$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.cer File: 6DC65625253D747BACF1A0E96FF62D83B45899B0.cer (raw, json) Hash identifier: bfHbrtfJRInsw57QO64CwON4DfZNRMk7LWz/7Ea78z8= Subject key identifier: 6D:C6:56:25:25:3D:74:7B:AC:F1:A0:E9:6F:F6:2D:83:B4:58:99:B0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4FC0D0D54A32AEA903F67A35CF17D78484661F72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 17:22:14 +0000 Certificate not after: Wed 04 Feb 2026 17:27:14 +0000 Subordinate resources: AS: 272145 IP: 2803:5090::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c0:d0:d5:4a:32:ae:a9:03:f6:7a:35:cf:17:d7:84:84:66:1f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 17:22:14 2025 GMT Not After : Feb 4 17:27:14 2026 GMT Subject: CN=6DC65625253D747BACF1A0E96FF62D83B45899B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:bb:9b:99:12:6f:46:19:7d:f3:e8:03:14: e4:e4:50:c9:0f:73:d8:11:a4:15:e5:40:63:a6:39: db:b0:ac:fa:de:e1:3d:4b:ac:15:e2:d1:45:90:cb: 12:91:dc:f2:f4:f6:8d:eb:42:cb:80:fd:39:a6:04: d8:c2:73:bf:bf:d8:3f:f8:ee:39:50:da:c1:09:6f: e7:76:6a:1a:d7:3e:18:fb:cd:54:87:39:fe:af:36: 7e:dc:63:52:79:02:c2:fb:b4:04:ed:7b:7b:73:02: f9:b4:24:d3:b3:71:74:29:1a:4e:af:29:0e:f0:ab: f6:b1:ac:a3:e3:49:81:1b:ba:21:33:dd:37:23:2e: 4a:7b:02:0b:3d:75:ef:a3:8b:23:36:e5:11:16:b0: 88:9f:e0:6c:0f:1c:57:00:26:53:e0:4b:f3:c9:a2: 13:80:24:d2:62:14:c7:fb:65:6d:f8:22:18:44:1b: 36:a2:ed:43:1f:28:8c:05:55:e8:c9:e1:15:63:e6: 3e:3a:2a:e9:16:06:3a:07:9c:92:90:e7:0d:5f:18: 38:44:6d:b1:e8:17:9c:bf:f3:1f:49:42:99:59:33: 39:c6:94:ae:43:7c:c0:71:46:8d:f3:80:48:e1:a5: 4c:13:e8:a3:3a:f0:8f:6b:c0:47:ab:b5:76:d9:bb: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:C6:56:25:25:3D:74:7B:AC:F1:A0:E9:6F:F6:2D:83:B4:58:99:B0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B68A18F320D8EBC5092D2605AE250463E15A3BDF0AE6EF630B06B25E60D29AC3/0/6DC65625253D747BACF1A0E96FF62D83B45899B0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5090::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272145 Signature Algorithm: sha256WithRSAEncryption 7f:31:a8:96:2e:00:b2:25:71:7d:29:61:40:c2:2d:7e:6c:68: b2:9b:b0:d3:5f:16:b6:59:e3:29:19:c5:ac:30:f9:4d:6a:33: 3e:36:40:86:bf:f5:8d:74:1e:af:21:a2:36:e7:20:fd:77:98: 7b:23:1f:06:ed:3e:24:d8:7e:ca:5c:6f:51:74:f5:66:8f:de: 4a:23:38:12:bd:de:a1:f7:08:b2:8c:a7:c3:b7:8c:97:8b:cf: 0e:60:b4:fb:33:38:ea:bb:43:6e:5c:95:49:0f:a3:4d:b9:e5: 42:46:69:ca:91:02:25:ef:bc:a0:5c:d9:62:65:10:6b:10:cf: dd:53:c9:ff:61:f3:06:18:a2:9b:54:26:18:11:df:e7:ca:e8: 14:75:81:1f:eb:0a:27:33:c4:ce:94:16:e0:56:46:d4:85:9e: ea:49:fb:b4:6a:1e:2a:92:d0:b2:a6:29:25:e3:47:51:ca:f9: 18:7f:78:fc:00:07:c5:03:ab:53:ba:95:5b:35:23:ff:9c:a6: 02:4b:f8:71:30:39:ba:6a:81:7f:c5:ef:e9:c6:80:3d:a0:6b: d7:16:a3:da:a6:79:7d:65:46:5d:d6:10:94:66:42:47:79:ae: 87:ac:fb:b2:6f:18:c1:a4:f1:a8:a8:1c:fc:3f:cf:5e:b9:81: 09:5a:10:b3 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUT8DQ1UoyrqkD9no1zxfXhIRmH3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNzIyMTRaFw0yNjAyMDQxNzI3MTRaMDMxMTAvBgNV BAMTKDZEQzY1NjI1MjUzRDc0N0JBQ0YxQTBFOTZGRjYyRDgzQjQ1ODk5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPrLubmRJvRhl98+gDFOTkUMkP c9gRpBXlQGOmOduwrPre4T1LrBXi0UWQyxKR3PL09o3rQsuA/TmmBNjCc7+/2D/4 7jlQ2sEJb+d2ahrXPhj7zVSHOf6vNn7cY1J5AsL7tATte3tzAvm0JNOzcXQpGk6v KQ7wq/axrKPjSYEbuiEz3TcjLkp7Ags9de+jiyM25REWsIif4GwPHFcAJlPgS/PJ ohOAJNJiFMf7ZW34IhhEGzai7UMfKIwFVejJ4RVj5j46KukWBjoHnJKQ5w1fGDhE bbHoF5y/8x9JQplZMznGlK5DfMBxRo3zgEjhpUwT6KM68I9rwEertXbZu+NzAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRtxlYlJT10e6zx oOlv9i2DtFiZsDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjY4QTE4RjMyMEQ4RUJDNTA5MkQyNjA1 QUUyNTA0NjNFMTVBM0JERjBBRTZFRjYzMEIwNkIyNUU2MEQyOUFDMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNjhBMThGMzIwRDhFQkM1MDkyRDI2MDVBRTI1MDQ2M0UxNUEzQkRGMEFF NkVGNjMwQjA2QjI1RTYwRDI5QUMzLzAvNkRDNjU2MjUyNTNENzQ3QkFDRjFBMEU5 NkZGNjJEODNCNDU4OTlCMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANQkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJxEwDQYJKoZIhvcNAQELBQADggEBAH8xqJYu ALIlcX0pYUDCLX5saLKbsNNfFrZZ4ykZxaww+U1qMz42QIa/9Y10Hq8hojbnIP13 mHsjHwbtPiTYfspcb1F09WaP3kojOBK93qH3CLKMp8O3jJeLzw5gtPszOOq7Q25c lUkPo0255UJGacqRAiXvvKBc2WJlEGsQz91Tyf9h8wYYoptUJhgR3+fK6BR1gR/r CiczxM6UFuBWRtSFnupJ+7RqHiqS0LKmKSXjR1HK+Rh/ePwAB8UDq1O6lVs1I/+c pgJL+HEwObpqgX/F7+nGgD2ga9cWo9qmeX1lRl3WEJRmQkd5roes+7JvGMGk8aio HPw/z165gQlaELM= -----END CERTIFICATE-----Generated at Sat Apr 12 09:54:56 2025 by rpki-client