$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer File: 85E8329CBFB72C73936DE19616620415214EDD8A.cer (raw, json) Hash identifier: ZI2lkYbtYqL0eSV3z3dRvFef+I/Grw6G6VHEhlvZaKU= Subject key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0F082A7F372B4E64DCCB94CD91F1B2050D49C704 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 25 Jan 2025 23:05:01 +0000 Certificate not after: Sat 24 Jan 2026 23:10:01 +0000 Subordinate resources: AS: 266849 AS: 269971 IP: 2803:2a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:08:2a:7f:37:2b:4e:64:dc:cb:94:cd:91:f1:b2:05:0d:49:c7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 25 23:05:01 2025 GMT Not After : Jan 24 23:10:01 2026 GMT Subject: CN=85E8329CBFB72C73936DE19616620415214EDD8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:e7:91:12:c7:79:95:3b:fc:fe:d3:02:0d: 50:9a:ee:7a:8f:a6:af:d7:a2:44:f8:bc:c5:17:14: 4e:b0:05:70:8a:cb:f6:90:a1:82:7d:52:21:21:d9: c9:11:ab:95:9d:95:a8:6a:ae:43:da:9d:d3:54:3a: a7:0f:44:cf:25:d8:24:ff:d4:6b:9b:27:41:e8:b6: 99:cd:6d:69:94:d0:45:75:ce:3d:4c:62:17:72:e2: 50:c5:b9:52:53:02:11:1b:38:b3:7f:88:c3:87:5e: 0b:65:80:fe:78:a2:ba:a6:67:09:66:2a:9d:52:a0: cd:4b:c6:27:f3:bf:fd:87:c5:d0:d4:d6:44:c9:f1: 54:5e:4c:0c:16:0d:25:ce:11:72:e1:54:74:d3:18: a1:bc:8f:b0:02:36:a3:af:b4:7f:5c:c0:0e:1c:e8: 7a:ea:78:c1:89:58:f8:c0:a8:8e:85:74:10:09:5e: 0d:61:1d:46:99:20:1c:a8:52:8a:81:3d:1b:5d:ec: 31:c1:ee:9c:da:48:59:8a:87:ac:6e:72:bd:8c:97: 9b:06:81:cb:e6:a4:70:a1:37:1a:71:d5:aa:4c:02: d9:c3:6b:ba:07:ea:7f:72:50:df:75:37:4e:94:f7: c0:64:1a:3c:a7:d6:b5:ca:7b:27:02:3f:dc:99:60: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266849 269971 Signature Algorithm: sha256WithRSAEncryption 8a:4d:9a:39:cd:fc:da:1e:ac:5e:7e:65:2f:e9:9d:44:84:b0: 98:d8:12:20:5a:80:0b:ef:c8:5b:df:56:2b:8d:54:dd:ef:da: f2:81:54:36:1f:71:31:c5:8d:da:0a:7f:3b:33:8f:c0:31:20: 9f:81:09:f6:7b:7d:3d:d7:5c:40:b9:c3:4a:24:87:4b:cc:f8: e9:c6:db:58:b4:6c:98:e8:f8:cd:20:0d:03:5d:74:d5:11:c3: 4e:19:11:45:f8:57:a5:ac:1a:8f:83:76:06:3e:35:80:3f:df: 07:45:5b:70:8c:0f:33:36:dd:02:17:be:e1:f3:34:a0:a1:b4: 57:d0:62:e4:ad:b7:51:ed:ab:8e:8d:d9:a0:b1:73:91:bc:ec: 9a:55:81:85:df:96:af:4e:ce:4f:0a:da:4a:f0:49:93:d2:16: bc:65:61:e0:e2:a5:13:78:0b:8c:3c:de:80:c1:bc:80:be:3d: 69:9e:56:e8:87:b5:36:d2:10:9d:9b:02:95:08:b3:50:cc:f2: ca:7b:de:08:ea:dd:7b:e7:83:53:85:53:4a:04:4c:c0:f4:4b: 3b:f7:10:25:0b:20:25:49:6f:da:01:6f:9a:05:43:08:a9:45: 08:71:fc:ec:fe:22:58:ca:62:92:21:71:7d:ff:e6:7a:52:eb: c2:0e:b3:05 -----BEGIN CERTIFICATE----- MIIGnDCCBYSgAwIBAgIUDwgqfzcrTmTcy5TNkfGyBQ1JxwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAxMjUyMzA1MDFaFw0yNjAxMjQyMzEwMDFaMDMxMTAvBgNV BAMTKDg1RTgzMjlDQkZCNzJDNzM5MzZERTE5NjE2NjIwNDE1MjE0RUREOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgOueREsd5lTv8/tMCDVCa7nqP pq/XokT4vMUXFE6wBXCKy/aQoYJ9UiEh2ckRq5WdlahqrkPandNUOqcPRM8l2CT/ 1GubJ0HotpnNbWmU0EV1zj1MYhdy4lDFuVJTAhEbOLN/iMOHXgtlgP54orqmZwlm Kp1SoM1Lxifzv/2HxdDU1kTJ8VReTAwWDSXOEXLhVHTTGKG8j7ACNqOvtH9cwA4c 6HrqeMGJWPjAqI6FdBAJXg1hHUaZIByoUoqBPRtd7DHB7pzaSFmKh6xucr2Ml5sG gcvmpHChNxpx1apMAtnDa7oH6n9yUN91N06U98BkGjyn1rXKeycCP9yZYHfDAgMB AAGjggOmMIIDojAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSF6DKcv7csc5Nt 4ZYWYgQVIU7dijAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNThGRkU0MEYzMTY3RkZGNkEzMUNFNkU5 RTRGQ0RFOEYyRDUxQjhCRkY4OTVDRTJENjIxNUMyOUI3M0ZDMURDOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81OEZGRTQwRjMxNjdGRkY2QTMxQ0U2RTlFNEZDREU4RjJENTFCOEJGRjg5 NUNFMkQ2MjE1QzI5QjczRkMxREM4LzAvODVFODMyOUNCRkI3MkM3MzkzNkRFMTk2 MTY2MjA0MTUyMTRFREQ4QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMCoDAfBggr BgEFBQcBCAEB/wQQMA6gDDAKAgMEEmECAwQekzANBgkqhkiG9w0BAQsFAAOCAQEA ik2aOc382h6sXn5lL+mdRISwmNgSIFqAC+/IW99WK41U3e/a8oFUNh9xMcWN2gp/ OzOPwDEgn4EJ9nt9PddcQLnDSiSHS8z46cbbWLRsmOj4zSANA1101RHDThkRRfhX pawaj4N2Bj41gD/fB0VbcIwPMzbdAhe+4fM0oKG0V9Bi5K23Ue2rjo3ZoLFzkbzs mlWBhd+Wr07OTwraSvBJk9IWvGVh4OKlE3gLjDzegMG8gL49aZ5W6Ie1NtIQnZsC lQizUMzyynveCOrde+eDU4VTSgRMwPRLO/cQJQsgJUlv2gFvmgVDCKlFCHH87P4i WMpikiFxff/melLrwg6zBQ== -----END CERTIFICATE-----Generated at Sat Apr 12 10:01:51 2025 by rpki-client