$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer File: 9B48C7C37EA3416F0E2263901D5683835F4FD5C7.cer (raw, json) Hash identifier: +RmZNw+2yeFAt75zPlxNtSRXiw+PVDPzULEN3lTIwzA= Subject key identifier: 9B:48:C7:C3:7E:A3:41:6F:0E:22:63:90:1D:56:83:83:5F:4F:D5:C7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7EC578E3C87C72A9D6CD8441A6B629D37C985BCA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:20:02 +0000 Certificate not after: Wed 04 Feb 2026 02:25:02 +0000 Subordinate resources: AS: 52303 IP: 186.190.192.0/20 IP: 2803:1c60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c5:78:e3:c8:7c:72:a9:d6:cd:84:41:a6:b6:29:d3:7c:98:5b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:20:02 2025 GMT Not After : Feb 4 02:25:02 2026 GMT Subject: CN=9B48C7C37EA3416F0E2263901D5683835F4FD5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:db:98:60:4e:df:ec:fa:69:fd:d7:1c:97: b4:5f:30:46:e7:d9:68:54:c4:ac:f6:07:9d:7f:dd: d8:9a:d3:da:20:ce:7e:57:97:e1:be:b9:32:94:b5: 78:41:cc:7f:58:f0:db:5e:16:72:e2:c6:f9:3b:ec: ef:f3:13:12:e5:c1:ae:cb:64:48:31:23:a4:a3:59: b7:a3:ed:8f:9b:ea:96:0c:72:d4:8d:9c:53:f5:8f: fa:1c:30:20:ba:6b:bb:a8:d1:6e:91:3b:90:b6:9f: d4:c0:fc:09:bf:0c:fe:40:31:fc:23:7e:4b:1e:05: 7e:50:08:50:70:e9:d4:bb:cc:29:73:50:e3:06:e8: e0:8e:4f:47:bf:78:8e:76:78:8c:68:ad:47:99:3d: bc:68:1d:45:c5:62:20:01:d3:e4:25:ee:d5:ae:41: f6:cb:d6:dc:7b:0a:5b:49:6a:ee:a5:d4:41:48:e1: eb:08:0b:78:5e:17:f6:db:c3:d7:4c:e3:a9:b6:47: 46:52:25:63:c2:7d:ec:ed:5a:d3:ba:43:29:18:08: 2d:c0:74:c9:ea:ff:a1:ae:4c:a1:da:4b:3e:a6:20: 14:1b:16:5f:74:e8:52:3e:76:a1:41:86:27:ee:30: 88:39:44:3b:5e:8d:e4:b5:b7:74:d0:ba:d9:bc:58: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:48:C7:C3:7E:A3:41:6F:0E:22:63:90:1D:56:83:83:5F:4F:D5:C7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/42E31670C7B5AA2B80EB48BDADE8DBC39F8227A1EAB3BB2CC638AA0C2529B9B8/0/9B48C7C37EA3416F0E2263901D5683835F4FD5C7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.190.192.0/20 IPv6: 2803:1c60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52303 Signature Algorithm: sha256WithRSAEncryption a5:94:3c:94:fe:76:d2:db:b6:a9:19:d4:48:dc:1a:64:ab:00: 4f:4c:08:3f:cc:53:af:9a:ca:a6:a7:54:ca:72:63:d0:de:62: a2:bf:f2:c7:a9:f3:05:d9:6d:80:a9:b4:cf:1d:3a:86:5d:36: f6:27:7f:28:48:eb:52:a7:72:06:be:34:48:46:e6:d6:93:0d: e1:36:77:37:04:9c:f3:c4:f8:dc:4a:18:cc:33:7b:68:d1:b7: 2e:6b:8e:e3:82:41:60:30:c1:24:86:37:4b:c3:8b:0c:50:24: d7:95:ef:d7:3e:61:58:d0:62:cb:1a:87:3f:99:73:f8:7b:11: 45:34:32:e0:85:70:57:8c:aa:aa:02:e9:da:0a:64:97:c8:67: 54:3d:a5:69:ca:fc:70:c1:aa:39:0b:0a:a1:d0:68:cf:d1:d3: d1:fa:4c:13:bf:87:11:79:7c:ba:16:9d:15:71:4c:f1:34:bf: a6:99:c4:fb:e4:aa:a5:23:5c:70:13:f6:45:56:12:06:51:19: f9:a0:1d:e2:85:47:cb:85:29:17:7f:18:78:7f:a7:f5:a8:d5: 1c:c0:37:61:20:3c:00:68:3f:28:1f:3a:20:e9:a5:86:87:63: 0f:98:d7:64:6e:7b:12:ca:f9:aa:a9:b6:53:cb:92:ea:63:7f: 25:42:a5:12 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUfsV448h8cqnWzYRBprYp03yYW8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjIwMDJaFw0yNjAyMDQwMjI1MDJaMDMxMTAvBgNV BAMTKDlCNDhDN0MzN0VBMzQxNkYwRTIyNjM5MDFENTY4MzgzNUY0RkQ1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlNuYYE7f7Ppp/dccl7RfMEbn 2WhUxKz2B51/3dia09ogzn5Xl+G+uTKUtXhBzH9Y8NteFnLixvk77O/zExLlwa7L ZEgxI6SjWbej7Y+b6pYMctSNnFP1j/ocMCC6a7uo0W6RO5C2n9TA/Am/DP5AMfwj fkseBX5QCFBw6dS7zClzUOMG6OCOT0e/eI52eIxorUeZPbxoHUXFYiAB0+Ql7tWu QfbL1tx7CltJau6l1EFI4esIC3heF/bbw9dM46m2R0ZSJWPCfeztWtO6QykYCC3A dMnq/6GuTKHaSz6mIBQbFl906FI+dqFBhifuMIg5RDtejeS1t3TQutm8WEjpAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbSMfDfqNBbw4i Y5AdVoODX0/VxzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDJFMzE2NzBDN0I1QUEyQjgwRUI0OEJE QURFOERCQzM5RjgyMjdBMUVBQjNCQjJDQzYzOEFBMEMyNTI5QjlCOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80MkUzMTY3MEM3QjVBQTJCODBFQjQ4QkRBREU4REJDMzlGODIyN0ExRUFC M0JCMkNDNjM4QUEwQzI1MjlCOUI4LzAvOUI0OEM3QzM3RUEzNDE2RjBFMjI2Mzkw MUQ1NjgzODM1RjRGRDVDNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEur7AMA0EAgAC MAcDBQAoAxxgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMTzANBgkqhkiG9w0B AQsFAAOCAQEApZQ8lP520tu2qRnUSNwaZKsAT0wIP8xTr5rKpqdUynJj0N5ior/y x6nzBdltgKm0zx06hl029id/KEjrUqdyBr40SEbm1pMN4TZ3NwSc88T43EoYzDN7 aNG3LmuO44JBYDDBJIY3S8OLDFAk15Xv1z5hWNBiyxqHP5lz+HsRRTQy4IVwV4yq qgLp2gpkl8hnVD2lacr8cMGqOQsKodBoz9HT0fpME7+HEXl8uhadFXFM8TS/ppnE ++SqpSNccBP2RVYSBlEZ+aAd4oVHy4UpF38YeH+n9ajVHMA3YSA8AGg/KB86IOml hodjD5jXZG57Esr5qqm2U8uS6mN/JUKlEg== -----END CERTIFICATE-----Generated at Sun Apr 6 20:01:39 2025 by rpki-client