$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer File: 5EBCF17E06528C616B6957551981653EE0748D3C.cer (raw, json) Hash identifier: WA6hTQaBoH/dK8HRizd50OP1cjKe1Y8V4Po92n4Za6E= Subject key identifier: 5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2A5F8EFDE6E26316761175A37BFC854A2FA166E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 01:37:29 +0000 Certificate not after: Wed 04 Feb 2026 01:42:29 +0000 Subordinate resources: AS: 267854 IP: 45.176.194.0/23 IP: 2801:13:800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5f:8e:fd:e6:e2:63:16:76:11:75:a3:7b:fc:85:4a:2f:a1:66:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 01:37:29 2025 GMT Not After : Feb 4 01:42:29 2026 GMT Subject: CN=5EBCF17E06528C616B6957551981653EE0748D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:1a:3a:18:be:f0:a7:93:3d:0e:a6:43:2b: 75:95:ba:da:30:bd:54:90:69:8b:02:8e:cd:17:13: 44:e5:f5:ca:30:fe:ac:c6:06:0a:62:2a:85:04:bf: 0e:3f:26:ee:eb:0f:76:73:77:5b:57:59:f1:0a:49: 97:c0:c0:23:cc:1f:86:98:a1:7c:3b:f2:86:59:d9: 99:fd:65:30:64:02:3e:e1:8e:1e:de:d1:1d:12:e5: c9:ad:b2:80:0e:b7:8f:6e:73:51:5b:ff:ae:17:2d: 9f:82:21:8f:fb:a1:e5:66:89:0e:a4:a2:e5:07:cf: 5b:ed:15:37:54:fd:a7:9e:48:3b:f0:77:d2:ba:ab: ac:88:02:46:05:fa:31:d3:ec:43:3e:24:af:4a:60: 0d:60:f5:d4:48:82:d5:8f:57:9a:75:76:84:c6:c9: 48:8b:27:55:c5:0d:dc:fd:85:d7:7e:a9:8a:b7:c1: 17:bb:19:57:78:32:e9:be:9a:c4:5e:5c:77:aa:bf: 9e:0a:ec:54:e8:db:f4:15:a8:29:f4:d3:07:c7:ef: cc:80:30:bb:80:d7:c6:55:00:07:d0:37:00:1c:aa: 1d:bc:f4:18:5c:83:1f:3b:be:98:12:5f:16:2e:9d: 15:86:8f:cc:cd:06:74:c1:d9:fb:07:b0:67:04:17: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.194.0/23 IPv6: 2801:13:800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267854 Signature Algorithm: sha256WithRSAEncryption 41:0f:bc:08:70:23:4e:bb:df:1e:e4:d6:65:fc:a0:b9:a9:62: cb:e8:72:54:c1:10:eb:67:b3:ce:ec:4c:58:09:4e:4d:25:b2: 5e:a1:18:96:b4:25:a3:ec:10:36:a4:3a:b4:3d:48:8f:f3:c6: f3:d0:aa:bb:d3:08:c6:2f:2e:01:7f:04:28:e3:1e:a9:b0:41: db:f0:e7:4c:9e:98:f1:b0:48:17:70:8c:a1:ff:b7:d2:c7:7f: 18:79:21:df:01:5c:3b:61:e0:ba:87:74:6c:ce:df:1d:b7:12: 47:34:10:65:06:d3:73:72:85:90:ba:18:2a:2a:0e:f6:43:18: fb:39:50:47:46:eb:2b:99:28:ba:ea:0e:18:f9:b2:ab:31:3e: 33:d1:a1:f3:79:0d:81:e9:e2:aa:21:c3:6e:ba:be:f6:b5:2d: f7:79:7a:55:d0:58:32:8c:3d:49:58:ee:5c:6c:61:2e:5b:6c: 3d:3d:68:ef:17:9b:3b:68:89:65:a5:e9:fa:fa:74:02:62:bf: a6:be:1e:c3:cb:a7:e6:bf:bd:38:cb:75:18:1d:dc:14:79:ce: 98:20:88:99:e3:02:49:61:0b:09:e4:e2:d1:41:26:8d:1e:56: a0:3e:4c:41:90:d5:98:59:82:1d:81:2a:d5:ee:db:09:83:91: 37:a8:d4:d2 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUKl+O/ebiYxZ2EXWje/yFSi+hZukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMTM3MjlaFw0yNjAyMDQwMTQyMjlaMDMxMTAvBgNV BAMTKDVFQkNGMTdFMDY1MjhDNjE2QjY5NTc1NTE5ODE2NTNFRTA3NDhEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeBo6GL7wp5M9DqZDK3WVutow vVSQaYsCjs0XE0Tl9cow/qzGBgpiKoUEvw4/Ju7rD3Zzd1tXWfEKSZfAwCPMH4aY oXw78oZZ2Zn9ZTBkAj7hjh7e0R0S5cmtsoAOt49uc1Fb/64XLZ+CIY/7oeVmiQ6k ouUHz1vtFTdU/aeeSDvwd9K6q6yIAkYF+jHT7EM+JK9KYA1g9dRIgtWPV5p1doTG yUiLJ1XFDdz9hdd+qYq3wRe7GVd4Mum+msReXHeqv54K7FTo2/QVqCn00wfH78yA MLuA18ZVAAfQNwAcqh289Bhcgx87vpgSXxYunRWGj8zNBnTB2fsHsGcEF6AzAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRevPF+BlKMYWtp V1UZgWU+4HSNPDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUNFRTBFMzdGREExODdCMEZDMEZBNzEy OTIxQjhDRUE5MUYyQzU1QkJDQTA3NzdBQ0U1MURFNjMwOUNDNUNCNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQ0VFMEUzN0ZEQTE4N0IwRkMwRkE3MTI5MjFCOENFQTkxRjJDNTVCQkNB MDc3N0FDRTUxREU2MzA5Q0M1Q0I3LzAvNUVCQ0YxN0UwNjUyOEM2MTZCNjk1NzU1 MTk4MTY1M0VFMDc0OEQzQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLbDCMA8EAgAC MAkDBwAoAQATCAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBZOMA0GCSqGSIb3 DQEBCwUAA4IBAQBBD7wIcCNOu98e5NZl/KC5qWLL6HJUwRDrZ7PO7ExYCU5NJbJe oRiWtCWj7BA2pDq0PUiP88bz0Kq70wjGLy4BfwQo4x6psEHb8OdMnpjxsEgXcIyh /7fSx38YeSHfAVw7YeC6h3Rszt8dtxJHNBBlBtNzcoWQuhgqKg72Qxj7OVBHRusr mSi66g4Y+bKrMT4z0aHzeQ2B6eKqIcNuur72tS33eXpV0FgyjD1JWO5cbGEuW2w9 PWjvF5s7aIllpen6+nQCYr+mvh7Dy6fmv704y3UYHdwUec6YIIiZ4wJJYQsJ5OLR QSaNHlagPkxBkNWYWYIdgSrV7tsJg5E3qNTS -----END CERTIFICATE-----Generated at Sun Apr 6 19:54:34 2025 by rpki-client