$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer File: 7DA5922CAF9214C6E4545724FFE93FC180331E96.cer (raw, json) Hash identifier: ZUWu1ISPuQcBruRmeIQpjFUwMHjWykpUaFwitZF2B4Y= Subject key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 58FBC4E746A5288140707CAB1150A42DA6EC55C1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:32:42 +0000 Certificate not after: Tue 03 Feb 2026 23:37:42 +0000 Subordinate resources: AS: 267849 IP: 45.175.164.0/22 IP: 2803:ac60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fb:c4:e7:46:a5:28:81:40:70:7c:ab:11:50:a4:2d:a6:ec:55:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:32:42 2025 GMT Not After : Feb 3 23:37:42 2026 GMT Subject: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:ed:43:46:63:ff:b5:97:51:04:84:60:91: bc:08:b2:a1:89:c0:df:ec:c1:c6:17:b1:ca:64:b8: ec:a6:4a:38:0a:65:18:1c:a6:7f:56:b4:9d:89:7c: 0d:b0:78:38:41:7c:e1:34:29:a9:d0:c7:00:de:37: c3:cc:fb:cf:a5:ae:9f:d5:73:d1:56:63:e5:18:77: 94:92:a8:ab:69:a7:ec:69:10:9a:22:9e:77:cb:88: 80:2a:cb:b1:c8:45:db:d1:8c:72:1d:28:a5:a8:6c: 1a:2d:ae:0b:b9:78:4e:4c:07:ad:ba:30:98:fe:8c: ef:07:fd:46:7c:ac:a8:53:6b:53:cc:41:47:ca:c6: 19:bb:ca:06:ba:2d:ca:7d:4f:b7:aa:a4:f9:f2:dd: 0a:fe:27:ec:63:5d:03:8c:08:1b:27:de:92:f2:cf: 1c:7b:6e:0f:9a:cb:11:7d:5c:ce:b4:6d:0c:e2:f3: e0:19:87:98:d8:60:01:f9:c3:94:f2:bc:6d:51:1e: 30:3c:f4:8b:3b:9e:85:00:38:81:61:b4:0d:9a:11: b9:84:3e:aa:44:cc:40:16:ba:38:a6:28:24:60:79: 37:01:4c:c0:cb:63:31:63:d7:35:74:3d:98:1c:87: 1e:8d:e1:ea:c6:78:ae:c0:66:b4:6a:17:cc:0e:a8: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.164.0/22 IPv6: 2803:ac60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267849 Signature Algorithm: sha256WithRSAEncryption de:71:93:c9:c9:df:3d:04:16:85:79:b7:de:c9:7a:18:78:67: 63:a7:3e:51:1b:c1:3f:44:07:e7:ed:a8:74:c9:da:4e:5d:9a: 0d:33:fa:91:90:07:9a:6b:15:6a:09:40:e5:f5:3f:8b:21:0f: 5b:2c:93:97:8c:92:c5:f5:ac:e5:1e:54:0c:27:c4:12:a7:6d: ec:21:e1:fe:38:c6:df:1e:7f:ef:24:9c:c6:22:19:00:5b:d1: 03:47:19:23:ee:32:ca:f8:38:0c:ab:60:62:04:83:b1:b1:19: b0:f7:8b:ba:36:95:62:79:53:6c:35:04:0a:0a:3d:04:fb:0f: 1a:2e:fc:24:44:42:78:b3:14:13:63:8c:6b:26:bc:e2:a0:45: b4:dd:48:7b:dc:cf:c9:cb:63:fe:be:d8:42:df:b4:d2:d6:20: c1:c4:31:87:0b:27:38:7f:b8:24:38:4f:60:92:ab:3f:52:5c: 87:c6:ec:8e:e8:5e:f6:b2:6c:74:6a:33:b2:49:e6:8a:c9:c9: 13:9c:d5:ef:cc:41:dc:78:31:2c:cd:0f:c6:02:fe:74:85:56: 03:d8:1d:29:07:a1:4a:54:b9:fd:f9:7c:88:44:96:ae:98:9a: 37:c0:0a:7c:38:46:a5:bf:bf:73:10:0c:d8:01:66:5e:e3:f5: 82:2b:0b:e1 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUWPvE50alKIFAcHyrEVCkLabsVcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzMyNDJaFw0yNjAyMDMyMzM3NDJaMDMxMTAvBgNV BAMTKDdEQTU5MjJDQUY5MjE0QzZFNDU0NTcyNEZGRTkzRkMxODAzMzFFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xe1DRmP/tZdRBIRgkbwIsqGJ wN/swcYXscpkuOymSjgKZRgcpn9WtJ2JfA2weDhBfOE0KanQxwDeN8PM+8+lrp/V c9FWY+UYd5SSqKtpp+xpEJoinnfLiIAqy7HIRdvRjHIdKKWobBotrgu5eE5MB626 MJj+jO8H/UZ8rKhTa1PMQUfKxhm7yga6Lcp9T7eqpPny3Qr+J+xjXQOMCBsn3pLy zxx7bg+ayxF9XM60bQzi8+AZh5jYYAH5w5TyvG1RHjA89Is7noUAOIFhtA2aEbmE PqpEzEAWujimKCRgeTcBTMDLYzFj1zV0PZgchx6N4erGeK7AZrRqF8wOqFy5AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9pZIsr5IUxuRU VyT/6T/BgDMeljAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUQ0RTk2MUEyMzFDRDEzQTc2RUVCMjhG NDRCRDRDN0JFOUM4NkI2NDIxMzEyNEExMkJBRDJDREQ3REM2MTU4Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRDRFOTYxQTIzMUNEMTNBNzZFRUIyOEY0NEJENEM3QkU5Qzg2QjY0MjEz MTI0QTEyQkFEMkNERDdEQzYxNTg2LzAvN0RBNTkyMkNBRjkyMTRDNkU0NTQ1NzI0 RkZFOTNGQzE4MDMzMUU5Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa+kMA0EAgAC MAcDBQAoA6xgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWSTANBgkqhkiG9w0B AQsFAAOCAQEA3nGTycnfPQQWhXm33sl6GHhnY6c+URvBP0QH5+2odMnaTl2aDTP6 kZAHmmsVaglA5fU/iyEPWyyTl4ySxfWs5R5UDCfEEqdt7CHh/jjG3x5/7yScxiIZ AFvRA0cZI+4yyvg4DKtgYgSDsbEZsPeLujaVYnlTbDUECgo9BPsPGi78JERCeLMU E2OMaya84qBFtN1Ie9zPyctj/r7YQt+00tYgwcQxhwsnOH+4JDhPYJKrP1Jch8bs juhe9rJsdGozsknmisnJE5zV78xB3HgxLM0PxgL+dIVWA9gdKQehSlS5/fl8iESW rpiaN8AKfDhGpb+/cxAM2AFmXuP1gisL4Q== -----END CERTIFICATE-----Generated at Sat Apr 12 09:57:15 2025 by rpki-client