$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99BECAD3E90AEC116082C64DF45C1FBBBFCFA585.cer File: 99BECAD3E90AEC116082C64DF45C1FBBBFCFA585.cer (raw, json) Hash identifier: MNljvri3NlFsZbDnUQBdvlumFX0sP1DbGzy5qjHsypU= Subject key identifier: 99:BE:CA:D3:E9:0A:EC:11:60:82:C6:4D:F4:5C:1F:BB:BF:CF:A5:85 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 27A3D18F2C03DD85F6CF98C33612B429A4A8AB1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/025EF3F3D14916CB9ABC6C146041B8E896ACC6FE02AFBF656049F3D080F28050/0/99BECAD3E90AEC116082C64DF45C1FBBBFCFA585.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/025EF3F3D14916CB9ABC6C146041B8E896ACC6FE02AFBF656049F3D080F28050/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:07:45 +0000 Certificate not after: Thu 05 Feb 2026 00:12:45 +0000 Subordinate resources: AS: 269965 IP: 24.152.48.0/22 IP: 2803:56e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a3:d1:8f:2c:03:dd:85:f6:cf:98:c3:36:12:b4:29:a4:a8:ab:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:07:45 2025 GMT Not After : Feb 5 00:12:45 2026 GMT Subject: CN=99BECAD3E90AEC116082C64DF45C1FBBBFCFA585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:e7:58:27:5f:35:c9:6c:fa:ae:05:96:08: dd:fe:06:b9:c0:18:37:42:ea:ef:71:09:ae:08:ab: b8:ad:b7:e6:6a:83:23:ce:bb:ae:51:7a:24:ca:db: 83:f7:f0:9f:d3:f6:f1:d3:9f:ef:30:f6:76:a4:3e: 21:e0:f8:49:4c:89:d8:f1:36:54:dc:93:33:4c:01: 86:8e:db:15:9b:b5:59:89:de:12:be:4b:90:e2:01: 8d:dd:ac:85:ba:22:30:09:64:f7:01:2d:e7:44:2c: 0f:ef:7e:72:37:99:bb:91:f8:13:f5:43:e3:60:2a: 33:9f:bf:d7:eb:92:f4:46:5e:d1:4c:19:e8:ae:b1: de:3e:64:be:95:06:3c:6e:3e:e5:6b:b0:52:98:4b: 0b:cd:c9:d7:06:ca:6b:51:05:82:34:fa:f2:38:76: 16:2b:27:1b:d6:ec:29:1a:f5:c1:6c:a3:29:48:91: e2:24:19:89:f3:df:59:2c:d7:5c:90:4b:6e:9e:02: 98:7b:d6:6c:5b:93:cb:9a:f5:a8:dd:84:44:38:58: 52:bf:e8:7e:ce:9a:e9:48:cf:3c:44:52:a0:e2:8f: fe:54:28:b8:c9:60:3b:db:43:d6:b4:7b:53:4d:71: 4a:70:f1:0f:14:ba:2b:82:b5:c9:76:f0:40:bc:89: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:BE:CA:D3:E9:0A:EC:11:60:82:C6:4D:F4:5C:1F:BB:BF:CF:A5:85 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/025EF3F3D14916CB9ABC6C146041B8E896ACC6FE02AFBF656049F3D080F28050/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/025EF3F3D14916CB9ABC6C146041B8E896ACC6FE02AFBF656049F3D080F28050/0/99BECAD3E90AEC116082C64DF45C1FBBBFCFA585.