$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FD8E007DB4C18FB231BA4185779093AAEAC944A.cer File: 8FD8E007DB4C18FB231BA4185779093AAEAC944A.cer (raw, json) Hash identifier: 3+HdK3KET6wEJyCSZQpJegVV7ZHIcSgquznkW7E//hk= Subject key identifier: 8F:D8:E0:07:DB:4C:18:FB:23:1B:A4:18:57:79:09:3A:AE:AC:94:4A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 30E6EA5B31451D4EDC9EA8B3C304874303012F78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8DA72D2CAE708B75EB7D46DB0AE9C0C16359F4DC5DC01AAB6EBB93A5B88F2460/0/8FD8E007DB4C18FB231BA4185779093AAEAC944A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8DA72D2CAE708B75EB7D46DB0AE9C0C16359F4DC5DC01AAB6EBB93A5B88F2460/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 22:53:35 +0000 Certificate not after: Tue 03 Feb 2026 22:58:35 +0000 Subordinate resources: AS: 64110 IP: 45.229.48.0/22 IP: 2803:6520::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e6:ea:5b:31:45:1d:4e:dc:9e:a8:b3:c3:04:87:43:03:01:2f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 22:53:35 2025 GMT Not After : Feb 3 22:58:35 2026 GMT Subject: CN=8FD8E007DB4C18FB231BA4185779093AAEAC944A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:23:20:bc:12:a5:0f:23:16:d4:d6:91:32: 7e:2f:12:24:f1:36:c8:80:0e:16:3b:13:45:40:91: 04:9f:0b:26:a5:ea:55:35:15:4c:cd:ed:27:b2:52: cc:70:b8:13:6c:79:73:48:95:14:d1:16:b5:e3:9d: cc:07:a1:43:43:ed:8b:1d:0f:22:86:5d:89:b5:71: 3b:a7:73:37:e8:16:e6:ef:91:a2:ed:f3:ba:d2:86: 72:77:d7:79:1e:a0:01:3f:a5:78:2a:f4:ee:6c:28: df:ab:1f:d7:79:2d:e1:46:b0:bd:2c:16:11:4f:75: 68:1d:32:60:e4:46:57:5a:38:86:d6:75:cc:94:f0: c8:a6:c1:7a:75:ae:97:d6:33:bc:fc:a9:05:68:c6: be:38:2f:d3:3a:79:b8:04:1c:23:56:f0:e5:62:ef: 20:29:eb:d1:e8:15:5b:a6:92:eb:f9:0d:ca:74:3d: b9:d6:bd:c1:eb:3e:59:4d:58:07:f0:5a:0f:e0:9c: 47:3a:8b:de:d3:04:67:a0:44:99:b9:ee:b7:ca:36: e7:e4:38:ad:16:b7:20:be:39:96:ec:86:f5:77:04: e9:67:5d:55:f4:61:19:b6:4d:1c:cc:b2:7a:99:e2: 3f:42:30:6f:db:9f:bd:21:3d:33:c2:43:1b:fa:d4: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:D8:E0:07:DB:4C:18:FB:23:1B:A4:18:57:79:09:3A:AE:AC:94:4A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA72D2CAE708B75EB7D46DB0AE9C0C16359F4DC5DC01AAB6EBB93A5B88F2460/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA72D2CAE708B75EB7D46DB0AE9C0C16359F4DC5DC01AAB6EBB93A5B88F2460/0/8FD8E007DB4C18FB231BA4185779093AAEAC944A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.48.0/22 IPv6: 2803:6520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64110 