$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer File: 86A5D10A30ED805BDE337515CB0F580086111558.cer (raw, json) Hash identifier: nfCpoVbcBRqXuJXcgE2Ezw9IXA+moCeq8XWaKwHUEi4= Subject key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2C05375635BDE8A4F8D8DC8A1B04BE96564CFD59 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 18:02:06 +0000 Certificate not after: Wed 04 Feb 2026 18:07:06 +0000 Subordinate resources: AS: 11392 IP: 186.0.152.0/22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:05:37:56:35:bd:e8:a4:f8:d8:dc:8a:1b:04:be:96:56:4c:fd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 18:02:06 2025 GMT Not After : Feb 4 18:07:06 2026 GMT Subject: CN=86A5D10A30ED805BDE337515CB0F580086111558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:de:16:23:54:a0:11:8a:ee:f4:99:12:45: 82:55:4e:f3:71:d1:e5:82:0d:da:82:68:43:f4:5a: 69:2e:89:a5:81:a6:79:61:9e:1f:50:71:4b:e4:fc: f9:4d:9a:c8:74:87:05:e6:cc:7a:22:ce:3f:19:8b: 19:ae:49:4f:18:8c:8f:01:c9:08:37:a6:90:28:fb: 17:61:69:ef:38:6d:d2:b9:cc:e3:51:4f:7d:28:6e: 81:d7:4e:94:6d:51:18:04:35:7c:d2:ca:7d:a5:28: 5c:25:25:9d:24:06:4c:ea:cb:44:4a:6c:53:cf:be: 15:14:4a:c7:46:3f:89:f0:f5:3f:38:c3:26:c3:0b: 4e:88:19:1d:44:ac:05:9d:95:07:ca:0d:75:f7:c2: 01:85:2e:75:ae:f2:14:40:0a:ed:9f:b4:0a:29:67: 0a:f1:cd:ed:35:ad:67:e3:f5:36:60:44:17:43:60: 24:af:f0:b9:3f:18:1a:6b:9c:6e:47:3c:40:c8:f9: bb:49:58:1a:1c:4c:c9:73:72:06:da:6d:5f:c5:a6: 54:22:8a:0e:30:94:b3:46:8b:48:22:d0:26:13:b5: cd:98:da:87:aa:56:b6:ea:00:8a:7c:2f:5e:46:a7: 55:21:d9:a7:a1:13:a4:f0:4e:bb:c0:48:16:5d:a8: 23:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.0.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11392 Signature Algorithm: sha256WithRSAEncryption 3c:34:6b:ae:17:63:a5:9a:e5:68:84:66:dd:42:36:ba:13:eb: 93:46:db:c5:3f:19:0d:4d:d7:be:7d:ca:bf:be:ae:ab:b0:13: 7b:51:be:22:b4:b8:75:51:c9:45:0f:d6:e9:a5:8e:d9:53:1d: 88:83:08:d2:aa:96:e3:62:cb:d3:4f:18:98:85:33:3e:1a:89: 70:ca:f0:21:88:ea:4b:11:a0:8d:6a:18:63:e3:40:2d:37:c3: 31:06:83:28:53:6b:20:b9:23:af:6c:68:dd:cc:b0:83:d7:80: 20:8a:ef:2c:b8:40:4d:d4:60:de:e9:29:63:b2:44:3b:c9:95: 98:70:39:df:b5:88:45:ae:ca:f6:52:07:9f:21:a1:7b:e6:9d: bf:e4:c6:f2:0b:02:20:f8:c4:0a:45:a0:59:fe:c9:64:0c:25: 5b:e6:89:1d:0b:c2:b7:3d:b6:0e:b4:06:0c:27:31:a3:22:8c: e9:01:c8:d2:19:b3:5b:41:e3:9b:eb:07:a4:56:08:4c:a1:40: 52:1d:f9:df:c1:0d:c8:1c:0f:0e:91:78:b6:c7:ce:f9:ca:f3: b0:0f:a1:01:e4:51:79:58:1d:0d:3b:9d:64:ee:4a:d5:bf:76: 12:e1:cb:99:5e:17:70:07:7b:22:c6:a7:f9:af:15:be:f0:27: cb:60:46:9f -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIULAU3VjW96KT42NyKGwS+llZM/VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxODAyMDZaFw0yNjAyMDQxODA3MDZaMDMxMTAvBgNV BAMTKDg2QTVEMTBBMzBFRDgwNUJERTMzNzUxNUNCMEY1ODAwODYxMTE1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VN4WI1SgEYru9JkSRYJVTvNx 0eWCDdqCaEP0WmkuiaWBpnlhnh9QcUvk/PlNmsh0hwXmzHoizj8ZixmuSU8YjI8B yQg3ppAo+xdhae84bdK5zONRT30oboHXTpRtURgENXzSyn2lKFwlJZ0kBkzqy0RK bFPPvhUUSsdGP4nw9T84wybDC06IGR1ErAWdlQfKDXX3wgGFLnWu8hRACu2ftAop Zwrxze01rWfj9TZgRBdDYCSv8Lk/GBprnG5HPEDI+btJWBocTMlzcgbabV/FplQi ig4wlLNGi0gi0CYTtc2Y2oeqVrbqAIp8L15Gp1Uh2aehE6TwTrvASBZdqCMzAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGpdEKMO2AW94z dRXLD1gAhhEVWDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjA0QTQ2RDZBODVERkE2MTQ5QzVGOUE3 Q0RBMThDRjkzMEQzODJGMzM4MkUxOTIzRDUwM0Y4MjlBQzQ1MEQwMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMDRBNDZENkE4NURGQTYxNDlDNUY5QTdDREExOENGOTMwRDM4MkYzMzgy RTE5MjNENTAzRjgyOUFDNDUwRDAyLzAvODZBNUQxMEEzMEVEODA1QkRFMzM3NTE1 Q0IwRjU4MDA4NjExMTU1OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCugCYMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAiyAMA0GCSqGSIb3DQEBCwUAA4IBAQA8NGuuF2Ol muVohGbdQja6E+uTRtvFPxkNTde+fcq/vq6rsBN7Ub4itLh1UclFD9bppY7ZUx2I gwjSqpbjYsvTTxiYhTM+GolwyvAhiOpLEaCNahhj40AtN8MxBoMoU2sguSOvbGjd zLCD14Agiu8suEBN1GDe6SljskQ7yZWYcDnftYhFrsr2UgefIaF75p2/5MbyCwIg +MQKRaBZ/slkDCVb5okdC8K3PbYOtAYMJzGjIozpAcjSGbNbQeOb6wekVghMoUBS HfnfwQ3IHA8OkXi2x875yvOwD6EB5FF5WB0NO51k7krVv3YS4cuZXhdwB3sixqf5 rxW+8CfLYEaf -----END CERTIFICATE-----Generated at Sun Apr 6 04:24:23 2025 by rpki-client