$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer File: 9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer (raw, json) Hash identifier: SgIlOL4F/5/lZLLf5uXHXfBYB3Ax2jU2hk+fBskb6Hs= Subject key identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 030F288F6500BB19F6AA8A279A923A7B2A4ED03F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 16 Jan 2025 22:55:56 +0000 Certificate not after: Thu 15 Jan 2026 23:00:56 +0000 Subordinate resources: AS: 28036 AS: 52501 IP: 152.231.32.0/20 IP: 190.124.32.0/21 IP: 190.143.240.0/20 IP: 2803:180::/32 IP: 2803:b780::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0f:28:8f:65:00:bb:19:f6:aa:8a:27:9a:92:3a:7b:2a:4e:d0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 16 22:55:56 2025 GMT Not After : Jan 15 23:00:56 2026 GMT Subject: CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:2e:62:af:d7:f8:dd:29:e0:db:7a:97:c5: 70:0c:0c:20:5b:e1:5b:20:e4:8b:1a:6f:9a:0f:6f: 89:0d:84:e6:3f:39:49:d3:b8:28:10:06:51:c0:93: 27:d4:f3:11:57:9a:b6:ed:ea:fb:52:be:2c:af:24: ab:74:fb:56:4d:c4:65:78:d7:e3:5e:cb:3c:c2:0e: d4:a6:8b:2d:84:a6:f5:77:f4:16:dd:65:a8:42:8b: 4a:9c:3e:0d:1e:ce:38:66:da:c6:7b:10:18:50:90: fb:57:2b:0c:f0:3d:f4:93:d4:1b:46:a2:19:14:41: 10:02:90:60:3c:3d:c3:62:32:af:bc:21:7d:7c:9c: ef:34:b0:39:70:62:b9:83:3a:c5:34:f3:97:bc:56: d4:4a:50:65:de:09:e3:b3:c0:02:86:66:ed:40:8b: 46:87:e4:5f:e4:09:cb:f6:71:59:ec:9c:b5:2a:9b: c6:5d:5e:62:12:50:34:c6:70:b2:e1:a9:b9:81:bf: 52:e9:8b:fc:54:af:87:ea:c0:c6:12:ce:bd:68:cc: 09:18:75:42:18:90:61:f3:1a:d4:b1:c2:0e:76:8e: 3b:43:61:aa:90:03:29:86:32:1d:72:ab:bd:f0:3b: 61:88:f3:64:6b:82:24:21:7f:36:32:26:30:ab:77: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.231.32.0/20 190.124.32.0/21 190.143.240.0/20 IPv6: 2803:180::/32 2803:b780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28036 52501 Signature Algorithm: sha256WithRSAEncryption c9:d1:89:ec:12:bf:7e:16:8b:68:0f:94:d8:45:85:25:56:dd: 99:8c:b2:9b:df:25:c4:36:94:6c:83:a7:f7:18:5d:e5:34:13: 6b:a1:af:bc:bf:ee:fc:9a:d4:35:72:19:6a:c3:1c:82:80:05: c3:75:42:89:98:b1:1e:fc:67:fc:68:c1:05:2e:19:4b:23:e6: 65:9f:1e:41:f0:dd:b0:6f:bc:f2:56:58:c1:36:03:bd:7d:b8: 1f:3e:f9:95:55:a0:24:9b:c1:ec:53:b5:62:9b:fb:11:0d:a9: 9f:47:32:1a:e5:a1:e7:43:4a:df:cb:5c:c1:24:4b:d3:d7:5c: b3:e3:22:74:8c:51:17:a5:02:7e:12:5b:58:74:02:58:2d:6d: f4:c7:d7:65:f9:a3:7e:ea:ef:3b:25:dd:3e:96:1d:aa:d1:24: 05:3c:e1:24:22:68:9c:d7:96:d6:85:50:63:a5:44:7f:2f:3a: 51:94:c8:5e:2a:60:24:b9:58:cb:5d:ee:70:ad:1b:3b:93:bc: be:8c:3c:ed:43:af:c2:04:9c:38:c6:e0:8d:3a:cf:40:c2:d2: ac:90:33:2d:7f:1e:47:d9:17:fa:51:84:02:84:09:87:39:4e: 8c:d2:9e:6b:a5:58:e9:11:35:95:d4:76:ff:11:45:71:ed:4e: 12:65:d6:12 -----BEGIN CERTIFICATE----- MIIGvDCCBaSgAwIBAgIUAw8oj2UAuxn2qoonmpI6eypO0D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAxMTYyMjU1NTZaFw0yNjAxMTUyMzAwNTZaMDMxMTAvBgNV BAMTKDlGMkZDM0ZDMDREQzE0NjJCQzY4OTYzNDFCMjI4RjQ4QjZBQTA2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmS5ir9f43Sng23qXxXAMDCBb 4Vsg5Isab5oPb4kNhOY/OUnTuCgQBlHAkyfU8xFXmrbt6vtSviyvJKt0+1ZNxGV4 1+NeyzzCDtSmiy2EpvV39BbdZahCi0qcPg0ezjhm2sZ7EBhQkPtXKwzwPfST1BtG ohkUQRACkGA8PcNiMq+8IX18nO80sDlwYrmDOsU085e8VtRKUGXeCeOzwAKGZu1A i0aH5F/kCcv2cVnsnLUqm8ZdXmISUDTGcLLhqbmBv1Lpi/xUr4fqwMYSzr1ozAkY dUIYkGHzGtSxwg52jjtDYaqQAymGMh1yq73wO2GI82RrgiQhfzYyJjCrd70ZAgMB AAGjggPGMIIDwjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfL8P8BNwUYrxo ljQbIo9ItqoG4jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTg4Njk2NzQwMDkyNTYzNjk1QTE1ODlE MzAxNjEyRkE5REUyRkNEQzIxQkYyOTVBNDU0MjNBOTRGOUYwQjJGMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BODg2OTY3NDAwOTI1NjM2OTVBMTU4OUQzMDE2MTJGQTlERTJGQ0RDMjFC RjI5NUE0NTQyM0E5NEY5RjBCMkYyLzAvOUYyRkMzRkMwNERDMTQ2MkJDNjg5NjM0 MUIyMjhGNDhCNkFBMDZFMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQEmOcgAwQDvnwg AwQEvo/wMBQEAgACMA4DBQAoAwGAAwUAKAO3gDAeBggrBgEFBQcBCAEB/wQPMA2g CzAJAgJthAIDAM0VMA0GCSqGSIb3DQEBCwUAA4IBAQDJ0YnsEr9+FotoD5TYRYUl Vt2ZjLKb3yXENpRsg6f3GF3lNBNroa+8v+78mtQ1chlqwxyCgAXDdUKJmLEe/Gf8 aMEFLhlLI+Zlnx5B8N2wb7zyVljBNgO9fbgfPvmVVaAkm8HsU7Vim/sRDamfRzIa 5aHnQ0rfy1zBJEvT11yz4yJ0jFEXpQJ+EltYdAJYLW30x9dl+aN+6u87Jd0+lh2q 0SQFPOEkImic15bWhVBjpUR/LzpRlMheKmAkuVjLXe5wrRs7k7y+jDztQ6/CBJw4 xuCNOs9AwtKskDMtfx5H2Rf6UYQChAmHOU6M0p5rpVjpETWV1Hb/EUVx7U4SZdYS -----END CERTIFICATE-----Generated at Sun Apr 6 03:57:43 2025 by rpki-client