$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer File: 7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer (raw, json) Hash identifier: MVCOKnroMZMSsiZBb+pdzVfcxYA6pe9glhudqlwMNXM= Subject key identifier: 7F:71:99:03:86:C4:83:66:AC:8C:B1:3C:8D:5A:52:CF:38:D1:77:AA Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 343297666D04EFDA99E04CB0FDE57D4F8E690881 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:59:25 +0000 Certificate not after: Thu 05 Feb 2026 01:04:25 +0000 Subordinate resources: AS: 266796 IP: 45.236.92.0/22 IP: 2803:30a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:32:97:66:6d:04:ef:da:99:e0:4c:b0:fd:e5:7d:4f:8e:69:08:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:59:25 2025 GMT Not After : Feb 5 01:04:25 2026 GMT Subject: CN=7F71990386C48366AC8CB13C8D5A52CF38D177AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:f5:b5:d1:4a:d0:83:21:ef:88:85:7b:8e: 71:78:93:d7:32:56:00:5b:b7:72:9e:60:3d:52:d4: c3:cf:b3:ab:fe:a2:9f:65:be:07:f6:67:d4:b5:79: 99:7f:26:8f:63:52:2d:80:d4:82:75:fd:0b:a9:a6: ee:77:e8:62:3a:7c:9c:d2:f7:b4:0d:fb:7d:a0:e3: 27:65:ec:79:48:29:a9:7a:35:05:7d:d2:84:2d:de: 43:fa:e1:e1:63:8e:76:dd:39:8a:fb:b5:cb:d0:c1: 80:8a:65:ff:63:04:94:1f:0d:c7:fe:be:19:08:4e: 36:86:80:31:85:a9:2f:8e:6b:3a:1d:7c:7a:06:2d: 68:29:1e:01:16:b0:a2:39:b6:ef:4e:01:12:bb:24: 67:53:a7:2c:35:16:1b:e4:64:dd:7a:70:06:a7:ab: 08:29:3d:fc:a2:6b:5c:c0:a4:a5:a2:88:25:7c:38: e2:db:f5:38:71:b0:ad:04:b4:01:bd:b6:13:d8:1d: 86:22:f8:69:85:74:e8:f7:d7:94:26:26:84:b8:23: 5b:58:41:0f:a1:38:92:c5:39:a3:79:19:59:ab:54: 9f:a9:07:fe:05:c2:4b:e2:16:42:ab:bb:09:93:ba: 0b:13:f6:8a:a3:a1:ec:13:2b:fe:e1:0d:d8:51:13: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:71:99:03:86:C4:83:66:AC:8C:B1:3C:8D:5A:52:CF:38:D1:77:AA X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.92.0/22 IPv6: 2803:30a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266796 Signature Algorithm: sha256WithRSAEncryption 1d:f5:fd:64:d6:0f:2d:8e:92:b1:51:ca:f5:ad:d2:63:d1:a1: b2:e3:e5:25:7e:84:22:cb:81:99:59:8f:fd:80:54:47:28:c8: f7:bd:76:54:8e:23:a3:62:60:c6:09:eb:0a:33:e6:65:e8:4f: dd:7a:ff:34:a4:9c:ff:48:8a:14:84:7c:d6:7e:53:e1:65:f5: 3b:c6:87:a4:02:75:9f:36:84:22:d6:54:af:dc:01:a3:49:c1: 1a:34:a2:8d:4a:90:01:ea:b6:85:4c:60:49:f2:d8:94:4a:45: 7f:1e:2a:69:b8:48:50:79:b3:e2:02:dd:f6:28:2f:de:c1:08: 55:97:58:16:4e:e6:99:c1:45:78:f6:42:4f:af:82:83:39:6b: 58:51:19:b1:2d:65:db:ca:8b:72:e7:f5:24:20:cb:e5:be:41: 19:44:74:fa:0d:c1:69:61:6b:c0:b7:18:41:78:b3:74:36:55: 02:82:1f:67:35:72:30:55:2d:77:05:4a:b7:56:f2:87:8f:a1: 04:7c:aa:b0:29:f3:30:4a:b3:32:6b:37:67:02:5d:30:2d:bd: a9:1b:82:20:25:cb:07:a2:22:79:60:3c:3b:d1:d8:8f:75:a7: 99:17:cd:04:a0:3c:55:ae:69:ba:88:87:9e:53:c1:b9:92:2d: b8:88:d9:eb -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNDKXZm0E79qZ4Eyw/eV9T45pCIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDU5MjVaFw0yNjAyMDUwMTA0MjVaMDMxMTAvBgNV BAMTKDdGNzE5OTAzODZDNDgzNjZBQzhDQjEzQzhENUE1MkNGMzhEMTc3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuvW10UrQgyHviIV7jnF4k9cy VgBbt3KeYD1S1MPPs6v+op9lvgf2Z9S1eZl/Jo9jUi2A1IJ1/Quppu536GI6fJzS 97QN+32g4ydl7HlIKal6NQV90oQt3kP64eFjjnbdOYr7tcvQwYCKZf9jBJQfDcf+ vhkITjaGgDGFqS+OazodfHoGLWgpHgEWsKI5tu9OARK7JGdTpyw1FhvkZN16cAan qwgpPfyia1zApKWiiCV8OOLb9ThxsK0EtAG9thPYHYYi+GmFdOj315QmJoS4I1tY QQ+hOJLFOaN5GVmrVJ+pB/4FwkviFkKruwmTugsT9oqjoewTK/7hDdhRE8IfAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/cZkDhsSDZqyM sTyNWlLPONF3qjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjc5MDJCN0I3MzdFNTlDNjdEQkMxQkJE RTE1MTYwM0Q2MDc0OUFERDgwOTAyRUE4RUM5ODZBQTBFODMwNzE5Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNzkwMkI3QjczN0U1OUM2N0RCQzFCQkRFMTUxNjAzRDYwNzQ5QUREODA5 MDJFQThFQzk4NkFBMEU4MzA3MTlCLzAvN0Y3MTk5MDM4NkM0ODM2NkFDOENCMTND OEQ1QTUyQ0YzOEQxNzdBQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLexcMA0EAgAC MAcDBQAoAzCgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSLDANBgkqhkiG9w0B AQsFAAOCAQEAHfX9ZNYPLY6SsVHK9a3SY9GhsuPlJX6EIsuBmVmP/YBURyjI9712 VI4jo2JgxgnrCjPmZehP3Xr/NKSc/0iKFIR81n5T4WX1O8aHpAJ1nzaEItZUr9wB o0nBGjSijUqQAeq2hUxgSfLYlEpFfx4qabhIUHmz4gLd9igv3sEIVZdYFk7mmcFF ePZCT6+CgzlrWFEZsS1l28qLcuf1JCDL5b5BGUR0+g3BaWFrwLcYQXizdDZVAoIf ZzVyMFUtdwVKt1byh4+hBHyqsCnzMEqzMms3ZwJdMC29qRuCICXLB6IieWA8O9HY j3WnmRfNBKA8Va5puoiHnlPBuZItuIjZ6w== -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:42 2025 by rpki-client