$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AF6F7454394FA95451475548870C004D4158E0D.cer File: 9AF6F7454394FA95451475548870C004D4158E0D.cer (raw, json) Hash identifier: nkmz0mBl6f+BdwV8REmlBJLErjdWLE3OKDd6cwMKsPE= Subject key identifier: 9A:F6:F7:45:43:94:FA:95:45:14:75:54:88:70:C0:04:D4:15:8E:0D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0306E0DC6F0F50179420C97D904ACFDCB110E49F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 16:19:25 +0000 Certificate not after: Wed 04 Feb 2026 16:24:25 +0000 Subordinate resources: AS: 266707 IP: 45.229.248.0/22 IP: 2803:3d20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:06:e0:dc:6f:0f:50:17:94:20:c9:7d:90:4a:cf:dc:b1:10:e4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 16:19:25 2025 GMT Not After : Feb 4 16:24:25 2026 GMT Subject: CN=9AF6F7454394FA95451475548870C004D4158E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:3d:7e:fb:3b:16:dd:78:07:13:bd:2b:87: 8e:8f:81:12:5f:f1:18:84:05:e5:8a:93:60:e5:a9: 00:d1:23:0e:4f:28:b2:1d:79:e4:71:ad:f9:86:93: f7:ce:c6:b3:a9:25:ec:92:61:fc:2a:9a:a1:0e:01: bd:a6:72:81:4c:80:ee:70:9c:43:58:9d:70:f0:01: 5f:db:08:96:2a:40:80:2c:73:fd:0f:af:fe:1a:04: 72:08:ec:3d:e1:d3:00:9f:45:85:90:72:a2:e6:de: 79:ce:83:4d:60:a2:4d:32:0c:fa:30:c3:04:f8:60: 63:b8:8d:49:23:df:10:64:56:ce:d0:b0:5f:2e:af: 9a:26:7e:2a:b8:0c:bc:72:90:7a:e9:df:b1:5a:a2: cb:b4:54:5c:8d:c0:2d:18:b6:1f:3a:6a:ad:40:fa: fe:1e:89:e2:bf:92:86:5b:be:bb:a8:6a:d2:73:8c: 5f:8b:40:6e:63:47:09:64:52:3f:42:e1:f6:eb:77: 04:3d:f8:b6:2c:35:9a:ee:42:8f:34:0f:8b:a8:6b: 8a:2c:b3:c5:00:37:d9:2a:52:57:98:6c:60:b0:3a: 13:59:8b:01:99:a6:9d:99:21:a7:a3:8e:0a:54:41: e8:78:e5:3d:11:68:ed:41:c0:7a:40:dd:9b:f5:1f: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:F6:F7:45:43:94:FA:95:45:14:75:54:88:70:C0:04:D4:15:8E:0D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.248.0/22 IPv6: 2803:3d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266707 Signature Algorithm: sha256WithRSAEncryption c6:41:99:1a:ee:6f:c2:32:ba:99:43:e4:bc:a4:e6:85:f7:b6: 7b:33:4a:22:72:96:38:2e:29:51:24:82:d7:3b:00:c7:b0:0f: 4b:fe:a1:d6:a1:0c:02:c0:85:77:77:60:16:54:f4:ed:be:2d: b6:42:51:28:26:7c:44:67:06:51:37:26:1d:50:b9:51:7c:56: 0e:dc:46:7a:f8:23:b6:32:e4:cd:b1:bc:b7:0e:53:e8:dc:ab: 22:db:fd:5f:98:6c:48:e2:22:cb:71:81:04:93:9e:83:b2:1e: 7c:73:d3:e9:a1:d6:ed:48:40:ce:ed:d3:e4:4a:b0:0b:fe:7a: 33:3d:98:6a:8b:4d:89:5c:69:01:eb:29:2d:8b:e8:20:25:1a: 74:63:52:25:e3:24:d5:d6:83:30:6e:77:16:49:71:c6:28:8d: a8:a2:78:33:6b:0e:d3:9b:fc:3c:19:e6:3b:27:13:5c:38:0a: fa:6d:36:30:43:2f:08:97:a0:24:cb:a2:fe:9f:18:7c:b2:05: 15:c7:c5:c2:1c:fb:da:e3:da:5e:f7:23:35:b5:80:a9:1c:36: 4e:f3:e1:07:35:f5:10:f8:82:3f:62:a0:98:ab:81:e1:c8:38: 52:24:2b:55:ed:9b:f7:e5:c9:8c:7e:16:55:bb:b1:88:ca:fa: ee:79:ba:f5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUAwbg3G8PUBeUIMl9kErP3LEQ5J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNjE5MjVaFw0yNjAyMDQxNjI0MjVaMDMxMTAvBgNV BAMTKDlBRjZGNzQ1NDM5NEZBOTU0NTE0NzU1NDg4NzBDMDA0RDQxNThFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NT1++zsW3XgHE70rh46PgRJf 8RiEBeWKk2DlqQDRIw5PKLIdeeRxrfmGk/fOxrOpJeySYfwqmqEOAb2mcoFMgO5w nENYnXDwAV/bCJYqQIAsc/0Pr/4aBHII7D3h0wCfRYWQcqLm3nnOg01gok0yDPow wwT4YGO4jUkj3xBkVs7QsF8ur5omfiq4DLxykHrp37Faosu0VFyNwC0Yth86aq1A +v4eieK/koZbvruoatJzjF+LQG5jRwlkUj9C4fbrdwQ9+LYsNZruQo80D4uoa4os s8UAN9kqUleYbGCwOhNZiwGZpp2ZIaejjgpUQeh45T0RaO1BwHpA3Zv1HwwDAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSa9vdFQ5T6lUUU dVSIcMAE1BWODTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODM5RTY1NjUzODRGODVDMjk0NzUxMzg4 RUU4QTIwNDM4NDA2NDA0MkNGQzZBNDA4MzJDNjk1NjcwQUE3RTU0Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84MzlFNjU2NTM4NEY4NUMyOTQ3NTEzODhFRThBMjA0Mzg0MDY0MDQyQ0ZD NkE0MDgzMkM2OTU2NzBBQTdFNTRGLzAvOUFGNkY3NDU0Mzk0RkE5NTQ1MTQ3NTU0 ODg3MEMwMDRENDE1OEUwRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeX4MA0EAgAC MAcDBQAoAz0gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQR0zANBgkqhkiG9w0B AQsFAAOCAQEAxkGZGu5vwjK6mUPkvKTmhfe2ezNKInKWOC4pUSSC1zsAx7APS/6h 1qEMAsCFd3dgFlT07b4ttkJRKCZ8RGcGUTcmHVC5UXxWDtxGevgjtjLkzbG8tw5T 6NyrItv9X5hsSOIiy3GBBJOeg7IefHPT6aHW7UhAzu3T5EqwC/56Mz2YaotNiVxp AespLYvoICUadGNSJeMk1daDMG53FklxxiiNqKJ4M2sO05v8PBnmOycTXDgK+m02 MEMvCJegJMui/p8YfLIFFcfFwhz72uPaXvcjNbWAqRw2TvPhBzX1EPiCP2KgmKuB 4cg4UiQrVe2b9+XJjH4WVbuxiMr67nm69Q== -----END CERTIFICATE-----Generated at Mon Apr 7 02:02:48 2025 by rpki-client