$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer File: 9DDF7010D9766829525CC44FC34F3B14225EB013.cer (raw, json) Hash identifier: arPaAQP9xZghEwvJIhq4tZNRbzaS11t7g03DDS4t2RU= Subject key identifier: 9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 260A13F43E754F0CA13A621E5A73F899FE5961EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 10:36:31 +0000 Certificate not after: Wed 04 Feb 2026 10:41:31 +0000 Subordinate resources: AS: 266802 IP: 45.236.168.0/22 IP: 2803:a8a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0a:13:f4:3e:75:4f:0c:a1:3a:62:1e:5a:73:f8:99:fe:59:61:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 10:36:31 2025 GMT Not After : Feb 4 10:41:31 2026 GMT Subject: CN=9DDF7010D9766829525CC44FC34F3B14225EB013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:a3:17:31:d7:5f:4f:ac:3e:82:53:10:3b: 71:02:08:21:38:fd:4f:31:88:eb:04:7b:28:fc:fe: 97:49:ca:f3:76:65:2a:31:32:b6:b1:1f:93:46:f3: ee:f8:99:5d:57:db:b1:e6:50:d2:9f:1c:44:42:ea: ad:39:1c:fa:d2:7f:e5:3a:2d:61:e2:36:a3:ed:97: 4d:0b:4b:d9:bb:80:36:19:67:78:cb:c2:fb:48:3a: 0f:a4:e8:eb:61:56:6a:10:74:f7:27:f4:bb:e2:ba: d9:95:2f:7c:2b:d9:47:bb:a7:94:e2:e0:ad:03:06: f9:fc:70:16:cc:a0:0f:a7:26:ef:e8:46:e9:95:9b: 3c:b4:f3:bc:b1:b3:23:bb:25:d3:c2:00:92:b6:b5: 32:65:53:16:03:82:79:52:db:6e:ab:c8:6e:ba:8e: 9e:d5:2a:2e:7f:a9:9a:6d:79:c5:ff:69:13:b1:1d: e1:8f:52:b3:4d:ef:5d:3d:34:eb:f0:55:5b:6a:25: 0e:06:9b:eb:61:d5:88:05:02:67:33:01:9b:ac:3c: 22:06:4a:d5:0d:b9:ef:5d:64:f1:c9:40:35:ef:0a: 23:69:1f:55:dd:85:de:f1:75:02:9e:29:62:de:c2: 58:a2:87:c6:7a:13:0c:2c:d3:4d:c0:27:c0:38:4d: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.168.0/22 IPv6: 2803:a8a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266802 Signature Algorithm: sha256WithRSAEncryption 9e:05:d0:c2:d5:da:4d:74:ba:f8:7b:6e:d1:8a:aa:45:dd:a9: ec:f3:57:23:00:c6:92:ab:3a:b1:ee:ca:d5:96:91:0e:ae:a5: df:6f:28:e9:82:e1:d7:a4:d7:22:ba:dd:3e:0f:8a:b6:b3:c0: b7:4d:2c:a0:b6:1d:b6:d4:86:8c:00:3e:2e:de:38:30:18:e6: 28:8a:2a:c1:f7:87:57:dc:d2:67:e8:05:ff:d9:fe:ee:03:01: 8b:c2:4d:d8:e7:38:2e:e9:16:e7:cf:78:cb:78:1d:1f:38:3d: b0:dd:d3:a4:5d:37:b9:c9:ff:5c:b6:0f:3a:ed:dd:eb:88:4a: 5f:3c:05:ee:25:ea:37:1f:30:70:83:d0:4c:8d:92:27:8c:00: f0:fe:86:14:39:2d:b3:1d:98:e0:07:8f:80:26:88:ba:8e:be: 54:99:7c:64:4a:e5:1b:93:c8:18:54:2e:e1:f1:ed:51:f6:11: b0:54:57:25:47:de:6b:49:ed:37:ff:59:1a:9c:d6:16:07:21: 66:3a:b6:69:3c:12:d4:4d:d2:61:5d:90:a1:67:22:64:13:e6: 2c:39:94:ed:4c:fc:93:d4:74:44:9b:f4:b5:8b:61:f5:1f:4b: 56:da:c4:ef:a0:bf:6f:7d:90:3f:fd:0f:9b:86:9a:e8:56:7a: 7b:45:f8:7b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJgoT9D51TwyhOmIeWnP4mf5ZYewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMDM2MzFaFw0yNjAyMDQxMDQxMzFaMDMxMTAvBgNV BAMTKDlEREY3MDEwRDk3NjY4Mjk1MjVDQzQ0RkMzNEYzQjE0MjI1RUIwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctqMXMddfT6w+glMQO3ECCCE4 /U8xiOsEeyj8/pdJyvN2ZSoxMraxH5NG8+74mV1X27HmUNKfHERC6q05HPrSf+U6 LWHiNqPtl00LS9m7gDYZZ3jLwvtIOg+k6OthVmoQdPcn9LviutmVL3wr2Ue7p5Ti 4K0DBvn8cBbMoA+nJu/oRumVmzy087yxsyO7JdPCAJK2tTJlUxYDgnlS226ryG66 jp7VKi5/qZptecX/aROxHeGPUrNN7109NOvwVVtqJQ4Gm+th1YgFAmczAZusPCIG StUNue9dZPHJQDXvCiNpH1Xdhd7xdQKeKWLewliih8Z6Ewws003AJ8A4TSilAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSd33AQ2XZoKVJc xE/DTzsUIl6wEzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjU0NzUwQTBEODBBMzI1OUM2RDdDOTQ5 MTJDQkI0Rjc3MzZDQ0E5Nzk2Rjc1QzNFRjk3QUREQTgxQUU3MkVDRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNTQ3NTBBMEQ4MEEzMjU5QzZEN0M5NDkxMkNCQjRGNzczNkNDQTk3OTZG NzVDM0VGOTdBRERBODFBRTcyRUNFLzAvOURERjcwMTBEOTc2NjgyOTUyNUNDNDRG QzM0RjNCMTQyMjVFQjAxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeyoMA0EAgAC MAcDBQAoA6igMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSMjANBgkqhkiG9w0B AQsFAAOCAQEAngXQwtXaTXS6+Htu0YqqRd2p7PNXIwDGkqs6se7K1ZaRDq6l328o 6YLh16TXIrrdPg+KtrPAt00soLYdttSGjAA+Lt44MBjmKIoqwfeHV9zSZ+gF/9n+ 7gMBi8JN2Oc4LukW5894y3gdHzg9sN3TpF03ucn/XLYPOu3d64hKXzwF7iXqNx8w cIPQTI2SJ4wA8P6GFDktsx2Y4AePgCaIuo6+VJl8ZErlG5PIGFQu4fHtUfYRsFRX JUfea0ntN/9ZGpzWFgchZjq2aTwS1E3SYV2QoWciZBPmLDmU7Uz8k9R0RJv0tYth 9R9LVtrE76C/b32QP/0Pm4aa6FZ6e0X4ew== -----END CERTIFICATE-----Generated at Sat Apr 12 09:54:50 2025 by rpki-client