$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.cer File: 8F693D9DF0B598053B1AEE3A7985404251FA756D.cer (raw, json) Hash identifier: SJgDxLFiUG/yWpTfxY4i+A/MtPoQvsI2+shgPwcjAqk= Subject key identifier: 8F:69:3D:9D:F0:B5:98:05:3B:1A:EE:3A:79:85:40:42:51:FA:75:6D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0590B791EB87668787DE8E2DC142D3A09C45B5FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 21 Feb 2025 19:45:02 +0000 Certificate not after: Fri 20 Feb 2026 19:50:02 +0000 Subordinate resources: AS: 274052 IP: 2803:e2d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:90:b7:91:eb:87:66:87:87:de:8e:2d:c1:42:d3:a0:9c:45:b5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 21 19:45:02 2025 GMT Not After : Feb 20 19:50:02 2026 GMT Subject: CN=8F693D9DF0B598053B1AEE3A7985404251FA756D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:ee:98:43:c1:47:42:fa:4c:48:99:84:de: 2d:b7:f4:c7:96:3b:65:1b:e7:fe:e7:ab:1a:52:e5: bf:e3:30:e3:ce:20:68:34:11:50:2f:2a:49:f5:38: 81:7a:d5:9d:75:ce:d7:6c:86:e1:cc:ac:72:18:e8: 36:b8:7b:6a:9e:7c:88:44:b6:44:7e:69:29:0d:27: 63:c6:a0:cf:aa:2a:1b:f8:7a:6f:ee:bb:7b:28:f5: 30:cf:58:9a:38:2c:65:d9:44:0c:22:6d:e3:49:6a: a3:9f:67:90:5e:de:2e:97:f1:63:54:50:35:6b:d9: ca:31:2c:3d:47:97:a2:40:d8:4c:fc:69:9f:23:0d: 88:34:5e:71:1c:61:f8:86:86:a5:cb:ef:9f:f1:0f: bf:cf:8f:25:76:63:0b:0a:36:a9:29:ee:61:4f:8d: a8:9b:76:db:f8:15:94:55:80:d1:3a:41:ff:53:db: f1:89:49:3e:10:c3:bb:17:7e:a8:54:36:f9:39:e9: e1:42:d5:01:24:85:be:13:ed:cd:27:62:f5:b9:79: 7e:34:00:dd:02:bf:d8:bd:1f:41:84:06:c6:ee:d9: 4b:5f:7c:d4:5f:ea:d7:51:1d:fa:be:93:17:64:40: 72:55:8a:65:d1:48:4b:cf:d5:95:20:2e:01:bb:d4: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:69:3D:9D:F0:B5:98:05:3B:1A:EE:3A:79:85:40:42:51:FA:75:6D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5129C365AB47E8FB91AFD952995752AF98A7033CD2733F10D4E0613E0564DA90/0/8F693D9DF0B598053B1AEE3A7985404251FA756D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e2d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274052 Signature Algorithm: sha256WithRSAEncryption 2e:53:34:26:06:14:56:a3:8e:f7:0d:34:65:33:b0:72:a3:7d: 9b:a3:c0:3d:bf:b8:34:a8:40:d5:3e:01:3d:36:f1:2c:af:67: 76:5c:e8:47:e3:a7:31:cf:92:4a:8d:14:e0:17:7a:c1:ef:e5: 52:a0:8c:b4:e5:ee:a8:34:8f:c8:77:08:b7:2e:07:35:db:09: 1f:e5:77:05:02:66:aa:10:11:94:b8:f7:82:62:c3:39:1c:49: ab:2c:2e:4e:26:d8:f0:97:b8:78:c6:b3:9f:5f:68:e1:b9:61: a5:9f:09:8b:40:1d:f8:89:fd:ea:1f:b6:ac:6c:f4:aa:f4:75: d5:2a:6e:3d:88:bf:6a:4a:54:2d:e4:e5:53:87:1a:2d:bf:08: 1f:d6:f3:1d:f5:0c:c2:d8:c6:48:88:db:ec:70:3a:f9:7a:cc: e6:7d:ea:83:a5:8a:be:84:b3:74:6f:b4:66:fc:c0:08:db:e2: 32:9a:ce:d8:ea:c7:4a:bc:a1:13:7c:a3:b7:ab:8f:b0:34:2b: 8f:4d:12:da:e8:f3:bb:bc:58:b7:d0:f0:f3:07:8d:af:fa:67: f4:7a:bb:47:44:21:c6:3c:d8:6c:98:da:b8:01:6e:52:d9:1a: 93:09:f8:1b:1f:81:b6:2c:c7:88:d8:b2:1e:5c:43:3a:57:80: 99:92:ea:7b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUBZC3keuHZoeH3o4twULToJxFtfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMjExOTQ1MDJaFw0yNjAyMjAxOTUwMDJaMDMxMTAvBgNV BAMTKDhGNjkzRDlERjBCNTk4MDUzQjFBRUUzQTc5ODU0MDQyNTFGQTc1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgO6YQ8FHQvpMSJmE3i239MeW O2Ub5/7nqxpS5b/jMOPOIGg0EVAvKkn1OIF61Z11ztdshuHMrHIY6Da4e2qefIhE tkR+aSkNJ2PGoM+qKhv4em/uu3so9TDPWJo4LGXZRAwibeNJaqOfZ5Be3i6X8WNU UDVr2coxLD1Hl6JA2Ez8aZ8jDYg0XnEcYfiGhqXL75/xD7/PjyV2YwsKNqkp7mFP jaibdtv4FZRVgNE6Qf9T2/GJST4Qw7sXfqhUNvk56eFC1QEkhb4T7c0nYvW5eX40 AN0Cv9i9H0GEBsbu2UtffNRf6tdRHfq+kxdkQHJVimXRSEvP1ZUgLgG71AI9AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPaT2d8LWYBTsa 7jp5hUBCUfp1bTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTEyOUMzNjVBQjQ3RThGQjkxQUZEOTUy OTk1NzUyQUY5OEE3MDMzQ0QyNzMzRjEwRDRFMDYxM0UwNTY0REE5MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MTI5QzM2NUFCNDdFOEZCOTFBRkQ5NTI5OTU3NTJBRjk4QTcwMzNDRDI3 MzNGMTBENEUwNjEzRTA1NjREQTkwLzAvOEY2OTNEOURGMEI1OTgwNTNCMUFFRTNB Nzk4NTQwNDI1MUZBNzU2RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPi0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELoQwDQYJKoZIhvcNAQELBQADggEBAC5TNCYG FFajjvcNNGUzsHKjfZujwD2/uDSoQNU+AT028SyvZ3Zc6EfjpzHPkkqNFOAXesHv 5VKgjLTl7qg0j8h3CLcuBzXbCR/ldwUCZqoQEZS494JiwzkcSassLk4m2PCXuHjG s59faOG5YaWfCYtAHfiJ/eoftqxs9Kr0ddUqbj2Iv2pKVC3k5VOHGi2/CB/W8x31 DMLYxkiI2+xwOvl6zOZ96oOlir6Es3RvtGb8wAjb4jKaztjqx0q8oRN8o7erj7A0 K49NEtro87u8WLfQ8PMHja/6Z/R6u0dEIcY82GyY2rgBblLZGpMJ+BsfgbYsx4jY sh5cQzpXgJmS6ns= -----END CERTIFICATE-----Generated at Sat Apr 12 09:49:36 2025 by rpki-client