$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.cer File: 76A0230D67817D92BA5DB107F27A059EBFFAF282.cer (raw, json) Hash identifier: vu0NGTaLhAnBRFZk1Uukb2k2qzHjDXhsnFu4NKs4AW0= Subject key identifier: 76:A0:23:0D:67:81:7D:92:BA:5D:B1:07:F2:7A:05:9E:BF:FA:F2:82 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4D01B4A5A7117EDF4E3AFFB3263A16E23C4B7BC6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 01:56:17 +0000 Certificate not after: Wed 04 Feb 2026 02:01:17 +0000 Subordinate resources: IP: 138.118.208.0/22 IP: 2803:8440::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:01:b4:a5:a7:11:7e:df:4e:3a:ff:b3:26:3a:16:e2:3c:4b:7b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 01:56:17 2025 GMT Not After : Feb 4 02:01:17 2026 GMT Subject: CN=76A0230D67817D92BA5DB107F27A059EBFFAF282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bd:83:45:41:f8:e9:a5:56:e2:ca:65:6a:e2: 39:99:d4:08:8a:4c:0c:34:4e:4c:62:a2:48:4a:03: a6:f3:49:12:e3:6a:f7:4e:70:8c:01:0f:9f:a0:87: a5:48:ff:8f:90:ce:5b:73:a9:29:ec:c6:58:4b:dd: ec:b5:5f:e8:18:97:90:40:ba:5e:f3:c0:ce:2b:0c: 1a:ce:61:bc:5c:10:0a:df:51:b0:33:cd:e2:a3:c4: e1:29:01:ed:d0:3a:64:56:71:8c:36:13:ff:4c:45: 73:30:57:30:1c:00:5a:8b:06:a7:ce:98:cc:11:fb: 71:07:ef:39:c2:0d:68:7d:80:98:55:a1:cc:9b:41: 85:84:9f:e2:5b:23:fb:79:b0:c8:e0:9e:ae:de:75: 20:84:a1:64:ec:6b:38:f0:35:63:d6:e8:5d:05:83: 65:f5:aa:88:ad:8d:5f:c8:04:13:80:9d:47:76:9b: fb:fa:66:19:88:7a:78:4b:85:a1:97:cd:04:89:5d: f0:a7:db:da:94:3d:25:6c:7e:c3:c6:95:50:e2:99: 6d:39:35:e6:44:45:87:0a:7e:df:af:eb:e4:05:19: 87:bc:ba:30:69:81:ba:56:d3:c3:e2:7d:b7:d5:25: 26:1f:23:91:c4:02:33:e1:e1:52:5a:e8:12:62:d6: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:A0:23:0D:67:81:7D:92:BA:5D:B1:07:F2:7A:05:9E:BF:FA:F2:82 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8C627A8492D0F6162F2D56DF55C5632C720E787C5C6BC995A761DBC5C9000903/0/76A0230D67817D92BA5DB107F27A059EBFFAF282.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.208.0/22 IPv6: 2803:8440::/32 Signature Algorithm: sha256WithRSAEncryption 15:1f:7f:a0:dd:da:9a:e6:f3:56:98:29:c5:7d:2f:e8:70:a5: c8:a6:9e:68:39:5f:05:75:f6:72:75:91:a6:7c:0f:5a:2c:b3: 54:0a:20:53:a8:07:f8:d9:e2:c0:2a:e9:03:c2:d7:1d:58:a0: c8:68:b5:21:aa:06:fc:de:a9:40:06:20:88:63:2a:9f:aa:43: 14:6f:7f:4f:a6:19:51:86:29:c2:c9:47:9e:c0:bd:ff:34:7a: 53:6d:d3:a6:e2:b5:54:83:18:06:f1:f6:a0:11:49:bc:e3:4f: 9d:0f:73:4a:1c:37:7c:b1:14:7e:60:66:18:99:05:78:b8:df: 00:e6:3f:72:3c:03:be:c7:35:67:b5:44:39:72:7f:bf:89:e9: 7e:a5:50:f3:da:72:a1:91:ce:ab:7b:b0:80:a4:93:50:4f:d2: 32:e3:d3:09:40:f9:ec:03:7d:1e:7b:a5:3d:52:3b:22:5f:4a: 8b:3a:a0:63:ce:7c:49:73:c7:1a:6a:03:43:bf:0e:cc:df:75: 2f:bb:3e:0b:5d:b8:25:3e:5c:a5:3b:8a:8d:7d:d6:82:8c:f1: 3a:71:e7:7e:f1:3b:1e:7b:fa:a6:dd:ec:f2:e3:c3:dd:49:b2: 65:cd:2b:11:23:ac:8f:a3:b8:3e:76:f4:85:1d:c6:44:50:5d: 2a:b8:ca:60 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUTQG0pacRft9OOv+zJjoW4jxLe8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMTU2MTdaFw0yNjAyMDQwMjAxMTdaMDMxMTAvBgNV BAMTKDc2QTAyMzBENjc4MTdEOTJCQTVEQjEwN0YyN0EwNTlFQkZGQUYyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHvYNFQfjppVbiymVq4jmZ1AiK TAw0TkxiokhKA6bzSRLjavdOcIwBD5+gh6VI/4+QzltzqSnsxlhL3ey1X+gYl5BA ul7zwM4rDBrOYbxcEArfUbAzzeKjxOEpAe3QOmRWcYw2E/9MRXMwVzAcAFqLBqfO mMwR+3EH7znCDWh9gJhVocybQYWEn+JbI/t5sMjgnq7edSCEoWTsazjwNWPW6F0F g2X1qoitjV/IBBOAnUd2m/v6ZhmIenhLhaGXzQSJXfCn29qUPSVsfsPGlVDimW05 NeZERYcKft+v6+QFGYe8ujBpgbpW08PifbfVJSYfI5HEAjPh4VJa6BJi1jw5AgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2oCMNZ4F9krpd sQfyegWev/rygjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEM2MjdBODQ5MkQwRjYxNjJGMkQ1NkRG NTVDNTYzMkM3MjBFNzg3QzVDNkJDOTk1QTc2MURCQzVDOTAwMDkwMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84QzYyN0E4NDkyRDBGNjE2MkYyRDU2REY1NUM1NjMyQzcyMEU3ODdDNUM2 QkM5OTVBNzYxREJDNUM5MDAwOTAzLzAvNzZBMDIzMEQ2NzgxN0Q5MkJBNURCMTA3 RjI3QTA1OUVCRkZBRjI4Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCinbQMA0EAgAC MAcDBQAoA4RAMA0GCSqGSIb3DQEBCwUAA4IBAQAVH3+g3dqa5vNWmCnFfS/ocKXI pp5oOV8FdfZydZGmfA9aLLNUCiBTqAf42eLAKukDwtcdWKDIaLUhqgb83qlABiCI YyqfqkMUb39PphlRhinCyUeewL3/NHpTbdOm4rVUgxgG8fagEUm840+dD3NKHDd8 sRR+YGYYmQV4uN8A5j9yPAO+xzVntUQ5cn+/iel+pVDz2nKhkc6re7CApJNQT9Iy 49MJQPnsA30ee6U9UjsiX0qLOqBjznxJc8caagNDvw7M33Uvuz4LXbglPlylO4qN fdaCjPE6ced+8Tsee/qm3ezy48PdSbJlzSsRI6yPo7g+dvSFHcZEUF0quMpg -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:32 2025 by rpki-client