$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.cer File: 7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.cer (raw, json) Hash identifier: YUtXAbf2OYDIAK94MDgXFC80fd66Gc7m65Zj57uMp1s= Subject key identifier: 7F:5E:E3:DF:74:1C:91:58:DB:F3:0C:17:61:F6:DA:BD:BE:6B:99:EF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1ADF0DFDA9B99A27E5624054C13C6A93893D0959 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:44:50 +0000 Certificate not after: Tue 03 Feb 2026 20:49:50 +0000 Subordinate resources: AS: 266659 IP: 45.227.244.0/22 IP: 2801:11:b000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:df:0d:fd:a9:b9:9a:27:e5:62:40:54:c1:3c:6a:93:89:3d:09:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:44:50 2025 GMT Not After : Feb 3 20:49:50 2026 GMT Subject: CN=7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:2c:a0:41:5e:88:dd:23:09:2b:84:4c:06: 3a:2a:49:37:e8:ea:36:43:39:c6:2c:5d:cc:52:bb: e2:76:50:82:74:23:51:5e:e6:2a:6b:29:38:d7:ce: ad:2f:2f:83:ca:aa:02:78:62:d5:21:e3:45:27:92: 22:81:7f:7e:89:b9:7d:61:a6:73:10:d7:2d:f5:fb: 57:10:fc:78:c6:4d:0c:e3:ad:06:6e:f1:57:e1:d6: 69:db:cb:4c:89:a0:67:7e:72:c2:c2:b4:29:55:6e: 0b:d1:60:e5:85:53:d0:12:a9:8e:e5:f8:9d:7e:30: aa:fd:30:7b:12:8e:02:ad:89:24:12:48:bf:de:f2: f1:98:ea:91:fe:49:b5:01:4b:d5:29:21:cd:3b:ba: 76:52:4f:6e:38:3c:b8:da:15:46:ac:af:fb:99:67: d1:dd:8d:29:db:ed:65:20:bf:b8:e3:e1:27:ae:66: b2:a9:34:01:48:e1:04:20:54:56:d6:68:36:7f:5d: 48:da:fb:db:2e:c4:4c:69:1a:ec:47:9e:20:18:39: 54:a6:99:5d:09:23:e1:76:ab:0a:8b:12:54:42:c8: da:f1:5b:f4:e3:b7:9a:69:95:d5:df:76:7e:37:5a: 88:1a:d9:20:6b:36:fd:47:3d:87:2c:eb:d4:58:74: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:5E:E3:DF:74:1C:91:58:DB:F3:0C:17:61:F6:DA:BD:BE:6B:99:EF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/786A57BFF17561B515F0F4CF93872615C81F0B3034DED55AD9D3C05F9A3CC642/0/7F5EE3DF741C9158DBF30C1761F6DABDBE6B99EF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.244.0/22 IPv6: 2801:11:b000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266659 Signature Algorithm: sha256WithRSAEncryption 07:01:58:bb:b8:b6:5e:99:7b:70:18:5e:7c:aa:0a:36:a6:e4: f4:58:20:60:1d:5c:ea:e3:f9:5d:f6:cb:8e:a1:92:d9:09:a4: 35:69:f4:e3:7f:c5:b2:a4:d1:28:12:12:1a:23:b6:06:87:da: 10:6a:2d:dc:eb:c2:e0:5d:34:52:3f:87:b3:f1:7d:f1:ff:2f: d6:49:99:79:d8:11:af:86:77:be:d5:ee:98:04:e0:ad:f4:91: 55:35:c7:cb:65:82:f6:33:04:db:e5:d7:9b:6d:51:84:4a:aa: 38:16:f9:09:ac:6e:bd:0d:71:e7:5a:a1:86:c2:98:ec:7b:95: ec:d1:ba:4a:d3:d2:b5:d9:97:a5:bd:81:65:58:9e:1d:c1:11: 8e:71:d3:f8:dc:4e:d2:8c:44:3a:64:c3:df:39:9c:98:7d:b1: b0:0e:bb:38:b5:f2:45:e1:bd:7a:5c:5f:64:b1:f7:41:df:db: 4d:dc:cf:82:6f:df:89:f5:72:2d:6d:ea:09:e9:0e:9c:19:de: 16:7e:75:5d:16:9c:2d:af:2c:28:4d:86:4c:df:f3:f3:33:10: 2b:1a:50:84:77:7c:6f:c8:0c:bd:3f:c7:4c:e2:31:a4:34:2d: 15:85:b7:7f:b4:4f:9e:02:0d:0d:20:4f:b5:e4:91:e1:dd:0b: e9:21:e6:2c -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUGt8N/am5miflYkBUwTxqk4k9CVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDQ0NTBaFw0yNjAyMDMyMDQ5NTBaMDMxMTAvBgNV BAMTKDdGNUVFM0RGNzQxQzkxNThEQkYzMEMxNzYxRjZEQUJEQkU2Qjk5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVyygQV6I3SMJK4RMBjoqSTfo 6jZDOcYsXcxSu+J2UIJ0I1Fe5iprKTjXzq0vL4PKqgJ4YtUh40UnkiKBf36JuX1h pnMQ1y31+1cQ/HjGTQzjrQZu8Vfh1mnby0yJoGd+csLCtClVbgvRYOWFU9ASqY7l +J1+MKr9MHsSjgKtiSQSSL/e8vGY6pH+SbUBS9UpIc07unZST244PLjaFUasr/uZ Z9HdjSnb7WUgv7jj4SeuZrKpNAFI4QQgVFbWaDZ/XUja+9suxExpGuxHniAYOVSm mV0JI+F2qwqLElRCyNrxW/Tjt5ppldXfdn43Woga2SBrNv1HPYcs69RYdCJzAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/XuPfdByRWNvz DBdh9tq9vmuZ7zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzg2QTU3QkZGMTc1NjFCNTE1RjBGNENG OTM4NzI2MTVDODFGMEIzMDM0REVENTVBRDlEM0MwNUY5QTNDQzY0Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83ODZBNTdCRkYxNzU2MUI1MTVGMEY0Q0Y5Mzg3MjYxNUM4MUYwQjMwMzRE RUQ1NUFEOUQzQzA1RjlBM0NDNjQyLzAvN0Y1RUUzREY3NDFDOTE1OERCRjMwQzE3 NjFGNkRBQkRCRTZCOTlFRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLeP0MA8EAgAC MAkDBwAoAQARsAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBGjMA0GCSqGSIb3 DQEBCwUAA4IBAQAHAVi7uLZemXtwGF58qgo2puT0WCBgHVzq4/ld9suOoZLZCaQ1 afTjf8WypNEoEhIaI7YGh9oQai3c68LgXTRSP4ez8X3x/y/WSZl52BGvhne+1e6Y BOCt9JFVNcfLZYL2MwTb5debbVGESqo4FvkJrG69DXHnWqGGwpjse5Xs0bpK09K1 2ZelvYFlWJ4dwRGOcdP43E7SjEQ6ZMPfOZyYfbGwDrs4tfJF4b16XF9ksfdB39tN 3M+Cb9+J9XItbeoJ6Q6cGd4WfnVdFpwtrywoTYZM3/PzMxArGlCEd3xvyAy9P8dM 4jGkNC0Vhbd/tE+eAg0NIE+15JHh3QvpIeYs -----END CERTIFICATE-----Generated at Sat Apr 12 09:47:15 2025 by rpki-client