$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79920871C4F8C9DC7FBBECDA508379522770C786.cer File: 79920871C4F8C9DC7FBBECDA508379522770C786.cer (raw, json) Hash identifier: uMZbcyRwrDW/JTqcHRAxQQZ6lFGCa2W+qcNBSzfsJFs= Subject key identifier: 79:92:08:71:C4:F8:C9:DC:7F:BB:EC:DA:50:83:79:52:27:70:C7:86 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 07D76FDCF9E33C7BB390B77950D6D3B4A35D013C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/79920871C4F8C9DC7FBBECDA508379522770C786.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:04:55 +0000 Certificate not after: Wed 04 Feb 2026 12:09:55 +0000 Subordinate resources: AS: 267723 IP: 45.165.52.0/23 IP: 2801:17:f000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d7:6f:dc:f9:e3:3c:7b:b3:90:b7:79:50:d6:d3:b4:a3:5d:01:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:04:55 2025 GMT Not After : Feb 4 12:09:55 2026 GMT Subject: CN=79920871C4F8C9DC7FBBECDA508379522770C786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:85:ff:dc:f7:e6:da:96:e0:64:4a:d0:e0: a6:68:aa:91:99:13:00:2b:93:39:71:5f:c1:cd:8e: 3e:60:97:12:a3:bb:9b:39:e2:8a:2d:10:ae:fc:84: f4:16:45:6c:c1:a7:5e:9e:ca:79:92:f3:85:54:d5: 88:f4:12:43:07:ac:af:cc:b3:52:ef:59:a7:a6:cc: 27:a0:ac:7e:db:c0:dd:b9:d4:64:2a:65:ec:6e:03: bb:f8:76:ee:f9:bb:0a:53:ed:af:4d:1d:be:04:6f: 82:b4:65:39:80:f0:7a:0b:41:8f:e2:86:cc:56:a8: ce:56:a6:f1:1c:94:ce:2e:87:17:76:d6:e3:41:f0: de:f3:9f:c0:14:81:9a:13:0b:1a:71:a5:6d:24:a5: 50:d8:2d:2c:a6:30:13:fb:0e:e1:87:ff:38:6a:8e: 3f:da:f0:a2:99:7f:24:a8:89:e0:ee:0c:f8:5c:ec: f3:1a:51:99:c8:a3:03:9b:72:21:ee:cf:70:14:8d: da:a5:14:f9:29:6a:ef:14:73:50:80:88:6c:22:e3: 2b:4b:bb:fe:84:e5:5e:16:3c:f2:6b:f8:d0:3b:c9: c5:d2:22:99:19:c0:a5:c0:3e:c1:3b:d7:df:c3:94: 68:9b:4e:e4:b2:74:35:cf:4f:e4:2c:e1:13:b0:68: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:92:08:71:C4:F8:C9:DC:7F:BB:EC:DA:50:83:79:52:27:70:C7:86 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/79920871C4F8C9DC7FBBECDA508379522770C786.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.52.0/23 IPv6: 2801:17:f000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267723 Signature Algorithm: sha256WithRSAEncryption c8:91:e2:fe:e6:c4:71:6b:9d:fe:1a:92:ff:6a:ab:f8:18:e7: d2:5d:84:29:af:57:d7:e8:b7:36:10:98:9d:bb:5b:3a:f9:fe: 40:da:0f:c6:5c:c4:58:fa:fb:21:fb:8c:8b:e6:d4:33:d1:c9: c5:38:75:95:7a:2c:6a:ce:65:59:ef:db:53:5f:da:3f:e9:e8: d2:b9:77:b3:8e:b1:32:ff:92:c7:0d:c8:f1:22:81:8f:cb:fe: ab:ce:4c:ac:ac:cb:d5:b5:70:48:40:a5:1e:0c:54:76:2b:fe: e4:05:24:53:e7:00:85:eb:9f:1a:3f:67:74:36:85:ed:5a:7e: ac:85:45:09:20:81:5b:da:7e:b5:dc:9e:c0:c7:14:72:32:43: 10:0c:11:10:da:40:9f:f9:db:06:0f:b9:b8:50:9b:ff:22:21: d3:88:90:b5:25:26:96:1b:70:f8:23:fe:cd:da:68:e6:af:b2: 71:e4:16:85:a2:7d:20:7e:ba:df:c2:2f:5f:7e:f7:0b:0e:5b: 15:b8:b3:24:bd:a5:23:54:a1:dd:c2:67:6f:75:95:e2:de:1f: 1a:67:8c:21:96:aa:10:b1:4c:c7:82:ce:3a:2a:08:c2:c0:e2: ac:bd:90:16:70:02:af:45:c0:48:93:25:29:00:ba:5f:b4:ab: 78:4c:ea:f3 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUB9dv3PnjPHuzkLd5UNbTtKNdATwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjA0NTVaFw0yNjAyMDQxMjA5NTVaMDMxMTAvBgNV BAMTKDc5OTIwODcxQzRGOEM5REM3RkJCRUNEQTUwODM3OTUyMjc3MEM3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/oX/3Pfm2pbgZErQ4KZoqpGZ EwArkzlxX8HNjj5glxKju5s54ootEK78hPQWRWzBp16eynmS84VU1Yj0EkMHrK/M s1LvWaemzCegrH7bwN251GQqZexuA7v4du75uwpT7a9NHb4Eb4K0ZTmA8HoLQY/i hsxWqM5WpvEclM4uhxd21uNB8N7zn8AUgZoTCxpxpW0kpVDYLSymMBP7DuGH/zhq jj/a8KKZfySoieDuDPhc7PMaUZnIowObciHuz3AUjdqlFPkpau8Uc1CAiGwi4ytL u/6E5V4WPPJr+NA7ycXSIpkZwKXAPsE719/DlGibTuSydDXPT+Qs4ROwaB9vAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5kghxxPjJ3H+7 7NpQg3lSJ3DHhjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUIyRUE4ODcxQTIwMzBCRTI1NTQ1MzYx Qjk1QTI1NTEzQUI5REVGQzg0ODAzMDJFNTYzM0JDNDExODhGQjgwQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85QjJFQTg4NzFBMjAzMEJFMjU1NDUzNjFCOTVBMjU1MTNBQjlERUZDODQ4 MDMwMkU1NjMzQkM0MTE4OEZCODBDLzAvNzk5MjA4NzFDNEY4QzlEQzdGQkJFQ0RB NTA4Mzc5NTIyNzcwQzc4Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLaU0MA8EAgAC MAkDBwAoAQAX8AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBXLMA0GCSqGSIb3 DQEBCwUAA4IBAQDIkeL+5sRxa53+GpL/aqv4GOfSXYQpr1fX6Lc2EJidu1s6+f5A 2g/GXMRY+vsh+4yL5tQz0cnFOHWVeixqzmVZ79tTX9o/6ejSuXezjrEy/5LHDcjx IoGPy/6rzkysrMvVtXBIQKUeDFR2K/7kBSRT5wCF658aP2d0NoXtWn6shUUJIIFb 2n613J7AxxRyMkMQDBEQ2kCf+dsGD7m4UJv/IiHTiJC1JSaWG3D4I/7N2mjmr7Jx 5BaFon0gfrrfwi9ffvcLDlsVuLMkvaUjVKHdwmdvdZXi3h8aZ4whlqoQsUzHgs46 KgjCwOKsvZAWcAKvRcBIkyUpALpftKt4TOrz -----END CERTIFICATE-----Generated at Sat Apr 12 09:57:12 2025 by rpki-client