$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer File: 8E9E896ADF8041E07AB6735225935260B837E74D.cer (raw, json) Hash identifier: AErbmo/QLhQT4h3zi+fezBB0UCBJl4FD+I67Euoahwc= Subject key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3EE9B0C44CFB5F57B5C968C3D543238E47A7CC7B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 18:47:22 +0000 Certificate not after: Wed 04 Feb 2026 18:52:22 +0000 Subordinate resources: AS: 28032 IP: 179.1.144.0/20 IP: 190.108.80.0/20 IP: 191.97.48.0/20 IP: 2800:650::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e9:b0:c4:4c:fb:5f:57:b5:c9:68:c3:d5:43:23:8e:47:a7:cc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 18:47:22 2025 GMT Not After : Feb 4 18:52:22 2026 GMT Subject: CN=8E9E896ADF8041E07AB6735225935260B837E74D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:b6:78:bc:0c:53:59:d3:48:33:7e:58:fb: 58:0e:01:fd:46:f5:a5:bc:92:7d:70:51:31:42:ca: ae:3c:4a:f4:79:0c:9b:7f:35:bc:0b:64:57:c0:6c: 4f:3c:cc:13:ec:ec:cc:05:53:d4:dc:53:43:3b:0c: 51:ac:d1:df:76:8b:e1:36:b0:42:40:0f:15:a4:ba: 20:41:e5:de:6e:c7:5c:31:12:bd:5e:88:cf:aa:77: 61:59:aa:39:c8:9a:4f:e7:6c:f6:b7:fd:87:8b:04: 62:67:76:3d:26:c2:02:9e:1a:0d:30:c1:0c:70:7d: 8b:f6:47:20:87:27:d3:fe:01:6b:ee:5d:60:aa:71: b3:3f:38:b5:c9:e8:ca:e1:49:8e:e1:0c:70:26:cb: 6a:52:75:9d:48:9e:e6:af:ad:94:d9:da:b0:2f:53: 01:63:aa:4b:f7:f5:c2:b1:e7:a3:03:32:59:1d:8a: 17:b5:55:56:94:8d:c9:ce:90:d2:f2:29:f4:1a:53: 8e:64:f5:67:d5:3a:4b:81:79:4e:2d:26:70:d9:89: 34:72:94:71:99:6b:d1:06:be:1f:0d:a9:ad:d4:f7: 7c:84:0f:57:da:fc:15:c9:c4:eb:e6:58:71:0e:6e: 0f:98:04:85:c5:43:69:ce:63:a0:63:0e:9d:32:29: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.1.144.0/20 190.108.80.0/20 191.97.48.0/20 IPv6: 2800:650::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28032 Signature Algorithm: sha256WithRSAEncryption a2:9b:58:f1:93:8b:4f:d4:a4:62:e7:b8:b8:4e:c2:b9:b8:90: 2e:b4:8e:88:8e:b0:08:99:b6:88:7b:6c:82:85:f1:fc:d4:6f: 12:fc:fd:8c:54:36:9d:e5:28:77:c8:82:32:2c:4a:c6:f7:b1: 31:a6:e3:d9:7d:60:f9:7c:67:6c:03:3d:9b:51:96:70:fd:47: 6d:ae:82:a0:46:96:5f:62:b7:84:94:e1:93:36:a9:9e:41:a0: 4b:e2:af:e7:56:11:2f:f2:d7:61:12:96:24:21:80:b3:dc:f0: e6:ce:9d:61:ae:d6:14:a1:81:f5:4e:da:fc:e5:53:5c:40:06: d8:f8:02:2b:ed:be:4e:ad:d1:8d:6e:bd:4d:10:bb:b1:d4:8e: e7:de:53:6e:0f:df:3c:a5:22:bb:d2:9f:e7:d2:9a:4e:02:1c: 97:98:07:3c:cd:8d:86:d5:15:a4:1d:a3:c1:29:56:2a:b4:2f: 52:b9:09:14:c8:8a:bf:76:32:92:02:72:29:0a:ba:83:16:1b: 73:a0:55:3b:1e:c9:dc:96:f2:5b:c1:11:7b:af:9a:08:39:a9: 3a:7c:eb:7f:3c:0d:13:b6:5a:0b:12:07:5c:28:fd:96:0d:c1: b7:18:24:d8:c9:df:6f:26:b6:9f:41:b1:f9:27:44:78:b9:5e: 4b:b2:e2:8b -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUPumwxEz7X1e1yWjD1UMjjkenzHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxODQ3MjJaFw0yNjAyMDQxODUyMjJaMDMxMTAvBgNV BAMTKDhFOUU4OTZBREY4MDQxRTA3QUI2NzM1MjI1OTM1MjYwQjgzN0U3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGbZ4vAxTWdNIM35Y+1gOAf1G 9aW8kn1wUTFCyq48SvR5DJt/NbwLZFfAbE88zBPs7MwFU9TcU0M7DFGs0d92i+E2 sEJADxWkuiBB5d5ux1wxEr1eiM+qd2FZqjnImk/nbPa3/YeLBGJndj0mwgKeGg0w wQxwfYv2RyCHJ9P+AWvuXWCqcbM/OLXJ6MrhSY7hDHAmy2pSdZ1InuavrZTZ2rAv UwFjqkv39cKx56MDMlkdihe1VVaUjcnOkNLyKfQaU45k9WfVOkuBeU4tJnDZiTRy lHGZa9EGvh8Nqa3U93yED1fa/BXJxOvmWHEObg+YBIXFQ2nOY6BjDp0yKcHtAgMB AAGjggO6MIIDtjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOnolq34BB4Hq2 c1Ilk1JguDfnTTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkFBM0VFMEFFMDYyNTkzQURCQTVDRUFC NkVBNDE0RTk0MkVFMkQ5QkEyMzQ2QkQwMkIxREQxQUZFOTQxNTM0MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQUEzRUUwQUUwNjI1OTNBREJBNUNFQUI2RUE0MTRFOTQyRUUyRDlCQTIz NDZCRDAyQjFERDFBRkU5NDE1MzQwLzAvOEU5RTg5NkFERjgwNDFFMDdBQjY3MzUy MjU5MzUyNjBCODM3RTc0RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEswGQAwQEvmxQ AwQEv2EwMA0EAgACMAcDBQAoAAZQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm2A MA0GCSqGSIb3DQEBCwUAA4IBAQCim1jxk4tP1KRi57i4TsK5uJAutI6IjrAImbaI e2yChfH81G8S/P2MVDad5Sh3yIIyLErG97ExpuPZfWD5fGdsAz2bUZZw/UdtroKg RpZfYreElOGTNqmeQaBL4q/nVhEv8tdhEpYkIYCz3PDmzp1hrtYUoYH1Ttr85VNc QAbY+AIr7b5OrdGNbr1NELux1I7n3lNuD988pSK70p/n0ppOAhyXmAc8zY2G1RWk HaPBKVYqtC9SuQkUyIq/djKSAnIpCrqDFhtzoFU7HsnclvJbwRF7r5oIOak6fOt/ PA0TtloLEgdcKP2WDcG3GCTYyd9vJrafQbH5J0R4uV5LsuKL -----END CERTIFICATE-----Generated at Mon Apr 14 18:50:18 2025 by rpki-client