$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer File: 799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer (raw, json) Hash identifier: CZPSc0jTO/pg4qa0ZtLXMiGD/5HEv2kFoeNfsI5n700= Subject key identifier: 79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4CED66CD188FF980EEFF8478BC5CCF1264A5B917 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:44:14 +0000 Certificate not after: Thu 05 Feb 2026 00:49:14 +0000 Subordinate resources: AS: 27687 IP: 45.65.254.0/23 IP: 2801:16:3000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ed:66:cd:18:8f:f9:80:ee:ff:84:78:bc:5c:cf:12:64:a5:b9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:44:14 2025 GMT Not After : Feb 5 00:49:14 2026 GMT Subject: CN=799047095697CAFF9BFB195F0DA85EBCCC395DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:c2:e1:c0:ab:92:7a:69:b8:e8:58:2c:93: 80:6a:18:0c:1c:22:73:f3:62:89:2e:59:cc:8e:b0: d4:e4:52:db:8d:3d:7e:18:8c:cf:6d:0b:8f:d7:f9: cc:04:3f:2e:1b:f8:77:7a:ad:95:76:94:5f:b4:6e: 1f:09:23:74:3f:c1:d8:b7:30:38:2b:e2:14:9c:11: c1:00:1f:99:e0:10:5a:b6:1f:62:ee:a4:b2:ef:c6: 66:30:8c:ae:40:91:5f:e0:dc:6c:dc:ee:b0:3a:17: 7c:11:ed:22:4f:3e:15:21:e0:3e:97:0d:be:d6:2b: 1c:41:7d:68:1f:37:31:d6:ba:12:c2:77:6c:c7:9a: f7:95:b8:42:0a:90:17:2d:9a:02:1a:b5:ac:97:74: 3e:44:0c:ec:84:ab:fe:9e:31:7b:e5:3d:8d:3e:ec: f6:1c:4d:3e:8e:61:08:2b:9a:a5:7d:16:3b:e1:f1: 62:12:77:db:5e:73:8e:f0:a7:4a:cb:5d:df:cf:e3: ea:1a:81:69:0a:ee:c8:69:7b:75:fd:99:3c:ac:9f: fb:bd:5d:58:fe:b7:80:27:18:4a:69:28:71:22:9c: 17:76:b9:ab:33:91:ca:fa:61:cd:6e:30:56:78:a6: 84:18:1f:2a:df:20:7c:3f:66:69:c9:63:74:5b:a7: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.254.0/23 IPv6: 2801:16:3000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27687 Signature Algorithm: sha256WithRSAEncryption a2:68:11:58:b4:0a:eb:71:b8:62:58:07:51:f7:c1:93:48:37: b8:85:ca:11:f9:95:7a:6d:bc:6b:5b:8f:f6:82:7c:11:45:97: 49:2e:2f:6b:0e:9b:ae:af:84:96:25:45:fd:7f:87:73:93:39: c0:31:78:ea:e8:88:09:4d:90:de:3f:19:f6:0f:68:bd:92:77: 77:94:ad:bb:3b:f0:8e:fe:cc:ab:18:c9:c5:a9:30:c8:7a:e5: cc:b6:b7:65:4d:32:ec:34:63:f1:8e:15:22:e1:e8:3a:3a:e0: 43:31:d2:81:31:2c:ad:bf:a3:8a:5d:68:b1:f4:85:f4:fd:96: 4d:76:06:65:21:3f:fa:7d:93:46:e1:0a:65:23:85:2c:60:a1: d8:b3:e5:62:a3:8a:4c:7b:6c:83:96:ff:8a:b9:9e:5e:74:87: f3:d9:3c:b8:a1:78:f1:00:5c:ad:17:e8:3a:3f:b5:8d:c2:98: bd:27:1f:26:e0:4c:6d:bb:c3:e2:a1:ff:b3:d6:de:a2:04:49: c2:f0:a1:67:62:7a:92:5e:94:5f:13:f4:b7:92:60:e3:de:f6: c3:5b:78:ff:35:a5:52:c2:e8:fc:55:42:48:91:ed:1f:fe:8e: cb:18:41:d8:02:ea:dd:9b:1e:0c:20:1c:ab:dc:b3:11:67:dd: ea:6a:c9:c8 -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUTO1mzRiP+YDu/4R4vFzPEmSluRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDQ0MTRaFw0yNjAyMDUwMDQ5MTRaMDMxMTAvBgNV BAMTKDc5OTA0NzA5NTY5N0NBRkY5QkZCMTk1RjBEQTg1RUJDQ0MzOTVEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKpMLhwKuSemm46Fgsk4BqGAwc InPzYokuWcyOsNTkUtuNPX4YjM9tC4/X+cwEPy4b+Hd6rZV2lF+0bh8JI3Q/wdi3 MDgr4hScEcEAH5ngEFq2H2LupLLvxmYwjK5AkV/g3Gzc7rA6F3wR7SJPPhUh4D6X Db7WKxxBfWgfNzHWuhLCd2zHmveVuEIKkBctmgIatayXdD5EDOyEq/6eMXvlPY0+ 7PYcTT6OYQgrmqV9Fjvh8WISd9tec47wp0rLXd/P4+oagWkK7shpe3X9mTysn/u9 XVj+t4AnGEppKHEinBd2uaszkcr6Yc1uMFZ4poQYHyrfIHw/ZmnJY3Rbpzv1AgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5kEcJVpfK/5v7 GV8NqF68zDldzjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUI0RjFFRjhBRUU0QTI2QzREQzU3Mjk2 QTA5Q0VDNDAzNjQ4RDk4QTNGOTdFN0IzQTQ3NzA3QjEzMzdEREFEMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQjRGMUVGOEFFRTRBMjZDNERDNTcyOTZBMDlDRUM0MDM2NDhEOThBM0Y5 N0U3QjNBNDc3MDdCMTMzN0REQUQwLzAvNzk5MDQ3MDk1Njk3Q0FGRjlCRkIxOTVG MERBODVFQkNDQzM5NURDRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLUH+MA8EAgAC MAkDBwAoAQAWMAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbCcwDQYJKoZIhvcN AQELBQADggEBAKJoEVi0CutxuGJYB1H3wZNIN7iFyhH5lXptvGtbj/aCfBFFl0ku L2sOm66vhJYlRf1/h3OTOcAxeOroiAlNkN4/GfYPaL2Sd3eUrbs78I7+zKsYycWp MMh65cy2t2VNMuw0Y/GOFSLh6Do64EMx0oExLK2/o4pdaLH0hfT9lk12BmUhP/p9 k0bhCmUjhSxgodiz5WKjikx7bIOW/4q5nl50h/PZPLihePEAXK0X6Do/tY3CmL0n HybgTG27w+Kh/7PW3qIEScLwoWdiepJelF8T9LeSYOPe9sNbeP81pVLC6PxVQkiR 7R/+jssYQdgC6t2bHgwgHKvcsxFn3epqycg= -----END CERTIFICATE-----Generated at Sat Apr 12 09:57:11 2025 by rpki-client