$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer File: 9AB130A96BF3302DC0486818E0523507034D3DA9.cer (raw, json) Hash identifier: i/+BuUSit3/sjnN74r4w+fD25UD1x10KHsa7Rbl2klU= Subject key identifier: 9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7513063F21379B3F37E3B84BFA4FE49CB240F460 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:54:13 +0000 Certificate not after: Wed 04 Feb 2026 04:59:13 +0000 Subordinate resources: AS: 265843 IP: 45.224.140.0/22 IP: 2803:5220::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:13:06:3f:21:37:9b:3f:37:e3:b8:4b:fa:4f:e4:9c:b2:40:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:54:13 2025 GMT Not After : Feb 4 04:59:13 2026 GMT Subject: CN=9AB130A96BF3302DC0486818E0523507034D3DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:e9:d6:81:12:82:2a:6e:82:0c:88:ad:62: f2:95:ae:cf:c8:8a:78:a1:8d:3d:5f:9c:01:13:31: d3:55:7c:dc:83:ce:5d:3f:14:1b:2a:f8:93:f9:75: 3e:a0:3a:30:e5:27:be:ff:11:b4:ca:4a:4b:39:0e: a2:b9:0d:7c:01:f2:14:bb:f7:68:60:b0:6e:81:d8: c9:32:e3:dd:49:ef:27:db:d8:68:be:a2:5d:bd:3c: c2:c4:89:fc:10:c9:2e:49:cf:67:13:f2:a5:b6:9c: cc:df:06:fa:36:4c:9c:de:02:57:ad:17:62:c4:41: e0:4b:15:9f:f6:77:1b:8d:7e:2a:b5:61:07:40:e5: 81:1e:70:56:6d:34:a5:11:c6:e1:51:09:8e:5b:de: 90:a3:e2:6a:f3:a8:7a:1e:2f:31:e4:68:1b:97:45: 65:c8:ed:ce:60:3f:52:bc:80:1d:9f:38:65:ad:9f: 0e:f7:1f:ea:8a:b5:df:9c:26:86:a9:43:84:43:6d: ff:f3:5d:d3:14:81:5f:76:cc:c2:95:58:50:25:10: a0:e8:cf:84:f4:c0:c0:d3:56:03:6b:13:ce:3e:65: 01:81:6d:b5:64:4d:f3:46:9a:0b:46:76:ec:ad:a2: 0e:aa:91:c5:58:51:fe:20:de:11:90:71:ec:22:46: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.140.0/22 IPv6: 2803:5220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265843 Signature Algorithm: sha256WithRSAEncryption a7:d1:fb:ac:82:13:0e:50:b8:d0:e0:75:81:9a:3c:3a:f4:70: b4:8b:0d:77:b9:f5:da:9e:17:33:8c:26:a2:e7:0a:eb:8a:9c: 14:21:fd:2f:1f:3e:f7:83:99:e5:8a:0a:a6:eb:40:84:fb:54: c2:72:56:ae:0c:b7:11:8c:59:cc:33:52:87:64:e4:f3:04:fc: 3c:01:50:7c:03:3a:af:7e:e3:16:34:e8:fe:a2:1c:6d:5b:cb: ac:3e:a2:88:32:e1:3e:b4:50:bc:10:82:84:21:7a:7c:18:f3: 89:35:c2:92:cd:0f:39:56:84:72:da:06:3b:db:ad:07:e3:98: 4a:77:c5:83:e1:36:8a:44:74:92:5a:ce:c0:57:13:f1:2a:be: 5a:7d:32:96:3e:28:46:6e:8e:c9:8a:03:ad:7b:06:95:f0:53: 90:d3:c5:4a:59:e1:96:5e:31:51:60:26:e3:f9:cd:ec:bc:a3: e4:77:c3:f4:80:fd:ba:16:bf:7f:8f:75:ee:13:0d:51:3f:e5: 16:3b:72:d9:e3:d3:6c:87:77:58:0f:43:2e:a7:b4:c7:be:1d: 78:ee:55:6b:90:fd:62:5f:dc:2e:1b:de:e7:d9:73:6a:b6:7d: 35:dc:2a:3a:d1:e5:22:44:bc:fd:9d:62:aa:20:bc:79:fc:87: e0:41:4b:b9 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUdRMGPyE3mz8347hL+k/knLJA9GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDU0MTNaFw0yNjAyMDQwNDU5MTNaMDMxMTAvBgNV BAMTKDlBQjEzMEE5NkJGMzMwMkRDMDQ4NjgxOEUwNTIzNTA3MDM0RDNEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPh+nWgRKCKm6CDIitYvKVrs/I inihjT1fnAETMdNVfNyDzl0/FBsq+JP5dT6gOjDlJ77/EbTKSks5DqK5DXwB8hS7 92hgsG6B2Mky491J7yfb2Gi+ol29PMLEifwQyS5Jz2cT8qW2nMzfBvo2TJzeAlet F2LEQeBLFZ/2dxuNfiq1YQdA5YEecFZtNKURxuFRCY5b3pCj4mrzqHoeLzHkaBuX RWXI7c5gP1K8gB2fOGWtnw73H+qKtd+cJoapQ4RDbf/zXdMUgV92zMKVWFAlEKDo z4T0wMDTVgNrE84+ZQGBbbVkTfNGmgtGduytog6qkcVYUf4g3hGQcewiRgI3AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSasTCpa/MwLcBI aBjgUjUHA009qTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjdDODA0MzMyRDJDODhDREQ1ODI3NEI3 QUE1RjBERkY1QjBBRDIxNTZBNEMzOTlCNTcyRUY2OTQyNTc5NDQ4RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82N0M4MDQzMzJEMkM4OENERDU4Mjc0QjdBQTVGMERGRjVCMEFEMjE1NkE0 QzM5OUI1NzJFRjY5NDI1Nzk0NDhFLzAvOUFCMTMwQTk2QkYzMzAyREMwNDg2ODE4 RTA1MjM1MDcwMzREM0RBOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeCMMA0EAgAC MAcDBQAoA1IgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOczANBgkqhkiG9w0B AQsFAAOCAQEAp9H7rIITDlC40OB1gZo8OvRwtIsNd7n12p4XM4wmoucK64qcFCH9 Lx8+94OZ5YoKputAhPtUwnJWrgy3EYxZzDNSh2Tk8wT8PAFQfAM6r37jFjTo/qIc bVvLrD6iiDLhPrRQvBCChCF6fBjziTXCks0POVaEctoGO9utB+OYSnfFg+E2ikR0 klrOwFcT8Sq+Wn0ylj4oRm6OyYoDrXsGlfBTkNPFSlnhll4xUWAm4/nN7Lyj5HfD 9ID9uha/f4917hMNUT/lFjty2ePTbId3WA9DLqe0x74deO5Va5D9Yl/cLhve59lz arZ9NdwqOtHlIkS8/Z1iqiC8efyH4EFLuQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:04 2025 by rpki-client