$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.cer File: 85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.cer (raw, json) Hash identifier: 6m9GTAItzHgIubJw36E6vlgjUrz0p80bINcxOtrmA10= Subject key identifier: 85:C6:1D:B0:CE:C2:C1:FB:C7:FB:4E:26:BE:02:00:14:71:77:B7:EA Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6122B307DA2A7D87D754A75EBF5FC7771EF57896 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:34:13 +0000 Certificate not after: Wed 04 Feb 2026 20:39:13 +0000 Subordinate resources: AS: 271915 IP: 2803:7210::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:22:b3:07:da:2a:7d:87:d7:54:a7:5e:bf:5f:c7:77:1e:f5:78:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:34:13 2025 GMT Not After : Feb 4 20:39:13 2026 GMT Subject: CN=85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:1b:be:a0:53:80:9c:55:3e:20:71:4a:6e: e8:ac:3c:d2:c7:76:9d:77:27:48:c3:c0:d4:32:4f: cb:a2:68:47:69:6a:95:a0:61:40:62:13:c9:78:e6: a7:1b:4d:c0:09:bd:6d:72:91:ed:31:7a:9a:a3:39: 5a:9f:a5:04:fc:04:33:9f:a7:76:a1:81:d0:d0:01: 75:df:0c:9e:a9:15:d1:bc:65:13:1d:10:61:7a:47: 71:fa:bc:0b:0a:b1:34:58:19:6d:77:4f:43:5a:f3: 51:6f:ce:8f:a8:55:a9:ff:d5:ad:2f:8f:d9:73:a2: e4:77:32:ec:4a:19:86:23:86:fa:4d:62:9d:d8:35: fc:9a:d5:e5:4d:45:0c:48:80:4b:ba:88:8d:df:0c: 39:b2:f2:9b:7d:1f:86:bb:70:04:23:2e:ca:22:e3: 23:52:aa:df:36:5c:5e:ff:4d:ae:8c:85:09:74:14: 87:8a:95:0d:40:2c:f0:6b:74:d1:2a:f6:69:3e:a1: 0e:2d:3f:48:ed:06:d8:29:ea:83:22:a3:60:c4:68: a0:78:30:97:a2:9f:9b:d0:42:6e:15:5b:e6:87:4f: 36:6a:55:07:01:71:60:d3:08:35:07:f3:4a:73:1d: c6:5d:87:a8:b6:a1:94:40:0b:12:08:56:96:c3:69: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:C6:1D:B0:CE:C2:C1:FB:C7:FB:4E:26:BE:02:00:14:71:77:B7:EA X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7210::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271915 Signature Algorithm: sha256WithRSAEncryption 73:aa:4c:4a:c7:1b:f5:52:aa:37:64:5f:5f:e5:28:83:1a:cd: 9c:01:89:a7:9e:1e:5d:3f:e0:04:f1:65:f4:ae:92:17:33:02: ce:7a:6e:3b:18:05:9f:55:f0:0c:88:62:20:65:91:3d:ca:ab: 5f:37:82:36:8d:22:42:11:3c:35:a2:28:1b:29:e9:9c:77:c8: c7:88:49:df:65:5c:6a:28:1c:8a:fa:66:21:35:66:90:9f:84: 26:f0:4f:05:32:0d:a4:15:a4:de:77:a7:1d:ac:4e:ac:e8:45: 15:1b:17:c7:85:71:3d:af:da:20:74:37:0d:be:66:33:bd:9e: 70:df:c7:b9:b9:68:47:41:4d:58:52:67:9e:76:38:3f:8e:0a: 82:22:7f:4c:74:6c:dd:03:0a:ef:f1:60:71:cf:3b:f6:42:cf: 53:b7:b0:a8:b3:53:3e:4f:e4:b9:58:ac:89:bc:7a:6b:9d:dd: 20:36:cb:f8:8e:10:8b:5c:9d:f7:ec:d2:3a:16:16:1a:9c:fe: 69:b0:4c:13:5b:1f:71:d0:38:56:6b:64:92:0c:58:16:69:ac: be:76:53:96:6e:86:dc:d6:5e:9d:54:4a:1a:48:5c:71:8b:7c: 40:1a:0e:a0:6c:c4:d8:40:ce:bc:74:1d:c7:b6:c3:01:2a:a4: 03:ca:1e:3a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUYSKzB9oqfYfXVKdev1/Hdx71eJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMDM0MTNaFw0yNjAyMDQyMDM5MTNaMDMxMTAvBgNV BAMTKDg1QzYxREIwQ0VDMkMxRkJDN0ZCNEUyNkJFMDIwMDE0NzE3N0I3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeoxu+oFOAnFU+IHFKbuisPNLH dp13J0jDwNQyT8uiaEdpapWgYUBiE8l45qcbTcAJvW1yke0xepqjOVqfpQT8BDOf p3ahgdDQAXXfDJ6pFdG8ZRMdEGF6R3H6vAsKsTRYGW13T0Na81Fvzo+oVan/1a0v j9lzouR3MuxKGYYjhvpNYp3YNfya1eVNRQxIgEu6iI3fDDmy8pt9H4a7cAQjLsoi 4yNSqt82XF7/Ta6MhQl0FIeKlQ1ALPBrdNEq9mk+oQ4tP0jtBtgp6oMio2DEaKB4 MJein5vQQm4VW+aHTzZqVQcBcWDTCDUH80pzHcZdh6i2oZRACxIIVpbDaUJtAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFxh2wzsLB+8f7 Tia+AgAUcXe36jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkEzMDE2Q0U1RDlBQjY5NzcwMUMxM0VD OUZGMUE4RkU3NjM2NUY3NTIzMTNBMTE0OTREMkNFQjIzQzk0NDdGOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQTMwMTZDRTVEOUFCNjk3NzAxQzEzRUM5RkYxQThGRTc2MzY1Rjc1MjMx M0ExMTQ5NEQyQ0VCMjNDOTQ0N0Y5LzAvODVDNjFEQjBDRUMyQzFGQkM3RkI0RTI2 QkUwMjAwMTQ3MTc3QjdFQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANyEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJiswDQYJKoZIhvcNAQELBQADggEBAHOqTErH G/VSqjdkX1/lKIMazZwBiaeeHl0/4ATxZfSukhczAs56bjsYBZ9V8AyIYiBlkT3K q183gjaNIkIRPDWiKBsp6Zx3yMeISd9lXGooHIr6ZiE1ZpCfhCbwTwUyDaQVpN53 px2sTqzoRRUbF8eFcT2v2iB0Nw2+ZjO9nnDfx7m5aEdBTVhSZ552OD+OCoIif0x0 bN0DCu/xYHHPO/ZCz1O3sKizUz5P5LlYrIm8emud3SA2y/iOEItcnffs0joWFhqc /mmwTBNbH3HQOFZrZJIMWBZprL52U5ZuhtzWXp1UShpIXHGLfEAaDqBsxNhAzrx0 Hce2wwEqpAPKHjo= -----END CERTIFICATE-----Generated at Sat Apr 12 09:57:15 2025 by rpki-client