$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.cer File: 89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.cer (raw, json) Hash identifier: TT5RN/k9JS1bFMgDb9SMsRiovSq0plXn/8kDAVhzMJ0= Subject key identifier: 89:75:4D:0A:1B:67:95:6C:5F:EB:D6:A8:2B:8D:E5:8D:93:D6:D4:AC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 65D1F3FB85DE54DB3A52E09ADD78A0495F443FAA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:58:09 +0000 Certificate not after: Wed 04 Feb 2026 05:03:09 +0000 Subordinate resources: IP: 200.0.185.0/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d1:f3:fb:85:de:54:db:3a:52:e0:9a:dd:78:a0:49:5f:44:3f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:58:09 2025 GMT Not After : Feb 4 05:03:09 2026 GMT Subject: CN=89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:c7:31:20:22:7e:c5:37:aa:d9:26:bb:36: ab:0e:0c:72:62:11:99:9c:46:20:52:23:93:8b:76: ab:ef:5c:0d:23:44:85:d0:e4:97:1f:30:9b:40:20: fd:d1:01:41:ba:36:ba:27:10:5a:36:84:20:d3:17: 32:79:92:81:ee:3e:34:e6:64:e3:8b:73:f5:10:7c: 40:2a:49:92:c6:e2:ee:aa:d8:40:7d:68:de:20:ea: 9c:b8:85:f1:ef:f9:3f:6f:c6:e7:36:e4:ac:57:23: ef:de:6a:e9:68:89:20:90:c1:32:40:3e:7f:62:9e: 9a:70:97:af:0d:56:76:4f:01:fb:61:98:19:50:e7: 8f:34:1d:9b:69:e8:54:8d:13:74:77:82:e0:a9:6d: 65:42:4f:ed:a1:a9:03:97:6b:6d:fe:ad:0f:7d:14: 97:1b:2b:c0:e1:a6:ef:42:69:26:6b:c3:46:8d:4e: e6:95:5e:61:c1:c7:ae:94:be:73:54:d8:11:05:d0: 4f:0d:8a:08:db:b3:60:55:d5:cd:1c:d7:9c:37:24: 47:92:02:62:ab:ca:fd:b2:2f:f7:ee:1d:7b:a1:18: 75:c1:34:8b:b0:dc:96:e2:41:1f:07:18:a5:da:70: 45:fd:d6:65:34:b4:1c:6e:9d:8f:d6:b3:d7:e4:35: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:75:4D:0A:1B:67:95:6C:5F:EB:D6:A8:2B:8D:E5:8D:93:D6:D4:AC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.0.185.0/24 Signature Algorithm: sha256WithRSAEncryption bd:17:88:a2:0f:fc:88:88:b3:50:b4:3c:b0:e8:2c:a6:c5:ea: 22:80:e6:9a:6b:03:9f:bc:88:0d:04:a8:ff:83:cd:b2:db:0c: 51:cf:f2:02:11:57:a7:1b:b7:ea:62:5d:4d:eb:86:f1:7a:4a: f1:27:6a:24:d7:9a:5f:c0:a0:11:f0:d4:74:cb:b0:26:04:1b: ee:41:ee:16:fc:81:44:56:0c:c1:e2:b4:d4:d7:b0:b9:9f:29: 34:99:99:7a:2a:37:18:1a:80:10:7e:b1:51:ae:6a:01:02:f7: 65:a7:bd:de:7d:c8:c0:fd:07:6d:82:5b:c5:d7:e8:16:de:7e: e7:9c:95:29:4d:c8:bb:9c:f5:63:81:9a:8c:ff:9c:b0:69:c9: bf:a1:54:9a:11:c5:83:0c:83:a8:e3:d4:28:c2:ba:21:44:08: 9b:f0:54:60:df:f0:eb:ec:93:6f:8e:38:72:60:47:0c:c6:99: 0b:b6:76:9e:e9:03:b3:5a:b8:b3:91:cb:1d:b5:6d:55:21:aa: 20:d4:6e:84:77:bf:16:0c:bc:ca:3e:5c:2f:ae:93:05:8f:11: 36:ec:d6:ab:c2:e4:b8:8d:f3:72:d4:aa:ef:f0:7c:76:27:6b: 18:dd:dc:75:4a:81:39:f5:51:ac:a5:dd:ac:44:6d:b0:da:ee: af:54:a5:ea -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUZdHz+4XeVNs6UuCa3XigSV9EP6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDU4MDlaFw0yNjAyMDQwNTAzMDlaMDMxMTAvBgNV BAMTKDg5NzU0RDBBMUI2Nzk1NkM1RkVCRDZBODJCOERFNThEOTNENkQ0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGW8cxICJ+xTeq2Sa7NqsODHJi EZmcRiBSI5OLdqvvXA0jRIXQ5JcfMJtAIP3RAUG6NronEFo2hCDTFzJ5koHuPjTm ZOOLc/UQfEAqSZLG4u6q2EB9aN4g6py4hfHv+T9vxuc25KxXI+/eauloiSCQwTJA Pn9inppwl68NVnZPAfthmBlQ5480HZtp6FSNE3R3guCpbWVCT+2hqQOXa23+rQ99 FJcbK8Dhpu9CaSZrw0aNTuaVXmHBx66UvnNU2BEF0E8Nigjbs2BV1c0c15w3JEeS AmKryv2yL/fuHXuhGHXBNIuw3JbiQR8HGKXacEX91mU0tBxunY/Ws9fkNW+hAgMB AAGjggOEMIIDgDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJdU0KG2eVbF/r 1qgrjeWNk9bUrDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTRGRTAxQkFBQzExQzMwNjI3MkNBQ0Yx Q0RENEM2M0IyMDNDNjREOTQ4RDBFQkMxRTE4NURCQkFBNzhCRTEzNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNEZFMDFCQUFDMTFDMzA2MjcyQ0FDRjFDREQ0QzYzQjIwM0M2NEQ5NDhE MEVCQzFFMTg1REJCQUE3OEJFMTM0LzAvODk3NTREMEExQjY3OTU2QzVGRUJENkE4 MkI4REU1OEQ5M0Q2RDRBQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAC5MA0GCSqG SIb3DQEBCwUAA4IBAQC9F4iiD/yIiLNQtDyw6CymxeoigOaaawOfvIgNBKj/g82y 2wxRz/ICEVenG7fqYl1N64bxekrxJ2ok15pfwKAR8NR0y7AmBBvuQe4W/IFEVgzB 4rTU17C5nyk0mZl6KjcYGoAQfrFRrmoBAvdlp73efcjA/QdtglvF1+gW3n7nnJUp Tci7nPVjgZqM/5ywacm/oVSaEcWDDIOo49QowrohRAib8FRg3/Dr7JNvjjhyYEcM xpkLtnae6QOzWrizkcsdtW1VIaog1G6Ed78WDLzKPlwvrpMFjxE27NarwuS4jfNy 1Krv8Hx2J2sY3dx1SoE59VGspd2sRG2w2u6vVKXq -----END CERTIFICATE-----Generated at Sat Apr 5 23:12:22 2025 by rpki-client