$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer File: 9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer (raw, json) Hash identifier: OwYQ+do2B3kbxdW72sOGrVocjoQx9BVvv0nNAW/7ezY= Subject key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 14DF1DFDAE7D429E84E089F3D6688C7D91FAB9E3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 21:13:05 +0000 Certificate not after: Tue 03 Feb 2026 21:18:05 +0000 Subordinate resources: AS: 8048 AS: 10293 IP: 161.196.0.0/16 IP: 186.88.0.0/13 IP: 190.9.128.0/19 IP: 190.36.0.0/14 IP: 190.72.0.0/13 IP: 190.198.0.0 -- 190.207.255.255 IP: 200.11.128.0/17 IP: 200.44.0.0/16 IP: 200.84.0.0/16 IP: 200.90.0.0/17 IP: 200.93.0.0/17 IP: 200.109.0.0/16 IP: 201.208.0.0/14 IP: 201.242.0.0/15 IP: 201.248.0.0/15 IP: 2800:1000::/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:df:1d:fd:ae:7d:42:9e:84:e0:89:f3:d6:68:8c:7d:91:fa:b9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 21:13:05 2025 GMT Not After : Feb 3 21:18:05 2026 GMT Subject: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:bd:78:2b:aa:5b:e8:fd:30:c4:bf:ef:d6: 4a:fb:e3:3d:30:ae:1a:92:78:8f:40:c3:af:32:d2: a5:ed:96:a6:dd:bf:c4:33:ed:62:5b:cf:84:c1:b5: c3:42:6b:46:9a:cd:4d:8f:64:a9:a1:ac:f2:68:d5: 11:b0:fb:bd:62:cd:87:1c:dd:e9:7f:82:4a:f1:77: 14:66:c2:ab:d3:c0:ee:3a:7e:ec:b0:82:c8:14:dc: 79:40:63:6f:bc:f1:42:8c:40:95:c5:bf:73:e6:d4: a5:21:67:88:09:a8:67:d1:c7:db:7e:07:19:f0:01: 57:5a:81:58:fa:7f:14:e6:3c:2d:80:dd:9f:55:86: e6:fb:0c:fc:2c:56:b4:f9:23:b7:12:50:9f:a8:35: b8:43:5c:42:0d:e5:a6:ba:b8:64:11:74:8b:66:4e: 3f:32:1c:cf:dc:11:7f:82:45:b7:be:6e:ce:fd:72: bc:f7:5e:2d:b5:97:d7:ae:95:ac:1b:59:ed:f8:41: 07:9b:b8:27:4e:3b:bf:c3:bb:87:bf:fe:e4:c8:ab: a4:dd:88:45:09:87:65:b9:42:50:fa:22:88:7d:9d: 69:6f:ab:8d:85:39:30:f1:bf:15:c0:42:e1:5c:ee: e0:ca:4d:6e:fb:dc:1f:9d:cd:72:9e:ad:82:d6:df: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.196.0.0/16 186.88.0.0/13 190.9.128.0/19 190.36.0.0/14 190.72.0.0/13 190.198.0.0-190.207.255.255 200.11.128.0/17 200.44.0.0/16 200.84.0.0/16 200.90.0.0/17 200.93.0.0/17 200.109.0.0/16 201.208.0.0/14 201.242.0.0/15 201.248.0.0/15 IPv6: 2800:1000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8048 10293 Signature Algorithm: sha256WithRSAEncryption ab:fd:27:f7:dc:3e:05:12:1b:6c:19:e0:cf:15:9c:1c:53:ec: b7:d9:3e:12:9d:43:57:4e:b2:2d:b8:43:fe:bb:c4:e8:a4:8c: 3a:ed:b4:fd:38:ca:77:32:e7:cd:39:ce:65:0a:34:c5:75:ae: 