$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer File: 83F7E47489A9B33F206BDEF2A5355211978698EE.cer (raw, json) Hash identifier: RJtPt2DC5vJa3mqwquw/GCa3rjG+x/MjA8yKJXEQ+ro= Subject key identifier: 83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 637181058D2DE838F40579895EA75E54D214301F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:14:15 +0000 Certificate not after: Tue 03 Feb 2026 20:19:15 +0000 Subordinate resources: AS: 272962 IP: 2803:f990::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:71:81:05:8d:2d:e8:38:f4:05:79:89:5e:a7:5e:54:d2:14:30:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:14:15 2025 GMT Not After : Feb 3 20:19:15 2026 GMT Subject: CN=83F7E47489A9B33F206BDEF2A5355211978698EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:48:f1:0b:b4:29:c9:69:89:80:b0:5d:28: e4:53:f4:10:23:da:88:4c:d1:2c:83:a6:d9:00:b3: e2:4e:09:f9:53:88:db:76:d5:28:30:06:4a:cf:ee: 73:9f:2f:e8:08:f9:04:c7:df:23:52:32:43:31:f8: 9a:84:64:cb:4c:08:4b:c9:52:f0:6b:13:18:42:ed: 67:eb:7d:1e:83:14:e8:7a:a0:3f:86:49:1e:af:87: 5b:91:7b:2b:75:1e:e5:dc:c7:2c:3c:f7:24:40:65: 81:73:29:8d:71:19:c6:9c:1d:79:9e:18:c7:d9:fd: 64:39:f1:49:8e:9f:53:c2:0e:7e:8b:47:f0:80:b3: 9d:a6:86:9f:28:53:03:4e:56:ad:7a:2a:23:90:f9: 7d:66:de:51:fb:72:ca:11:1d:e4:bc:5d:8d:10:c9: 1f:5f:06:4c:a0:46:5a:82:11:c8:14:36:3c:73:46: 84:00:88:83:fa:57:6b:57:e0:49:d7:c4:62:60:ce: a7:dc:80:45:bb:24:af:73:5a:c4:e7:d4:96:58:d8: 23:d7:86:fe:26:6e:9e:56:26:f0:65:69:07:8e:e1: 8f:f5:87:e3:e6:86:0f:32:9a:ba:13:2a:47:5f:9e: 0a:33:12:b5:57:a2:d6:d0:31:8d:8b:c5:f4:f7:79: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f990::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272962 Signature Algorithm: sha256WithRSAEncryption c0:c8:ea:d0:a5:6f:82:d1:7f:12:54:11:22:31:3f:6f:c1:5e: 3c:db:0e:fd:e6:cb:11:6b:00:95:01:9f:45:8b:c0:c6:85:41: c9:60:0d:2f:b9:69:d2:98:c6:4f:73:35:31:da:bf:f6:6d:ed: 5c:f5:dd:a9:dd:b3:30:63:a1:eb:56:9b:c6:41:97:67:6d:bb: 0b:ee:3c:a1:49:34:71:a1:6a:fb:8b:d7:c7:ae:e1:35:3b:d5: 41:5e:00:41:c9:de:26:fb:d1:a5:a7:57:71:af:b9:d6:bb:9a: 50:a8:ae:59:ee:c3:03:80:d6:05:91:08:1e:b6:40:c3:c4:13: 7e:21:90:5d:db:43:f7:eb:8b:3b:d9:28:19:ff:8d:8c:ec:9d: 20:01:07:e8:33:bd:0f:8e:75:a4:3c:5c:d6:e5:fa:0f:aa:b8: ea:f9:07:f4:88:f8:78:d2:6d:45:89:fd:11:90:73:f2:66:17: 5a:2b:20:a9:2b:bc:bd:df:7f:35:3a:a9:09:e1:82:45:e6:28: 75:ec:61:7d:3b:2e:52:25:fc:80:a8:f1:47:92:ff:c0:de:af: 6d:18:bf:41:40:a3:9a:82:69:66:96:38:a9:59:2c:06:9d:6e: 63:de:ad:64:1e:1d:20:62:7c:62:67:c5:d6:5d:9b:fb:09:08: 15:6e:23:da -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUY3GBBY0t6Dj0BXmJXqdeVNIUMB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDE0MTVaFw0yNjAyMDMyMDE5MTVaMDMxMTAvBgNV BAMTKDgzRjdFNDc0ODlBOUIzM0YyMDZCREVGMkE1MzU1MjExOTc4Njk4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgUjxC7QpyWmJgLBdKORT9BAj 2ohM0SyDptkAs+JOCflTiNt21SgwBkrP7nOfL+gI+QTH3yNSMkMx+JqEZMtMCEvJ UvBrExhC7WfrfR6DFOh6oD+GSR6vh1uReyt1HuXcxyw89yRAZYFzKY1xGcacHXme GMfZ/WQ58UmOn1PCDn6LR/CAs52mhp8oUwNOVq16KiOQ+X1m3lH7csoRHeS8XY0Q yR9fBkygRlqCEcgUNjxzRoQAiIP6V2tX4EnXxGJgzqfcgEW7JK9zWsTn1JZY2CPX hv4mbp5WJvBlaQeO4Y/1h+Pmhg8ymroTKkdfngozErVXotbQMY2LxfT3eYrZAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSD9+R0iamzPyBr 3vKlNVIRl4aY7jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDZDNEJBRTNEODY0OEQwRUIyMzNGMTJC RTNFQ0M1QUQ5NTJFOTUxNkYzMDg3NEUzMjg3QTA4QTczRDg1NjI1MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNkM0QkFFM0Q4NjQ4RDBFQjIzM0YxMkJFM0VDQzVBRDk1MkU5NTE2RjMw ODc0RTMyODdBMDhBNzNEODU2MjUwLzAvODNGN0U0NzQ4OUE5QjMzRjIwNkJERUYy QTUzNTUyMTE5Nzg2OThFRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP5kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKkIwDQYJKoZIhvcNAQELBQADggEBAMDI6tCl b4LRfxJUESIxP2/BXjzbDv3myxFrAJUBn0WLwMaFQclgDS+5adKYxk9zNTHav/Zt 7Vz13andszBjoetWm8ZBl2dtuwvuPKFJNHGhavuL18eu4TU71UFeAEHJ3ib70aWn V3Gvuda7mlCorlnuwwOA1gWRCB62QMPEE34hkF3bQ/frizvZKBn/jYzsnSABB+gz vQ+OdaQ8XNbl+g+quOr5B/SI+HjSbUWJ/RGQc/JmF1orIKkrvL3ffzU6qQnhgkXm KHXsYX07LlIl/ICo8UeS/8Der20Yv0FAo5qCaWaWOKlZLAadbmPerWQeHSBifGJn xdZdm/sJCBVuI9o= -----END CERTIFICATE-----Generated at Mon Apr 7 03:24:29 2025 by rpki-client