$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BD305FCC77A090143A76A3F8772E9737316FF50.cer File: 8BD305FCC77A090143A76A3F8772E9737316FF50.cer (raw, json) Hash identifier: j1JpW6z5VcwCRe3q9UC7c8cr/VGNNyJ3r7NztuEn/IU= Subject key identifier: 8B:D3:05:FC:C7:7A:09:01:43:A7:6A:3F:87:72:E9:73:73:16:FF:50 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3D525CD0D92DB2DB108455C34A1CDEA4DD66F8B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/8BD305FCC77A090143A76A3F8772E9737316FF50.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Mar 2025 00:30:01 +0000 Certificate not after: Tue 03 Mar 2026 00:35:01 +0000 Subordinate resources: AS: 274013 IP: 2803:14d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:52:5c:d0:d9:2d:b2:db:10:84:55:c3:4a:1c:de:a4:dd:66:f8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 4 00:30:01 2025 GMT Not After : Mar 3 00:35:01 2026 GMT Subject: CN=8BD305FCC77A090143A76A3F8772E9737316FF50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:ba:03:65:ab:a3:49:c1:7c:9a:1a:ec:76: d9:95:e7:1f:a6:51:3c:87:55:2d:d2:8d:ad:66:e8: c0:5f:96:2c:83:73:7e:f4:68:12:e4:af:4f:15:91: b8:81:42:c5:6d:08:4e:19:df:4d:69:56:71:a6:d9: c7:b0:c0:e1:56:14:73:6f:03:79:8b:48:88:31:61: a4:f9:b4:63:08:c9:37:1e:8c:b2:16:4c:dd:3c:e2: f1:9e:59:aa:b5:5c:45:a5:3f:8e:30:a3:36:53:1d: 97:ab:15:52:ee:76:b1:7c:c8:d6:30:60:23:1a:1d: 81:7d:51:f6:0f:4e:28:6f:a2:a4:c6:51:60:44:c9: 16:39:ec:73:c2:46:aa:86:9b:79:ee:24:e3:e6:88: cc:55:92:69:c9:08:6a:32:e0:d5:99:1e:a9:bd:59: c8:48:68:89:76:06:04:72:9d:b8:84:71:ef:d2:c6: 52:0a:bf:df:b8:8c:c7:f1:05:b9:6c:75:4d:53:50: b6:4d:e0:04:49:a8:2e:ac:6c:81:37:ad:68:02:3c: df:99:ff:19:98:d0:b9:c4:76:6a:dd:c4:a6:15:f7: 65:4f:be:d8:35:ac:b7:5d:00:a4:8a:55:e8:61:93: 33:5d:fd:c3:39:4a:4d:6c:74:5a:87:f4:86:d8:ca: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:D3:05:FC:C7:7A:09:01:43:A7:6A:3F:87:72:E9:73:73:16:FF:50 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0BE0A090BEEC159151165DE58C122912C42F9EFC4F618CE6DFA9F895326F766E/0/8BD305FCC77A090143A76A3F8772E9737316FF50.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:14d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274013 Signature Algorithm: sha256WithRSAEncryption c3:7e:45:76:61:5d:7d:6b:4a:82:1d:c3:9f:fc:19:60:11:9f: 4c:36:f5:f9:7a:53:2a:3e:19:95:3b:5b:2e:62:4a:21:ac:b2: fb:36:c1:24:9d:34:4b:85:b8:d4:e8:07:d5:15:6b:68:f1:40: 08:5e:f8:9f:6a:6a:44:88:a2:fe:b0:ca:a7:70:54:4c:9c:2a: 58:e2:db:b9:2a:62:0d:28:c7:68:0d:85:9f:8d:bb:69:e0:b4: 42:a7:b7:15:f2:29:35:ed:1a:53:7c:da:1d:2f:9a:83:10:05: 74:b8:bd:ce:ed:c4:fd:79:e9:9e:a6:f0:32:da:6c:b9:14:43: e0:66:0f:8d:ae:90:1b:f6:06:cc:49:8f:d7:61:4b:a3:ce:7b: 12:ef:38:c8:ed:3b:fe:bc:d0:da:6b:be:ec:13:4d:07:87:43: 3f:64:60:ab:09:97:90:30:6b:1f:e3:d9:ef:b0:c5:dd:f9:a1: aa:cd:fd:21:12:11:3e:79:ad:58:e9:d6:52:2a:2e:ff:3f:84: cb:28:89:8b:b0:69:17:8b:50:e0:7d:fe:4b:71:e2:3d:6b:1f: 2b:4a:89:3c:da:73:6e:f6:54:68:65:ea:1c:92:66:09:4d:fe: fe:35:2b:02:64:6d:17:43:4e:5b:31:66:f0:ef:3f:ef:c1:15: 2a:f6:0f:35 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUPVJc0NktstsQhFXDShzepN1m+LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAzMDQwMDMwMDFaFw0yNjAzMDMwMDM1MDFaMDMxMTAvBgNV BAMTKDhCRDMwNUZDQzc3QTA5MDE0M0E3NkEzRjg3NzJFOTczNzMxNkZGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08roDZaujScF8mhrsdtmV5x+m UTyHVS3Sja1m6MBfliyDc370aBLkr08VkbiBQsVtCE4Z301pVnGm2cewwOFWFHNv A3mLSIgxYaT5tGMIyTcejLIWTN084vGeWaq1XEWlP44wozZTHZerFVLudrF8yNYw YCMaHYF9UfYPTihvoqTGUWBEyRY57HPCRqqGm3nuJOPmiMxVkmnJCGoy4NWZHqm9 WchIaIl2BgRynbiEce/SxlIKv9+4jMfxBblsdU1TULZN4ARJqC6sbIE3rWgCPN+Z /xmY0LnEdmrdxKYV92VPvtg1rLddAKSKVehhkzNd/cM5Sk1sdFqH9IbYyrZfAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSL0wX8x3oJAUOn aj+Hculzcxb/UDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEJFMEEwOTBCRUVDMTU5MTUxMTY1REU1 OEMxMjI5MTJDNDJGOUVGQzRGNjE4Q0U2REZBOUY4OTUzMjZGNzY2RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQkUwQTA5MEJFRUMxNTkxNTExNjVERTU4QzEyMjkxMkM0MkY5RUZDNEY2 MThDRTZERkE5Rjg5NTMyNkY3NjZFLzAvOEJEMzA1RkNDNzdBMDkwMTQzQTc2QTNG ODc3MkU5NzM3MzE2RkY1MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMU0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELl0wDQYJKoZIhvcNAQELBQADggEBAMN+RXZh XX1rSoIdw5/8GWARn0w29fl6Uyo+GZU7Wy5iSiGssvs2wSSdNEuFuNToB9UVa2jx QAhe+J9qakSIov6wyqdwVEycKlji27kqYg0ox2gNhZ+Nu2ngtEKntxXyKTXtGlN8 2h0vmoMQBXS4vc7txP156Z6m8DLabLkUQ+BmD42ukBv2BsxJj9dhS6POexLvOMjt O/680NprvuwTTQeHQz9kYKsJl5Awax/j2e+wxd35oarN/SESET55rVjp1lIqLv8/ hMsoiYuwaReLUOB9/ktx4j1rHytKiTzac272VGhl6hySZglN/v41KwJkbRdDTlsx ZvDvP+/BFSr2DzU= -----END CERTIFICATE-----Generated at Sat Apr 12 10:01:46 2025 by rpki-client