$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F.cer File: 86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F.cer (raw, json) Hash identifier: XQ4A0CRUPc1/GFQr+3p19024k2NvqddtW7luiQfY2zU= Subject key identifier: 86:EB:E5:E6:D6:FB:C9:1F:6E:62:A5:A6:42:B5:25:AC:E0:E5:E9:1F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 54A935C746AF738B6A60AE5FB0320648F170F944 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E7A1C3783FE49FF418848E5CB1A6279CE47AD1388B65C1BF16BB26DAD679BA2F/0/86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E7A1C3783FE49FF418848E5CB1A6279CE47AD1388B65C1BF16BB26DAD679BA2F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 22 Jan 2025 14:30:01 +0000 Certificate not after: Wed 21 Jan 2026 14:35:01 +0000 Subordinate resources: AS: 273977 IP: 2801:1cd::/42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a9:35:c7:46:af:73:8b:6a:60:ae:5f:b0:32:06:48:f1:70:f9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 22 14:30:01 2025 GMT Not After : Jan 21 14:35:01 2026 GMT Subject: CN=86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:60:dd:47:b2:a3:1e:c6:f6:46:5b:2d:c1: 9f:94:e4:e1:64:42:4b:d2:2d:69:cf:a6:8b:5b:a2: 92:58:42:38:77:58:2c:ee:d6:ad:42:3c:55:86:62: 74:3f:70:33:93:05:a4:e6:66:44:00:e0:86:56:6a: 6e:a4:e7:ee:11:f8:13:72:e7:2a:6c:0d:43:ae:76: a9:96:19:57:54:14:cb:19:4a:75:40:7a:d3:ab:18: 5a:7d:e5:31:8b:ca:31:d7:df:cc:54:8e:7e:3e:71: 14:43:26:2c:c3:1d:ca:de:ae:ef:8b:9e:83:ed:9f: 5e:97:8f:f3:19:70:22:98:59:bd:2b:67:84:67:b0: 0b:98:89:bb:c6:40:73:21:b9:77:34:c4:39:44:ad: ab:58:2a:2a:f4:b2:58:3b:dd:c4:f3:7b:fb:0f:21: 5d:02:56:6d:8f:2c:34:31:8f:4f:1e:27:c8:f3:5a: d9:31:c9:05:b2:e8:ae:96:a3:b4:3e:24:9f:76:b3: e8:d6:cb:99:19:4d:bd:c1:82:c5:53:72:8c:a3:c4: dc:bd:30:20:26:8a:43:63:8a:2e:59:4e:03:f5:b9: 16:27:fe:5f:be:fa:2d:88:d5:3c:be:d3:90:fc:02: 44:41:d3:bb:8b:40:1b:e4:8a:9b:d1:6f:c7:77:f1: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:EB:E5:E6:D6:FB:C9:1F:6E:62:A5:A6:42:B5:25:AC:E0:E5:E9:1F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E7A1C3783FE49FF418848E5CB1A6279CE47AD1388B65C1BF16BB26DAD679BA2F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E7A1C3783FE49FF418848E5CB1A6279CE47AD1388B65C1BF16BB26DAD679BA2F/0/86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1cd::/42 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273977 Signature Algorithm: sha256WithRSAEncryption