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.48.0/22 IPv6: 2803:56e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269965 Signature Algorithm: sha256WithRSAEncryption 71:8b:f0:54:c8:5a:59:4e:4e:3a:bf:f7:43:24:d5:74:dc:63: aa:9b:69:00:c5:8f:9e:73:07:20:84:df:ac:e7:b0:c6:b1:f9: 1e:7b:f4:22:a9:7d:9b:53:6e:38:e2:7b:00:eb:a1:c9:aa:34: 6d:82:73:1e:3a:39:48:f4:9e:7d:63:f9:af:74:a9:98:2e:41: d5:c2:28:f8:4c:22:16:56:77:49:ec:32:5e:5e:38:b4:6c:32: 16:b1:02:d1:af:45:e9:ef:60:f3:44:3f:37:89:dc:97:9a:3d: c1:0c:f8:ef:96:75:d4:b2:34:d8:5f:b5:20:9d:29:4d:68:89: dd:6a:1b:33:c4:b0:a2:d7:7b:b7:98:0c:57:2c:fc:77:6c:52: 6c:5f:4f:b5:0d:4e:27:86:7f:6a:d6:8c:dd:ac:12:58:ea:f0: 4a:92:96:3c:4f:8c:16:07:6a:09:59:29:32:f5:7d:a2:20:f4: fe:f7:b6:83:9c:7b:34:fb:fa:8c:2f:82:45:83:60:0c:b4:fe: 89:98:93:d5:fb:ef:ec:8b:43:8c:f1:b2:8e:b1:3a:2e:1e:b3: dc:77:cf:5e:61:ef:ee:7c:84:1d:63:eb:90:c7:d5:89:a8:4f: 71:fb:c8:53:8d:c9:8f:77:d5:87:a7:80:75:14:08:90:1e:e9: 7c:8a:75:90 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJ6PRjywD3YX2z5jDNhK0KaSoqx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDA3NDVaFw0yNjAyMDUwMDEyNDVaMDMxMTAvBgNV BAMTKDk5QkVDQUQzRTkwQUVDMTE2MDgyQzY0REY0NUMxRkJCQkZDRkE1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZudYJ181yWz6rgWWCN3+BrnA GDdC6u9xCa4Iq7itt+ZqgyPOu65ReiTK24P38J/T9vHTn+8w9nakPiHg+ElMidjx NlTckzNMAYaO2xWbtVmJ3hK+S5DiAY3drIW6IjAJZPcBLedELA/vfnI3mbuR+BP1 Q+NgKjOfv9frkvRGXtFMGeiusd4+ZL6VBjxuPuVrsFKYSwvNydcGymtRBYI0+vI4 dhYrJxvW7Cka9cFsoylIkeIkGYnz31ks11yQS26eAph71mxbk8ua9ajdhEQ4WFK/ 6H7OmulIzzxEUqDij/5UKLjJYDvbQ9a0e1NNcUpw8Q8UuiuCtcl28EC8idiHAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZvsrT6QrsEWCC xk30XB+7v8+lhTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDI1RUYzRjNEMTQ5MTZDQjlBQkM2QzE0 NjA0MUI4RTg5NkFDQzZGRTAyQUZCRjY1NjA0OUYzRDA4MEYyODA1MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMjVFRjNGM0QxNDkxNkNCOUFCQzZDMTQ2MDQxQjhFODk2QUNDNkZFMDJB RkJGNjU2MDQ5RjNEMDgwRjI4MDUwLzAvOTlCRUNBRDNFOTBBRUMxMTYwODJDNjRE RjQ1QzFGQkJCRkNGQTU4NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCGJgwMA0EAgAC MAcDBQAoA1bgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQejTANBgkqhkiG9w0B AQsFAAOCAQEAcYvwVMhaWU5OOr/3QyTVdNxjqptpAMWPnnMHIITfrOewxrH5Hnv0 Iql9m1NuOOJ7AOuhyao0bYJzHjo5SPSefWP5r3SpmC5B1cIo+EwiFlZ3SewyXl44 tGwyFrEC0a9F6e9g80Q/N4ncl5o9wQz475Z11LI02F+1IJ0pTWiJ3WobM8Swotd7 t5gMVyz8d2xSbF9PtQ1OJ4Z/ataM3awSWOrwSpKWPE+MFgdqCVkpMvV9oiD0/ve2 g5x7NPv6jC+CRYNgDLT+iZiT1fvv7ItDjPGyjrE6Lh6z3HfPXmHv7nyEHWPrkMfV iahPcfvIU43Jj3fVh6eAdRQIkB7pfIp1kA== -----END CERTIFICATE-----Generated at Mon Apr 7 01:50:39 2025 by rpki-client