0C79C8DDEAB6E8CA31FA5B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 20 Feb 2025 22:15:02 +0000 Certificate not after: Thu 19 Feb 2026 22:20:02 +0000 Subordinate resources: AS: 274033 IP: 205.159.31.0/24 IP: 2803:5cd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:79:69:e4:0f:00:20:d1:8c:0c:79:c8:dd:ea:b6:e8:ca:31:fa:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 20 22:15:02 2025 GMT Not After : Feb 19 22:20:02 2026 GMT Subject: CN=5E68D9D36A3D299DDDD317AA2508CD25165A8452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:69:05:e4:c6:82:ed:38:db:96:95:0d:45: 28:e0:c7:f5:76:27:97:0d:c4:15:86:88:b2:1a:dc: 09:72:82:34:d8:c4:21:f1:ce:d4:23:3a:d1:5a:d5: ae:cb:2c:4f:49:37:30:76:9d:55:19:26:38:77:f6: 17:14:1b:ec:de:27:bc:58:9f:94:c6:dc:b1:37:41: a4:64:33:bd:09:05:d1:cf:8f:e8:23:97:43:fa:b1: 5f:45:3b:3b:54:bb:ec:02:40:74:f4:f9:7d:bf:c0: bd:e8:57:68:db:87:bf:37:1f:97:3e:fe:de:04:53: 56:57:37:02:d2:de:31:ae:4a:10:64:d5:93:41:89: b0:5c:6f:12:93:58:14:09:3e:ab:c2:9a:4a:8d:f6: 0e:e7:08:4a:da:73:01:3b:93:b4:ed:76:ea:1f:d3: d6:d0:16:37:9b:12:41:b2:87:03:a2:8e:9d:78:0e: 42:da:95:80:a9:9c:ee:21:66:4c:f5:d0:6a:77:1a: 3d:fc:db:64:87:2e:2a:c5:79:4f:dd:70:98:ba:de: 65:1c:44:ea:62:21:2a:7c:cb:84:63:74:a9:50:29: 49:c5:20:f5:99:e8:82:4d:83:eb:7b:3b:b9:46:92: f5:3b:e4:b1:5e:16:36:4a:49:b0:47:c9:44:c1:f3: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.159.31.0/24 IPv6: 2803:5cd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274033 Signature Algorithm: sha256WithRSAEncryption 0b:46:1d:2e:ff:dc:2e:9e:88:4c:b3:99:f0:66:d6:12:30:1a: 22:38:3c:24:b3:48:80:cf:02:a9:c2:d8:71:ab:b8:7f:02:d2: db:65:93:57:cc:34:df:a3:8b:0f:9d:6f:f7:40:6c:f9:f9:be: 56:8b:21:65:7b:f9:91:b9:f0:0f:3c:7a:96:07:d6:ee:89:af: d6:44:5e:03:89:79:c0:5e:d4:84:ec:51:e7:25:70:e9:05:51: 64:5a:d8:c8:44:ec:fc:be:84:1f:8a:b0:94:62:33:37:5d:ae: 7c:c1:a9:b9:97:32:9f:d4:26:4c:cf:5f:37:05:7c:89:03:cb: 85:7f:7f:ff:88:19:a6:aa:b8:da:ea:d0:95:21:39:ca:3c:60: b4:27:6c:0f:fd:2a:f3:41:85:cd:3e:dd:4b:c8:bc:b3:43:90: 62:f0:27:2b:31:b6:34:81:6a:64:e9:a9:c8:f5:e0:23:53:c9: ac:4d:30:4f:be:44:c3:c8:4b:f7:21:99:d7:44:25:77:6e:c8: 39:3c:a8:ec:bf:b5:12:48:c3:34:ca:b8:de:3a:db:2f:aa:ea: 04:57:ed:23:a1:f2:6f:cb:cb:0c:01:e4:65:bd:53:92:0e:9d: 17:ba:25:ab:77:64:18:a9:bf:86:9d:31:dc:dc:bb:50:8a:00: d4:9b:22:ea -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUb3lp5A8AINGMDHnI3eq26Mox+lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMjAyMjE1MDJaFw0yNjAyMTkyMjIwMDJaMDMxMTAvBgNV BAMTKDVFNjhEOUQzNkEzRDI5OUREREQzMTdBQTI1MDhDRDI1MTY1QTg0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbKGkF5MaC7TjblpUNRSjgx/V2 J5cNxBWGiLIa3AlygjTYxCHxztQjOtFa1a7LLE9JNzB2nVUZJjh39hcUG+zeJ7xY n5TG3LE3QaRkM70JBdHPj+gjl0P6sV9FOztUu+wCQHT0+X2/wL3oV2jbh783H5c+ /t4EU1ZXNwLS3jGuShBk1ZNBibBcbxKTWBQJPqvCmkqN9g7nCEracwE7k7Ttduof 09bQFjebEkGyhwOijp14DkLalYCpnO4hZkz10Gp3Gj3822SHLirFeU/dcJi63mUc ROpiISp8y4RjdKlQKUnFIPWZ6IJNg+t7O7lGkvU75LFeFjZKSbBHyUTB88vfAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBReaNnTaj0pnd3T F6olCM0lFlqEUjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkRFMDY1NzhGNTkyNEU4MjVEOEMxRUJE REEyNDJGMDY4MDBBOUE5RjJCQjRERkIyM0REMzk4NjIxNzhDNDdDQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82REUwNjU3OEY1OTI0RTgyNUQ4QzFFQkREQTI0MkYwNjgwMEE5QTlGMkJC NERGQjIzREQzOTg2MjE3OEM0N0NBLzAvNUU2OEQ5RDM2QTNEMjk5RERERDMxN0FB MjUwOENEMjUxNjVBODQ1Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAzZ8fMA0EAgAC MAcDBQAoA1zQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQucTANBgkqhkiG9w0B AQsFAAOCAQEAC0YdLv/cLp6ITLOZ8GbWEjAaIjg8JLNIgM8CqcLYcau4fwLS22WT V8w036OLD51v90Bs+fm+VoshZXv5kbnwDzx6lgfW7omv1kReA4l5wF7UhOxR5yVw 6QVRZFrYyETs/L6EH4qwlGIzN12ufMGpuZcyn9QmTM9fNwV8iQPLhX9//4gZpqq4 2urQlSE5yjxgtCdsD/0q80GFzT7dS8i8s0OQYvAnKzG2NIFqZOmpyPXgI1PJrE0w T75Ew8hL9yGZ10Qld27IOTyo7L+1EkjDNMq43jrbL6rqBFftI6Hyb8vLDAHkZb1T kg6dF7olq3dkGKm/hp0x3Ny7UIoA1Jsi6g== -----END CERTIFICATE-----Generated at Sat Apr 12 09:47:15 2025 by rpki-client