$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer File: 8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer (raw, json) Hash identifier: U5GwvP2IKu5DfR4WvC0De4Eemdrq8IawanhwHEYIMqs= Subject key identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 43C276AC6072F78C150706A2A9DD40825736BA2E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:40:55 +0000 Certificate not after: Wed 04 Feb 2026 02:45:55 +0000 Subordinate resources: AS: 273138 IP: 2803:f450::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c2:76:ac:60:72:f7:8c:15:07:06:a2:a9:dd:40:82:57:36:ba:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:40:55 2025 GMT Not After : Feb 4 02:45:55 2026 GMT Subject: CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:48:57:f6:46:f9:3b:d6:a7:15:df:8a:5c: f3:8e:bb:45:19:ae:99:18:9d:b9:94:c1:e4:cb:ea: ad:b9:f7:70:30:4b:a6:07:3b:ff:24:ef:6b:47:57: ba:29:b1:8c:3c:40:84:eb:5c:2c:85:8d:2b:b9:8a: c2:67:b8:05:65:24:e7:1e:70:5a:78:2f:20:af:18: 20:5e:ea:63:e8:ef:c8:9b:00:96:f3:70:7a:40:2b: 75:da:1b:d8:fd:60:31:20:32:e6:81:23:a3:33:1a: 48:31:df:cc:61:88:b4:54:3c:70:bf:16:a0:14:83: 34:30:fc:9f:71:6e:77:da:cb:ab:5d:b0:8f:99:6c: 17:6f:3b:b9:a9:e1:dc:3b:be:3b:e9:25:41:a6:39: 7b:5e:84:0b:c1:56:ff:b9:72:6c:dc:6c:00:4f:0c: 8a:2f:63:69:ba:4a:8c:56:c7:6c:88:7b:2b:9a:14: 5f:0b:9d:c5:4f:69:22:b2:60:b4:b4:25:d1:5b:60: e8:77:8d:02:c2:85:59:87:01:74:d6:13:03:d0:45: 01:3f:35:c4:25:51:83:8f:a7:5d:a7:ae:86:b3:52: 77:d2:7e:b9:be:d7:47:ba:33:41:06:4d:a8:fb:01: b9:57:73:b2:a5:f8:27:f0:37:7f:5f:53:f8:0a:3e: 7e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273138 Signature Algorithm: sha256WithRSAEncryption e2:8f:50:91:50:f7:ea:5b:1b:75:34:6d:3d:73:1b:6e:29:72: b6:84:27:b0:01:0c:d3:e1:9b:11:5e:94:b0:2f:f2:bf:2b:22: a1:00:38:60:86:5f:95:75:49:40:8a:ba:73:cd:30:a0:2b:5c: 34:b2:f0:5c:44:0f:af:bb:5c:8f:99:11:15:a3:ec:b3:bb:4d: d5:dd:fe:57:4e:ed:51:f7:c9:8f:00:c6:5f:ce:41:17:6b:af: e6:d5:94:59:92:e8:8d:09:87:e1:37:46:40:a5:a7:6f:ea:1e: 1a:4d:0c:ef:6b:df:8b:84:9a:ce:4c:22:40:d2:d3:90:ae:2a: 0a:c1:eb:ed:0b:33:2e:9a:77:be:33:0b:f7:33:e3:aa:e0:2c: c7:64:5e:03:44:5d:4e:1b:9e:c5:c0:d6:00:48:17:96:34:fb: 02:c4:df:2b:43:e9:92:1a:3a:70:f0:40:67:0a:59:b5:d1:a9: 7e:38:0d:63:f1:54:3d:a0:f8:0e:9e:0d:fa:8c:b9:55:08:84: 68:2d:55:fe:67:69:c2:cb:70:80:eb:7b:b2:54:94:db:85:2d: 8a:b1:c2:69:fe:7e:a4:0d:36:0f:46:13:9f:06:10:90:a3:d1: b4:98:25:4e:c7:c6:0c:0d:2d:76:2d:41:63:d8:d0:47:8f:6d: 15:7e:dc:e8 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQ8J2rGBy94wVBwaiqd1Aglc2ui4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjQwNTVaFw0yNjAyMDQwMjQ1NTVaMDMxMTAvBgNV BAMTKDhBMDdGQzJFNzExRUU5MTAyQzMwNzVCOUQ4OTRGQTZGRUEyRkFFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnHEhX9kb5O9anFd+KXPOOu0UZ rpkYnbmUweTL6q2593AwS6YHO/8k72tHV7opsYw8QITrXCyFjSu5isJnuAVlJOce cFp4LyCvGCBe6mPo78ibAJbzcHpAK3XaG9j9YDEgMuaBI6MzGkgx38xhiLRUPHC/ FqAUgzQw/J9xbnfay6tdsI+ZbBdvO7mp4dw7vjvpJUGmOXtehAvBVv+5cmzcbABP DIovY2m6SoxWx2yIeyuaFF8LncVPaSKyYLS0JdFbYOh3jQLChVmHAXTWEwPQRQE/ NcQlUYOPp12nroazUnfSfrm+10e6M0EGTaj7AblXc7Kl+CfwN39fU/gKPn6tAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKB/wucR7pECww dbnYlPpv6i+uQTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODAzRkFDOTBFMDJEMjJGRkZBMDMzODQ1 MTlEQTVEOEYyNDNBMTNBMkRCQzM5Njk3NjE2RDExMTU3RjFCOEQxMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84MDNGQUM5MEUwMkQyMkZGRkEwMzM4NDUxOURBNUQ4RjI0M0ExM0EyREJD Mzk2OTc2MTZEMTExNTdGMUI4RDExLzAvOEEwN0ZDMkU3MTFFRTkxMDJDMzA3NUI5 RDg5NEZBNkZFQTJGQUU0MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP0UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKvIwDQYJKoZIhvcNAQELBQADggEBAOKPUJFQ 9+pbG3U0bT1zG24pcraEJ7ABDNPhmxFelLAv8r8rIqEAOGCGX5V1SUCKunPNMKAr XDSy8FxED6+7XI+ZERWj7LO7TdXd/ldO7VH3yY8Axl/OQRdrr+bVlFmS6I0Jh+E3 RkClp2/qHhpNDO9r34uEms5MIkDS05CuKgrB6+0LMy6ad74zC/cz46rgLMdkXgNE XU4bnsXA1gBIF5Y0+wLE3ytD6ZIaOnDwQGcKWbXRqX44DWPxVD2g+A6eDfqMuVUI hGgtVf5nacLLcIDre7JUlNuFLYqxwmn+fqQNNg9GE58GEJCj0bSYJU7HxgwNLXYt QWPY0EePbRV+3Og= -----END CERTIFICATE-----Generated at Mon Apr 7 01:50:38 2025 by rpki-client