$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer File: 9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer (raw, json) Hash identifier: +lU8uvzegWfA8oes0vLdkWFATAB06YGwwVdIbRWzYos= Subject key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 128EF9BD2E12011B78288A9748CAD9D83E054E18 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 22:55:44 +0000 Certificate not after: Thu 02 Apr 2026 23:00:44 +0000 Subordinate resources: AS: 270220 IP: 131.0.236.0/22 IP: 200.76.120.0/22 IP: 2806:403::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8e:f9:bd:2e:12:01:1b:78:28:8a:97:48:ca:d9:d8:3e:05:4e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 3 22:55:44 2025 GMT Not After : Apr 2 23:00:44 2026 GMT Subject: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:d0:87:36:16:9a:47:16:4c:8c:7e:c9:8b: bd:6f:23:56:84:ff:00:54:c8:96:7e:b0:a7:0d:ff: 59:50:dd:84:9e:ec:aa:2a:f1:7a:58:ad:4f:ff:33: 52:d1:cd:c3:fa:0c:06:99:0a:9c:ea:3b:06:c5:3c: e4:4d:9c:24:f7:89:01:10:1b:1c:2a:df:5e:f5:94: 7b:66:e1:c9:03:e7:64:42:19:75:30:8e:06:eb:4d: 3b:0b:59:34:7e:cd:71:71:97:1b:3c:d9:65:de:7a: 19:5b:dd:75:bf:71:09:b0:f6:12:64:b9:c6:be:37: 8c:d3:f6:fe:5c:d7:65:ec:cd:a7:9b:8b:8d:c8:81: c5:60:02:61:66:76:0f:c1:5c:e7:57:65:cb:87:23: 0e:63:bf:32:aa:c5:02:62:d3:13:a3:9a:de:16:a2: b5:91:76:ae:ee:6e:e1:d7:62:f2:ed:8c:48:98:4f: 25:c6:9a:e1:db:db:82:90:3e:4e:12:57:e6:b6:11: c1:19:88:88:ea:8d:87:bc:6a:40:4a:e2:74:cc:ef: fe:ae:be:68:dd:cb:b2:b8:34:31:a7:72:e8:27:d5: 58:36:12:46:d0:c1:a3:ce:62:dc:45:40:80:33:6f: 8b:36:a5:cd:0b:77:cb:6e:cb:ed:30:0c:bf:1f:e5: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.236.0/22 200.76.120.0/22 IPv6: 2806:403::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270220 Signature Algorithm: sha256WithRSAEncryption e4:1c:27:75:66:d6:88:1f:d8:d7:3b:5c:f3:80:41:d8:76:6f: 0c:0a:e8:f4:5a:9b:31:db:6d:89:35:2b:1d:ca:e9:5e:f7:6d: aa:d4:07:28:fa:0f:30:15:1a:91:0c:92:5c:7f:27:cb:7c:92: 76:6a:ff:b2:36:6c:56:3d:9d:13:b8:b8:83:38:43:c5:3d:55: c5:c0:83:8d:ee:33:ce:60:63:00:bb:19:97:5b:50:5e:97:44: ee:4b:54:df:8d:b9:83:f2:39:0d:34:ac:99:06:dd:6f:4a:fa: cc:e5:6d:43:9e:97:8c:90:f0:5b:ac:0c:b4:ba:42:7c:2b:ae: dc:c5:27:62:44:84:40:9d:4d:e0:f0:fd:ab:91:d7:c6:03:2c: d3:14:85:ed:6c:2a:f0:b7:df:83:29:3f:2e:d5:f7:85:12:05: 69:b7:81:0b:2b:7b:a8:d6:8f:10:53:16:f8:53:8e:e3:33:e2: 0a:84:45:d2:03:0f:e7:cf:e3:91:e2:91:a4:9d:b1:08:29:23: 10:f4:10:35:e5:fc:fb:d4:b1:e8:83:af:8c:91:a5:f5:ad:29: 4a:03:af:c4:b1:c1:e0:99:67:72:57:91:6a:8a:b7:24:ef:09: 65:ea:1c:63:a7:60:ec:71:93:84:5b:4d:e8:21:a4:98:f9:f4: 9e:ab:1a:5d -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUEo75vS4SARt4KIqXSMrZ2D4FThgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA0MDMyMjU1NDRaFw0yNjA0MDIyMzAwNDRaMDMxMTAvBgNV BAMTKDlEOTA1MjcyMkUxMkYzMTU1RkFDNEE5RUJERTdENDg3MzU1Q0YwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkctCHNhaaRxZMjH7Ji71vI1aE /wBUyJZ+sKcN/1lQ3YSe7Koq8XpYrU//M1LRzcP6DAaZCpzqOwbFPORNnCT3iQEQ Gxwq3171lHtm4ckD52RCGXUwjgbrTTsLWTR+zXFxlxs82WXeehlb3XW/cQmw9hJk uca+N4zT9v5c12Xszaebi43IgcVgAmFmdg/BXOdXZcuHIw5jvzKqxQJi0xOjmt4W orWRdq7ubuHXYvLtjEiYTyXGmuHb24KQPk4SV+a2EcEZiIjqjYe8akBK4nTM7/6u vmjdy7K4NDGncugn1Vg2EkbQwaPOYtxFQIAzb4s2pc0Ld8tuy+0wDL8f5ZetAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdkFJyLhLzFV+s Sp6959SHNVzwvjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjYzQ0ZGQ0I2OUVENzE2QjFEN0U2MkNC NTY4Qjk3NkQ2NDU5RThBRUQ0ODlDNUIyMzdGMTExMDgzQTQyMjAwNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNjNDRkZDQjY5RUQ3MTZCMUQ3RTYyQ0I1NjhCOTc2RDY0NTlFOEFFRDQ4 OUM1QjIzN0YxMTEwODNBNDIyMDA1LzAvOUQ5MDUyNzIyRTEyRjMxNTVGQUM0QTlF QkRFN0Q0ODczNTVDRjBCRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCgwDsAwQCyEx4 MA0EAgACMAcDBQAoBgQDMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfjDANBgkq hkiG9w0BAQsFAAOCAQEA5BwndWbWiB/Y1ztc84BB2HZvDAro9FqbMdttiTUrHcrp XvdtqtQHKPoPMBUakQySXH8ny3ySdmr/sjZsVj2dE7i4gzhDxT1VxcCDje4zzmBj ALsZl1tQXpdE7ktU3425g/I5DTSsmQbdb0r6zOVtQ56XjJDwW6wMtLpCfCuu3MUn YkSEQJ1N4PD9q5HXxgMs0xSF7Wwq8Lffgyk/LtX3hRIFabeBCyt7qNaPEFMW+FOO 4zPiCoRF0gMP58/jkeKRpJ2xCCkjEPQQNeX8+9Sx6IOvjJGl9a0pSgOvxLHB4Jln cleRaoq3JO8JZeocY6dg7HGThFtN6CGkmPn0nqsaXQ== -----END CERTIFICATE-----Generated at Mon Apr 7 00:55:40 2025 by rpki-client