$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer File: 6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer (raw, json) Hash identifier: ryxBpsUWMKytgTphkUk8CuVs3lyd8r3MCNfgLWgOV5c= Subject key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1A1C25A966E02030270B1BA8643D83A53CAABDF7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 09:15:57 +0000 Certificate not after: Wed 04 Feb 2026 09:20:57 +0000 Subordinate resources: AS: 266904 IP: 45.162.72.0/22 IP: 2803:f6a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1c:25:a9:66:e0:20:30:27:0b:1b:a8:64:3d:83:a5:3c:aa:bd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 09:15:57 2025 GMT Not After : Feb 4 09:20:57 2026 GMT Subject: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:1f:aa:cf:ef:b4:df:99:ed:90:74:77:a1: e2:3a:74:22:1b:cc:2d:8e:3c:cf:71:44:e6:28:78: eb:5e:24:27:6e:f4:05:a6:7e:ee:91:2f:f3:25:6b: 65:09:ad:1c:11:b8:d8:fc:59:37:53:75:a8:ed:b7: f1:46:ae:9f:40:7c:ce:4a:59:50:10:3f:4b:03:dd: d9:46:7d:56:12:16:35:96:3e:ad:05:2c:13:2e:46: 61:31:a9:de:68:aa:30:6d:0f:30:b5:2a:a0:27:40: 04:84:9a:47:48:03:8b:1a:f0:0b:4d:90:9b:fa:b4: 2f:36:f6:37:f3:e1:e6:e1:cb:a9:44:c3:4c:e0:a4: b4:df:ba:7c:a9:b2:e0:11:51:de:f7:4a:1a:a8:0e: 58:6f:09:97:a1:49:56:c3:55:fc:10:f7:5c:23:8c: e3:84:e1:a6:7f:97:05:93:19:9b:12:bd:0d:57:ed: 5b:67:40:39:cb:0d:fe:9e:15:ff:e3:e8:8e:b5:c7: 69:a3:32:4a:d5:bc:c5:52:28:66:a3:42:44:74:cb: d4:d1:57:74:52:d6:82:51:1d:6f:00:72:ed:a8:13: 20:36:7a:a8:28:2e:08:b5:fa:9a:99:3e:8b:d2:f2: 7f:88:84:ea:e4:f0:37:ef:23:67:f8:52:57:8b:20: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.72.0/22 IPv6: 2803:f6a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266904 Signature Algorithm: sha256WithRSAEncryption ab:ea:71:10:ad:38:3d:ec:ae:d4:dd:e2:07:27:a5:1d:68:d8: 8c:84:c9:1c:1f:72:23:0d:3a:93:0a:68:3a:60:e0:08:2e:a0: f9:15:c7:56:a0:45:91:c1:7f:ce:d3:e2:fd:b3:e5:da:f9:99: 04:41:5a:0a:d9:f3:95:50:6a:9c:a6:3c:c7:d3:9b:af:7c:64: 6f:eb:65:51:2e:6c:f3:f3:18:30:2e:75:fa:d1:98:5d:d9:87: 04:5b:3c:c4:fb:58:b7:52:38:90:44:a6:b2:11:ab:b6:47:24: 70:00:03:9f:bf:22:e8:14:e6:59:c5:1b:90:d3:2c:75:89:e1: 44:ce:48:fe:de:ce:9c:97:49:ec:3d:06:15:43:81:ed:cd:27: 3c:fa:ad:8a:31:0e:80:a5:03:00:2c:ee:c7:3c:db:ab:51:36: 9a:00:f1:53:e1:df:34:0f:36:56:dc:89:55:70:b0:ac:a2:86: 62:58:15:c8:53:e3:4e:43:ec:98:cf:cf:ff:58:48:b6:3a:38: 2e:48:05:70:8c:35:6b:2a:97:df:5a:9c:5d:37:8d:89:84:b5: 1b:70:6f:57:2a:0c:46:e7:b0:d8:50:e7:91:af:71:7c:9e:ed: 9f:a7:7e:cd:16:ab:66:ea:2e:a0:6f:b2:eb:59:20:b9:0d:33: 04:d4:ed:5d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUGhwlqWbgIDAnCxuoZD2DpTyqvfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwOTE1NTdaFw0yNjAyMDQwOTIwNTdaMDMxMTAvBgNV BAMTKDZDODk4QjJBQjExOTQ4OThFRTNDNTE1N0Y5QkE2MThGQkFGNjAxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXB+qz++035ntkHR3oeI6dCIb zC2OPM9xROYoeOteJCdu9AWmfu6RL/Mla2UJrRwRuNj8WTdTdajtt/FGrp9AfM5K WVAQP0sD3dlGfVYSFjWWPq0FLBMuRmExqd5oqjBtDzC1KqAnQASEmkdIA4sa8AtN kJv6tC829jfz4ebhy6lEw0zgpLTfunypsuARUd73ShqoDlhvCZehSVbDVfwQ91wj jOOE4aZ/lwWTGZsSvQ1X7VtnQDnLDf6eFf/j6I61x2mjMkrVvMVSKGajQkR0y9TR V3RS1oJRHW8Acu2oEyA2eqgoLgi1+pqZPovS8n+IhOrk8DfvI2f4UleLIB8hAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRsiYsqsRlImO48 UVf5umGPuvYBcjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4 QjhGRDQ5Q0YxNEVGMjFGQjM1MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0RUYyMUZCMzUx MDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3 RjlCQTYxOEZCQUY2MDE3Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaJIMA0EAgAC MAcDBQAoA/agMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSmDANBgkqhkiG9w0B AQsFAAOCAQEAq+pxEK04Peyu1N3iByelHWjYjITJHB9yIw06kwpoOmDgCC6g+RXH VqBFkcF/ztPi/bPl2vmZBEFaCtnzlVBqnKY8x9Obr3xkb+tlUS5s8/MYMC51+tGY XdmHBFs8xPtYt1I4kESmshGrtkckcAADn78i6BTmWcUbkNMsdYnhRM5I/t7OnJdJ 7D0GFUOB7c0nPPqtijEOgKUDACzuxzzbq1E2mgDxU+HfNA82VtyJVXCwrKKGYlgV yFPjTkPsmM/P/1hItjo4LkgFcIw1ayqX31qcXTeNiYS1G3BvVyoMRuew2FDnka9x fJ7tn6d+zRarZuouoG+y61kguQ0zBNTtXQ== -----END CERTIFICATE-----Generated at Sun Apr 6 14:19:45 2025 by rpki-client