a3:32:1d:cc:e2:aa:72:7a:2c:12:63:4a:85:68:0b:1a:62:44: e3:15:5f:66:c2:a8:2e:20:20:3e:bb:15:aa:c4:07:bb:b2:e9: 50:4d:30:45:b9:c4:79:55:67:ae:df:4c:32:94:5d:b2:ec:23: 70:b0:30:81:1e:fa:d8:a0:5f:dc:70:e6:f2:4e:88:72:3b:08: 4e:27:a6:00:07:0f:13:46:f4:6a:88:bd:0a:15:8c:2c:e8:67: 27:90:ce:b4:d5:3f:28:83:78:a2:29:c3:65:2f:89:6d:cc:7a: 7f:be:36:17:39:b4:3d:eb:46:77:4a:08:0b:c2:70:dd:d7:37: 4c:2f:d8:a4:96:37:be:4b:ed:b6:c6:cb:d5:2d:3e:07:4d:dd: 42:d7:59:53:b6:3b:f6:a3:47:f0:ef:4e:e3:7a:5d:87:7b:8f: df:5c:7e:f9:6f:1f:fb:f1:58:f1:25:fa:ec:30:38:da:9e:61: 74:17:46:3f:77:ee:18:6b:17:55:e7:8d:19:46:d3:5b:da:48: 17:4e:3c:49:8e:ab:19:2f:4e:c8:d4:52:4a:64:5b:48:8a:f7: d5:b4:81:01:63:00:d4:6f:e7:ae:6c:a9:e5:0d:a2:37:56:3c: 32:9f:93:5b:82:25:11:5d:df:0f:41:d5:78:d6:bb:1a:53:83: a4:88:52:dd -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUVKk1x0avc4tqYK5fsDIGSPFw+UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAxMjIxNDMwMDFaFw0yNjAxMjExNDM1MDFaMDMxMTAvBgNV BAMTKDg2RUJFNUU2RDZGQkM5MUY2RTYyQTVBNjQyQjUyNUFDRTBFNUU5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCViWDdR7KjHsb2RlstwZ+U5OFk QkvSLWnPpotbopJYQjh3WCzu1q1CPFWGYnQ/cDOTBaTmZkQA4IZWam6k5+4R+BNy 5ypsDUOudqmWGVdUFMsZSnVAetOrGFp95TGLyjHX38xUjn4+cRRDJizDHcreru+L noPtn16Xj/MZcCKYWb0rZ4RnsAuYibvGQHMhuXc0xDlEratYKir0slg73cTze/sP IV0CVm2PLDQxj08eJ8jzWtkxyQWy6K6Wo7Q+JJ92s+jWy5kZTb3BgsVTcoyjxNy9 MCAmikNjii5ZTgP1uRYn/l+++i2I1Ty+05D8AkRB07uLQBvkipvRb8d38Z8hAgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSG6+Xm1vvJH25i paZCtSWs4OXpHzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTdBMUMzNzgzRkU0OUZGNDE4ODQ4RTVD QjFBNjI3OUNFNDdBRDEzODhCNjVDMUJGMTZCQjI2REFENjc5QkEyRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FN0ExQzM3ODNGRTQ5RkY0MTg4NDhFNUNCMUE2Mjc5Q0U0N0FEMTM4OEI2 NUMxQkYxNkJCMjZEQUQ2NzlCQTJGLzAvODZFQkU1RTZENkZCQzkxRjZFNjJBNUE2 NDJCNTI1QUNFMEU1RTkxRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKAEBzQAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQuOTANBgkqhkiG9w0BAQsFAAOCAQEAozId zOKqcnosEmNKhWgLGmJE4xVfZsKoLiAgPrsVqsQHu7LpUE0wRbnEeVVnrt9MMpRd suwjcLAwgR762KBf3HDm8k6IcjsITiemAAcPE0b0aoi9ChWMLOhnJ5DOtNU/KIN4 oinDZS+Jbcx6f742Fzm0PetGd0oIC8Jw3dc3TC/YpJY3vkvttsbL1S0+B03dQtdZ U7Y79qNH8O9O43pdh3uP31x++W8f+/FY8SX67DA42p5hdBdGP3fuGGsXVeeNGUbT W9pIF048SY6rGS9OyNRSSmRbSIr31bSBAWMA1G/nrmyp5Q2iN1Y8Mp+TW4IlEV3f D0HVeNa7GlODpIhS3Q== -----END CERTIFICATE-----Generated at Sat Apr 12 09:39:33 2025 by rpki-client