Signature Algorithm: sha256WithRSAEncryption 80:04:1d:75:a1:54:1b:ee:39:08:25:fd:84:bf:a2:cc:55:8e: 2a:51:1a:f5:ba:be:13:0e:e6:4d:26:2e:91:8e:14:9b:46:da: 04:86:3e:57:1b:ec:c6:19:d7:59:72:99:94:84:2f:a7:c1:6f: 45:3d:46:7f:b9:dc:b5:cc:56:b0:75:7a:27:0f:fe:ba:e1:4b: 45:17:69:1b:cd:8d:b6:bd:61:1e:71:52:f9:44:bf:dd:fa:37: 5d:77:dd:7e:a0:b0:57:cd:0c:53:7e:2c:43:fc:09:5b:2e:2d: 35:d2:94:b0:15:69:b8:be:9f:23:86:e9:9d:13:e3:40:59:40: fe:af:f9:31:f6:1a:a1:00:d6:0a:e3:53:32:1f:9c:ff:7b:f4: 1e:8d:8d:1d:cf:f6:8f:a4:35:d0:c6:bb:2b:4b:e0:92:62:bf: c0:21:b8:0e:1d:43:57:4e:96:b7:e2:54:8e:4f:6f:ff:fd:56: fd:bc:fe:0a:5c:37:89:9a:4b:c7:17:d1:00:c4:73:3b:94:63: ee:04:10:bc:8b:0e:3c:8f:fc:ba:fd:95:fe:b5:b0:a9:b4:d0: fd:08:48:ce:f4:2d:2a:7f:4a:12:50:1c:bb:9f:cb:3b:69:f6: 08:5d:44:af:6a:5f:e8:c1:65:09:49:10:9f:26:4f:f1:c4:ea: b7:12:9c:df -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUMObqWzFFHU7cnqizwwSHQwMBL3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMjUzMzVaFw0yNjAyMDMyMjU4MzVaMDMxMTAvBgNV BAMTKDhGRDhFMDA3REI0QzE4RkIyMzFCQTQxODU3NzkwOTNBQUVBQzk0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODiMgvBKlDyMW1NaRMn4vEiTx NsiADhY7E0VAkQSfCyal6lU1FUzN7SeyUsxwuBNseXNIlRTRFrXjncwHoUND7Ysd DyKGXYm1cTunczfoFubvkaLt87rShnJ313keoAE/pXgq9O5sKN+rH9d5LeFGsL0s FhFPdWgdMmDkRldaOIbWdcyU8MimwXp1rpfWM7z8qQVoxr44L9M6ebgEHCNW8OVi 7yAp69HoFVumkuv5Dcp0PbnWvcHrPllNWAfwWg/gnEc6i97TBGegRJm57rfKNufk OK0WtyC+OZbshvV3BOlnXVX0YRm2TRzMsnqZ4j9CMG/bn70hPTPCQxv61CFbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSP2OAH20wY+yMb pBhXeQk6rqyUSjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOERBNzJEMkNBRTcwOEI3NUVCN0Q0NkRC MEFFOUMwQzE2MzU5RjREQzVEQzAxQUFCNkVCQjkzQTVCODhGMjQ2MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84REE3MkQyQ0FFNzA4Qjc1RUI3RDQ2REIwQUU5QzBDMTYzNTlGNERDNURD MDFBQUI2RUJCOTNBNUI4OEYyNDYwLzAvOEZEOEUwMDdEQjRDMThGQjIzMUJBNDE4 NTc3OTA5M0FBRUFDOTQ0QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeUwMA0EAgAC MAcDBQAoA2UgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD6bjANBgkqhkiG9w0B AQsFAAOCAQEAgAQddaFUG+45CCX9hL+izFWOKlEa9bq+Ew7mTSYukY4Um0baBIY+ VxvsxhnXWXKZlIQvp8FvRT1Gf7nctcxWsHV6Jw/+uuFLRRdpG82Ntr1hHnFS+US/ 3fo3XXfdfqCwV80MU34sQ/wJWy4tNdKUsBVpuL6fI4bpnRPjQFlA/q/5MfYaoQDW CuNTMh+c/3v0Ho2NHc/2j6Q10Ma7K0vgkmK/wCG4Dh1DV06Wt+JUjk9v//1W/bz+ Clw3iZpLxxfRAMRzO5Rj7gQQvIsOPI/8uv2V/rWwqbTQ/QhIzvQtKn9KElAcu5/L O2n2CF1Er2pf6MFlCUkQnyZP8cTqtxKc3w== -----END CERTIFICATE-----Generated at Sun Apr 6 11:28:53 2025 by rpki-client