00:2d:1d:34:ed:42:71:28:ad:49:44:aa:73:3e:e9:0e:49:b9: 7b:32:7e:2d:86:b0:9b:f5:f1:50:a4:70:1a:8d:5a:fb:9e:af: 7a:95:ac:28:19:a1:46:23:a9:ac:6b:60:0e:f9:cd:78:a9:e2: 45:9a:9b:be:96:f2:9f:25:35:85:fc:e0:64:10:6c:fc:c5:50: 43:ba:89:9c:61:90:d8:a7:dd:d6:25:f0:9f:2a:db:c3:38:18: f6:3e:62:bf:0c:4e:84:35:95:b2:20:d8:94:3a:9f:ed:7d:cb: 87:3e:6e:62:ea:6e:5d:4d:d8:7b:ed:99:60:d6:bf:de:61:d7: 0e:8e:6c:3a:42:e4:8d:bf:e3:3e:41:f4:f8:55:77:91:bd:df: 98:b2:51:ac:1f:ce:80:df:86:a1:27:67:88:16:62:4d:dc:43: 44:30:02:b9:2c:66:54:15:a1:f0:8c:d6:78:6a:38:d7:73:d3: 1c:10:00:b1:b0:40:8c:0e:d9:18:cc:16:44:18:87:b3:4e:15: d4:12:21:02 -----BEGIN CERTIFICATE----- MIIG9zCCBd+gAwIBAgIUFN8d/a59Qp6E4Inz1miMfZH6ueMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMTEzMDVaFw0yNjAyMDMyMTE4MDVaMDMxMTAvBgNV BAMTKDlGNTZGQzIzQThDNUZDMDY3QjdEMEJGRDYwNUMwRjVBMzNEMDM2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMr14K6pb6P0wxL/v1kr74z0w rhqSeI9Aw68y0qXtlqbdv8Qz7WJbz4TBtcNCa0aazU2PZKmhrPJo1RGw+71izYcc 3el/gkrxdxRmwqvTwO46fuywgsgU3HlAY2+88UKMQJXFv3Pm1KUhZ4gJqGfRx9t+ BxnwAVdagVj6fxTmPC2A3Z9Vhub7DPwsVrT5I7cSUJ+oNbhDXEIN5aa6uGQRdItm Tj8yHM/cEX+CRbe+bs79crz3Xi21l9eulawbWe34QQebuCdOO7/Du4e//uTIq6Td iEUJh2W5QlD6Ioh9nWlvq42FOTDxvxXAQuFc7uDKTW773B+dzXKerYLW35JjAgMB AAGjggQBMIID/TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfVvwjqMX8Bnt9 C/1gXA9aM9A2tDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDNDQzU3MDQyM0ZBRjgxNjNEODZDQzIx RjFCQTAzRDg5NTAyQUU5QzEyNEZFRjg5QUY2MUY0MDJFQUVFOEI4My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80M0NDNTcwNDIzRkFGODE2M0Q4NkNDMjFGMUJBMDNEODk1MDJBRTlDMTI0 RkVGODlBRjYxRjQwMkVBRUU4QjgzLzAvOUY1NkZDMjNBOEM1RkMwNjdCN0QwQkZE NjA1QzBGNUEzM0QwMzZCNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBcBAIAATBWAwMAocQDAwO6WAME Bb4JgAMDAr4kAwMDvkgwCgMDAb7GAwMEvsADBAfIC4ADAwDILAMDAMhUAwQHyFoA AwQHyF0AAwMAyG0DAwLJ0AMDAcnyAwMByfgwDAQCAAIwBgMEACgAEDAdBggrBgEF BQcBCAEB/wQOMAygCjAIAgIfcAICKDUwDQYJKoZIhvcNAQELBQADggEBAKv9J/fc PgUSG2wZ4M8VnBxT7LfZPhKdQ1dOsi24Q/67xOikjDrttP04yncy5805zmUKNMV1 rgAtHTTtQnEorUlEqnM+6Q5JuXsyfi2GsJv18VCkcBqNWvuer3qVrCgZoUYjqaxr YA75zXip4kWam76W8p8lNYX84GQQbPzFUEO6iZxhkNin3dYl8J8q28M4GPY+Yr8M ToQ1lbIg2JQ6n+19y4c+bmLqbl1N2HvtmWDWv95h1w6ObDpC5I2/4z5B9PhVd5G9 35iyUawfzoDfhqEnZ4gWYk3cQ0QwArksZlQVofCM1nhqONdz0xwQALGwQIwO2RjM FkQYh7NOFdQSIQI= -----END CERTIFICATE-----Generated at Sun Apr 6 22:08:54 2025 by rpki-client