$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer File: 8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer (raw, json) Hash identifier: QhfRx+d+7FpWPD7FSZ1bCXdSYOiaE25b1tpWHVf0RoE= Subject key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 30F090B5F30F28A063F97CB581BC87C846157BAE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 21:44:52 +0000 Certificate not after: Tue 03 Feb 2026 21:49:52 +0000 Subordinate resources: AS: 28067 IP: 64.28.128.0/20 IP: 2801:0:40::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f0:90:b5:f3:0f:28:a0:63:f9:7c:b5:81:bc:87:c8:46:15:7b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 21:44:52 2025 GMT Not After : Feb 3 21:49:52 2026 GMT Subject: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:19:7c:a1:ca:a0:49:0c:58:21:16:22:96: cf:0a:48:73:74:88:b6:55:7e:e3:42:cd:1a:b3:f9: 2c:db:c7:87:68:9d:ca:7a:de:23:e0:e6:6d:71:ce: 2a:a7:39:9f:f2:db:43:85:29:03:22:94:1f:84:d7: 36:09:5a:ae:79:f7:65:75:5e:57:94:f7:c4:00:39: 2b:0f:1f:51:c6:e1:51:56:f6:a3:8e:f2:3d:94:24: ea:83:84:8f:af:50:54:fe:ec:7f:98:f7:6c:17:fe: af:3e:bb:33:a4:e2:30:55:7d:af:fe:cc:79:2e:7a: 73:f7:c0:35:22:78:ed:68:63:66:38:da:1e:86:55: d2:e8:17:0f:64:c8:98:cf:87:84:b3:94:f4:75:61: 84:a2:26:d0:7b:19:d7:cd:2d:1f:c9:cd:62:46:7b: e4:3a:ab:8c:6c:a4:21:f2:69:0e:07:54:b5:a5:47: e3:2a:05:20:b6:8f:9e:3a:ea:a3:0c:15:1e:f7:0a: 37:56:d8:a6:9d:7b:8b:4e:34:71:2b:74:85:23:7d: 0d:fd:1c:d6:f4:48:dd:d2:9e:7d:02:fe:1c:29:3c: a3:41:e8:a2:ed:a6:ed:ae:c7:55:2c:b8:8c:8b:76: ba:5d:9a:61:af:67:1b:dd:dd:3b:90:3c:22:51:2a: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.28.128.0/20 IPv6: 2801:0:40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28067 Signature Algorithm: sha256WithRSAEncryption ba:c3:29:50:15:a6:23:a4:b7:b6:1b:d9:65:60:47:3e:87:35: c3:ad:8d:fc:0d:b4:07:20:f2:1b:7f:49:8a:3d:21:ee:93:eb: 8a:c6:eb:a8:4e:f6:e7:e4:f4:0f:78:50:ae:b7:03:82:66:e5: 15:34:bf:e7:1a:47:73:30:c6:de:1c:6e:83:35:46:45:19:1d: 99:ff:c0:5b:34:75:cf:6e:7b:f7:71:14:f3:c1:6e:c1:65:8f: 1a:17:99:33:0e:dd:b0:5f:6f:13:38:fa:54:b3:dc:0e:7a:e7: b6:10:7b:d5:16:d8:5f:d5:2f:56:81:6f:23:c3:d2:ea:a3:0d: aa:73:13:b8:90:25:d8:29:12:f9:01:b4:58:41:16:e5:ab:05: b3:b6:00:ec:84:7a:ed:ad:4d:8c:88:fc:e3:ab:8c:ca:e1:62: 84:e1:7d:80:f9:aa:05:85:63:c0:b4:2f:53:96:90:4c:a1:17: 85:b5:aa:92:ca:32:85:45:6d:de:00:bf:84:56:6f:e1:e3:5e: a4:38:bb:42:42:0f:c2:5e:2b:17:3a:56:22:f1:14:9a:47:7a: 06:7e:cb:60:60:2a:0b:92:2a:43:1c:22:7b:87:db:92:a5:e9: c3:8e:85:19:a5:be:f3:4e:b0:f6:8c:f5:77:29:30:08:2c:15: 81:40:19:fb -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUMPCQtfMPKKBj+Xy1gbyHyEYVe64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMTQ0NTJaFw0yNjAyMDMyMTQ5NTJaMDMxMTAvBgNV BAMTKDhGQ0IzREFFRDhGQjNBODJGNkJERTk1RkJDNUFDM0I3OUNDRUZEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsRl8ocqgSQxYIRYils8KSHN0 iLZVfuNCzRqz+Szbx4doncp63iPg5m1xziqnOZ/y20OFKQMilB+E1zYJWq5592V1 XleU98QAOSsPH1HG4VFW9qOO8j2UJOqDhI+vUFT+7H+Y92wX/q8+uzOk4jBVfa/+ zHkuenP3wDUieO1oY2Y42h6GVdLoFw9kyJjPh4SzlPR1YYSiJtB7GdfNLR/JzWJG e+Q6q4xspCHyaQ4HVLWlR+MqBSC2j5466qMMFR73CjdW2Kade4tONHErdIUjfQ39 HNb0SN3Snn0C/hwpPKNB6KLtpu2ux1UsuIyLdrpdmmGvZxvd3TuQPCJRKi8VAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPyz2u2Ps6gva9 6V+8WsO3nM79MDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTk5MTQ5Q0E0M0VDNjRBMDQ3M0QyQkMx Q0YxM0Y4RTE3RjNCMUUxOUNCNDJFMjQ2ODkxQjBERjBFRENDNTg2Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xOTkxNDlDQTQzRUM2NEEwNDczRDJCQzFDRjEzRjhFMTdGM0IxRTE5Q0I0 MkUyNDY4OTFCMERGMEVEQ0M1ODYyLzAvOEZDQjNEQUVEOEZCM0E4MkY2QkRFOTVG QkM1QUMzQjc5Q0NFRkQzMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEQByAMA8EAgAC MAkDBwAoAQAAAEAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbaMwDQYJKoZIhvcN AQELBQADggEBALrDKVAVpiOkt7Yb2WVgRz6HNcOtjfwNtAcg8ht/SYo9Ie6T64rG 66hO9ufk9A94UK63A4Jm5RU0v+caR3Mwxt4cboM1RkUZHZn/wFs0dc9ue/dxFPPB bsFljxoXmTMO3bBfbxM4+lSz3A5657YQe9UW2F/VL1aBbyPD0uqjDapzE7iQJdgp EvkBtFhBFuWrBbO2AOyEeu2tTYyI/OOrjMrhYoThfYD5qgWFY8C0L1OWkEyhF4W1 qpLKMoVFbd4Av4RWb+HjXqQ4u0JCD8JeKxc6ViLxFJpHegZ+y2BgKguSKkMcInuH 25Kl6cOOhRmlvvNOsPaM9XcpMAgsFYFAGfs= -----END CERTIFICATE-----Generated at Sun Apr 6 03:04:08 2025 by rpki-client