$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer File: 5EEF74EC549BBA3A98586948A652EF1E67729F08.cer (raw, json) Hash identifier: Z5aAqAxeSm5ss6HJTFJQEvahhZ6Gf45mpAP4DhWhdTQ= Subject key identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 55101BDCDD8E5DD4B0594FA4BE82624D17BAB9D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 19:23:41 +0000 Certificate not after: Wed 04 Feb 2026 19:28:41 +0000 Subordinate resources: AS: 52420 IP: 152.231.48.0/20 IP: 201.220.144.0/20 IP: 2803:a900::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:10:1b:dc:dd:8e:5d:d4:b0:59:4f:a4:be:82:62:4d:17:ba:b9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 19:23:41 2025 GMT Not After : Feb 4 19:28:41 2026 GMT Subject: CN=5EEF74EC549BBA3A98586948A652EF1E67729F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:17:23:c7:62:2f:84:1e:01:e7:2a:e8:c8: c8:1e:8e:0f:5b:4f:93:17:1b:4d:4c:7b:25:6d:95: ec:bc:00:1d:8b:9e:6f:39:7d:36:9c:88:7c:cb:69: 29:4b:2a:71:bf:6e:d4:26:28:b8:07:99:e1:e6:56: 8a:26:e7:9a:7f:2c:4c:39:ea:d5:d3:a0:00:1d:c7: bd:d8:cb:53:90:36:d6:24:ed:66:4d:e3:8c:df:4d: 23:19:bc:2f:15:7b:17:c0:f4:db:d5:9c:56:1b:d2: 45:6f:19:5b:af:bd:1a:7f:03:eb:0a:2e:40:68:4d: a4:e3:4f:52:94:22:c7:22:ca:8b:2c:d2:58:a0:4e: 00:a7:96:21:f2:47:44:7b:c3:7f:60:b5:02:36:c5: 88:c2:24:b9:2f:b3:16:7f:73:1b:8f:67:e8:9f:77: 6b:09:92:b5:8c:a1:f6:8f:1e:7d:de:f8:d4:0a:98: 96:39:82:d0:32:2b:c7:51:1a:5c:08:61:e5:7d:0d: a5:17:3f:0f:77:54:09:d0:74:64:7d:0c:9b:93:1f: a6:b5:5c:dd:fe:3e:0b:85:8f:64:45:59:4d:a1:dc: 05:9f:bf:3a:0c:ee:4c:0f:dd:12:e2:87:b3:5c:bb: 9c:e2:f8:fd:32:b4:82:9b:d7:ec:61:73:64:f7:d4: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.231.48.0/20 201.220.144.0/20 IPv6: 2803:a900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52420 Signature Algorithm: sha256WithRSAEncryption 81:11:b5:bf:58:37:2f:16:3d:f1:ce:27:06:f6:22:2f:7f:d3: 7f:51:cb:b0:57:64:ff:c8:45:5d:7d:2c:34:98:a2:0f:89:cf: 97:f2:b1:00:e0:7f:20:c6:6d:ff:1b:5e:31:03:6e:90:0d:0c: 5f:1a:cb:cf:0d:73:2d:e8:40:02:ff:f2:b8:1a:64:6f:28:3c: ed:b2:6b:fa:b4:00:b2:31:fb:5e:b3:c4:6f:30:69:d1:96:0f: 99:b9:ca:88:a6:d2:92:65:99:ba:1b:bc:ea:b3:a5:83:58:52: 7d:06:2e:d4:f6:99:46:9d:f3:4c:7b:c2:3a:c5:ca:f2:3b:63: d9:81:30:36:23:68:ec:fa:a1:1f:f0:a6:f6:cd:0a:89:6c:0f: 84:2f:ae:b9:d9:d0:0b:ac:a3:e3:e2:24:ad:44:f8:ee:68:99: 99:60:96:15:22:d0:af:22:f0:8b:e7:2c:a1:bd:7b:95:6c:e6: 91:53:73:de:11:5f:3f:24:2d:bb:82:6c:ff:9f:ac:9e:19:78: 94:4b:86:de:e5:3f:e8:a4:99:3d:de:6f:45:03:a7:da:02:5f: e1:26:7c:db:d5:9c:49:3c:41:06:29:7f:52:4a:da:f6:34:a9: 44:15:f5:95:87:1c:67:db:d5:19:31:2a:82:f9:9f:fc:66:d2: 54:1d:fd:05 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUVRAb3N2OXdSwWU+kvoJiTRe6udUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxOTIzNDFaFw0yNjAyMDQxOTI4NDFaMDMxMTAvBgNV BAMTKDVFRUY3NEVDNTQ5QkJBM0E5ODU4Njk0OEE2NTJFRjFFNjc3MjlGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9hcjx2IvhB4B5yroyMgejg9b T5MXG01MeyVtley8AB2Lnm85fTaciHzLaSlLKnG/btQmKLgHmeHmVoom55p/LEw5 6tXToAAdx73Yy1OQNtYk7WZN44zfTSMZvC8VexfA9NvVnFYb0kVvGVuvvRp/A+sK LkBoTaTjT1KUIsciyoss0ligTgCnliHyR0R7w39gtQI2xYjCJLkvsxZ/cxuPZ+if d2sJkrWMofaPHn3e+NQKmJY5gtAyK8dRGlwIYeV9DaUXPw93VAnQdGR9DJuTH6a1 XN3+PguFj2RFWU2h3AWfvzoM7kwP3RLih7Ncu5zi+P0ytIKb1+xhc2T31AdrAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRe73TsVJu6OphY aUimUu8eZ3KfCDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjNFMEFERjlBRTg2MjkzRDQxREE4OEFF MUQzODE0MUVBOTgzNjhCOTk5RUY2OEUzMTk4RUY5RTU0RUYxQzYyRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yM0UwQURGOUFFODYyOTNENDFEQTg4QUUxRDM4MTQxRUE5ODM2OEI5OTlF RjY4RTMxOThFRjlFNTRFRjFDNjJGLzAvNUVFRjc0RUM1NDlCQkEzQTk4NTg2OTQ4 QTY1MkVGMUU2NzcyOUYwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEmOcwAwQEydyQ MA0EAgACMAcDBQAoA6kAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMxDANBgkq hkiG9w0BAQsFAAOCAQEAgRG1v1g3LxY98c4nBvYiL3/Tf1HLsFdk/8hFXX0sNJii D4nPl/KxAOB/IMZt/xteMQNukA0MXxrLzw1zLehAAv/yuBpkbyg87bJr+rQAsjH7 XrPEbzBp0ZYPmbnKiKbSkmWZuhu86rOlg1hSfQYu1PaZRp3zTHvCOsXK8jtj2YEw NiNo7PqhH/Cm9s0KiWwPhC+uudnQC6yj4+IkrUT47miZmWCWFSLQryLwi+csob17 lWzmkVNz3hFfPyQtu4Js/5+snhl4lEuG3uU/6KSZPd5vRQOn2gJf4SZ829WcSTxB Bil/Ukra9jSpRBX1lYccZ9vVGTEqgvmf/GbSVB39BQ== -----END CERTIFICATE-----Generated at Sun Apr 6 07:58:54 2025 by rpki-client