$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9832E74678E4CD60717C36E84BA71426178E7DF3.cer File: 9832E74678E4CD60717C36E84BA71426178E7DF3.cer (raw, json) Hash identifier: EeFc0IWHrTD+oPYryYQXg+kKS/3A44j4T3VJ2YtahNs= Subject key identifier: 98:32:E7:46:78:E4:CD:60:71:7C:36:E8:4B:A7:14:26:17:8E:7D:F3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6C36F3D42F8C93D729E10F1B275F06982D67CFE0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:02:53 +0000 Certificate not after: Wed 04 Feb 2026 20:07:53 +0000 Subordinate resources: AS: 272958 IP: 2803:3450::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:36:f3:d4:2f:8c:93:d7:29:e1:0f:1b:27:5f:06:98:2d:67:cf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:02:53 2025 GMT Not After : Feb 4 20:07:53 2026 GMT Subject: CN=9832E74678E4CD60717C36E84BA71426178E7DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1c:5c:b5:9e:f2:d8:19:5b:1a:db:7e:ae:8f: a3:d9:4c:28:b9:17:3d:f9:e3:1d:5b:4a:c5:78:c6: 3a:d6:08:58:2c:00:11:d3:8a:86:d7:68:3a:a3:a1: 33:60:01:fe:cc:e5:3d:b9:09:f8:34:80:ff:5f:14: 18:a3:71:88:06:ed:a0:e7:22:2d:f5:07:7d:76:d3: 45:62:33:ed:ac:7d:7c:9b:9b:46:1d:44:be:e4:88: f7:63:bf:a7:e7:65:ae:ad:3c:87:0c:9a:45:f0:69: 38:12:e7:4f:6a:28:43:32:1b:0c:94:25:60:29:00: b2:7c:50:1e:e7:de:33:15:89:5c:73:ca:7a:3f:4a: f5:28:d6:ab:a2:18:cf:45:fa:c9:a9:8f:38:0d:8f: 98:f0:45:c3:62:a5:c5:49:41:d6:00:bb:9f:2e:ae: 1a:c2:43:5e:a6:b2:4a:fa:a0:a8:ad:96:7c:b0:1e: ed:2a:c6:27:c3:5e:85:86:4d:8c:eb:75:d9:de:d1: f6:d0:1e:6f:d1:28:27:73:7e:b9:e3:23:6e:20:3b: a6:52:3a:ee:b1:fb:c6:73:ea:82:ff:6d:51:86:4a: b9:9a:55:f8:e9:e8:a5:db:b6:d3:7c:b5:bf:51:c9: 40:33:61:3d:1a:17:27:9c:ab:6c:86:55:c7:e9:90: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:32:E7:46:78:E4:CD:60:71:7C:36:E8:4B:A7:14:26:17:8E:7D:F3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C6A66BBBCE4CB45B99B2B12AD3F1E351C3D0ED4F7515BDA09A290DE1DD848A2/0/9832E74678E4CD60717C36E84BA71426178E7DF3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272958 Signature Algorithm: sha256WithRSAEncryption 35:4f:89:f0:63:39:b2:12:ac:d5:8a:d6:19:dd:e8:38:19:63: 4e:97:60:bd:7b:8f:23:42:1f:5f:19:eb:3e:12:56:c7:32:60: 10:ea:87:6d:23:f8:10:7f:4c:3a:b9:e2:37:b9:2a:85:1d:e7: 44:9b:7e:bf:07:65:13:95:dc:e1:eb:1b:93:4d:59:76:6d:2b: 4f:9a:49:40:19:b2:93:04:df:f4:cf:7d:2f:1c:4b:cb:cc:c9: 91:52:e4:58:06:1a:ed:e1:e5:fb:cb:f2:50:dd:35:cb:80:ab: 01:98:69:98:a7:69:41:0f:9d:0d:5c:29:91:30:3d:17:3c:48: bf:fd:23:35:50:05:2e:75:a8:44:31:80:c2:39:53:3b:a8:db: 68:89:e7:bc:e1:8f:9e:b9:51:bc:28:b2:92:ff:82:a8:79:6a: 89:28:03:6d:f2:21:b7:60:1c:8e:83:52:87:b4:0e:82:f6:7c: 0c:cc:28:21:29:d4:98:f4:52:ab:9b:07:65:3f:b3:1b:cb:fe: ad:e3:14:4c:e0:45:50:88:7c:e8:b3:d1:48:8d:c4:ae:7c:1d: 6c:d2:bf:3c:f5:a7:ac:f3:92:22:9f:a8:b7:3a:cc:3c:92:06: 1d:55:77:ac:d3:5d:e3:1c:98:1a:a5:d3:62:c5:b6:3a:c9:b0: e3:40:d9:68 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUbDbz1C+Mk9cp4Q8bJ18GmC1nz+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMDAyNTNaFw0yNjAyMDQyMDA3NTNaMDMxMTAvBgNV BAMTKDk4MzJFNzQ2NzhFNENENjA3MTdDMzZFODRCQTcxNDI2MTc4RTdERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHFy1nvLYGVsa236uj6PZTCi5 Fz354x1bSsV4xjrWCFgsABHTiobXaDqjoTNgAf7M5T25Cfg0gP9fFBijcYgG7aDn Ii31B31200ViM+2sfXybm0YdRL7kiPdjv6fnZa6tPIcMmkXwaTgS509qKEMyGwyU JWApALJ8UB7n3jMViVxzyno/SvUo1quiGM9F+smpjzgNj5jwRcNipcVJQdYAu58u rhrCQ16mskr6oKitlnywHu0qxifDXoWGTYzrddne0fbQHm/RKCdzfrnjI24gO6ZS Ou6x+8Zz6oL/bVGGSrmaVfjp6KXbttN8tb9RyUAzYT0aFyecq2yGVcfpkDl1AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYMudGeOTNYHF8 NuhLpxQmF4598zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEM2QTY2QkJCQ0U0Q0I0NUI5OUIyQjEy QUQzRjFFMzUxQzNEMEVENEY3NTE1QkRBMDlBMjkwREUxREQ4NDhBMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80QzZBNjZCQkJDRTRDQjQ1Qjk5QjJCMTJBRDNGMUUzNTFDM0QwRUQ0Rjc1 MTVCREEwOUEyOTBERTFERDg0OEEyLzAvOTgzMkU3NDY3OEU0Q0Q2MDcxN0MzNkU4 NEJBNzE0MjYxNzhFN0RGMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM0UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKj4wDQYJKoZIhvcNAQELBQADggEBADVPifBj ObISrNWK1hnd6DgZY06XYL17jyNCH18Z6z4SVscyYBDqh20j+BB/TDq54je5KoUd 50Sbfr8HZROV3OHrG5NNWXZtK0+aSUAZspME3/TPfS8cS8vMyZFS5FgGGu3h5fvL 8lDdNcuAqwGYaZinaUEPnQ1cKZEwPRc8SL/9IzVQBS51qEQxgMI5Uzuo22iJ57zh j565UbwospL/gqh5aokoA23yIbdgHI6DUoe0DoL2fAzMKCEp1Jj0UqubB2U/sxvL /q3jFEzgRVCIfOiz0UiNxK58HWzSvzz1p6zzkiKfqLc6zDySBh1Vd6zTXeMcmBql 02LFtjrJsONA2Wg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:56 2025 by rpki-client