$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer File: A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer (raw, json) Hash identifier: /I5GE0de7LoG/PquICnQmq0uPZX4cOeNsQqyuVnipR0= Subject key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 120C71DD3E0F789DD3F8383B4B81928D90F736B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 10:57:31 +0000 Certificate not after: Wed 04 Feb 2026 11:02:31 +0000 Subordinate resources: AS: 13381 IP: 200.112.224.0/19 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0c:71:dd:3e:0f:78:9d:d3:f8:38:3b:4b:81:92:8d:90:f7:36:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 10:57:31 2025 GMT Not After : Feb 4 11:02:31 2026 GMT Subject: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4a:1a:e6:38:4f:9d:24:fc:ee:bf:e0:e8:d1: 81:26:28:e8:96:96:8b:87:bb:7c:6c:69:6e:73:35: 77:5b:4c:bd:f4:9e:af:4c:1c:d7:df:7e:38:55:34: 2e:c0:09:02:79:81:c3:1e:37:9b:a8:4d:63:7c:cd: 16:13:eb:dc:00:ff:ee:29:17:81:ba:5c:37:1d:2f: 9c:ca:74:bc:2a:c5:87:72:9b:53:87:5f:ef:46:07: de:37:95:13:b3:dd:95:19:16:7c:88:ff:e1:e1:fa: 37:11:f8:61:f9:53:8b:fa:c5:2b:52:51:96:82:a3: 77:b3:e1:cd:22:1c:a3:ba:ec:8b:dc:52:41:57:02: ee:86:e0:fc:23:97:b7:91:98:c8:8a:c1:28:a0:5d: 66:72:d6:05:27:23:29:b0:c9:f5:48:ed:66:1e:b3: 30:9a:78:41:c7:a6:6b:14:a3:83:66:0b:87:b1:29: 66:c9:e8:3a:48:4b:04:7e:b2:54:e1:c9:62:2d:da: 67:83:82:d8:d1:53:9a:fe:f9:42:d3:b0:cb:06:70: ee:a6:21:65:32:5c:d5:f5:34:d5:85:f3:ab:09:57: 28:cf:da:f0:d1:2c:5b:2f:6d:f6:03:53:33:18:33: c0:7f:e1:59:3f:bb:46:f9:37:85:b6:53:39:b4:ab: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.112.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13381 Signature Algorithm: sha256WithRSAEncryption 10:4a:e6:37:5d:40:b6:ac:6d:44:6d:55:4f:a7:65:27:29:d1: 9a:0d:e3:9d:5c:f5:b8:7a:73:42:9b:98:f7:b1:5c:d9:b6:57: 31:11:a3:b5:a0:12:c4:3d:d5:3e:c9:50:b2:1f:db:9f:c2:ef: d1:03:2d:79:0b:4b:96:98:76:9c:dc:c7:2e:a1:ff:33:1e:50: 4d:40:32:1d:72:50:68:23:c8:94:4f:16:a9:5e:88:db:21:31: 16:32:67:95:13:5b:67:ec:76:6d:7e:4e:fa:33:83:bb:3a:2d: 84:08:c2:da:61:ca:e5:f6:e8:9e:84:e3:e9:24:52:19:d9:f8: ca:31:e6:e5:23:40:6d:f2:0e:2a:93:3d:e6:7c:b5:df:2f:d2: 43:e6:99:48:c1:96:f2:ce:53:04:0f:cc:56:86:06:34:8f:d8: 56:bb:39:85:98:3b:8c:b7:4c:f7:af:6f:13:3d:f9:ba:24:b0: e6:84:de:b8:f1:93:bd:26:79:57:df:46:2a:7c:e7:b5:1b:19: 8e:21:79:fc:b9:45:fa:16:31:bb:7b:d8:15:43:c8:60:dc:2a: a4:9b:7c:d9:7a:c2:1c:6e:7f:78:a4:4f:c4:5b:14:43:23:7e: 79:fd:81:e1:e3:ed:4b:9f:5c:34:06:29:2d:bd:33:26:76:e5: a0:13:89:cc -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUEgxx3T4PeJ3T+Dg7S4GSjZD3NrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMDU3MzFaFw0yNjAyMDQxMTAyMzFaMDMxMTAvBgNV BAMTKEEzNUU1N0VEOTcyNDZFOEMwMjk5N0U0RkNGMEMzRUQxM0UxMDA3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsShrmOE+dJPzuv+Do0YEmKOiW louHu3xsaW5zNXdbTL30nq9MHNfffjhVNC7ACQJ5gcMeN5uoTWN8zRYT69wA/+4p F4G6XDcdL5zKdLwqxYdym1OHX+9GB943lROz3ZUZFnyI/+Hh+jcR+GH5U4v6xStS UZaCo3ez4c0iHKO67IvcUkFXAu6G4Pwjl7eRmMiKwSigXWZy1gUnIymwyfVI7WYe szCaeEHHpmsUo4NmC4exKWbJ6DpISwR+slThyWIt2meDgtjRU5r++ULTsMsGcO6m IWUyXNX1NNWF86sJVyjP2vDRLFsvbfYDUzMYM8B/4Vk/u0b5N4W2Uzm0q8BvAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjXlftlyRujAKZ fk/PDD7RPhAHSjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJB RTE3NUMxNjRBOEVGMDQ5QkVDMDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4RUYwNDlCRUMw MkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRG Q0YwQzNFRDEzRTEwMDc0QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyHDgMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAjRFMA0GCSqGSIb3DQEBCwUAA4IBAQAQSuY3XUC2 rG1EbVVPp2UnKdGaDeOdXPW4enNCm5j3sVzZtlcxEaO1oBLEPdU+yVCyH9ufwu/R Ay15C0uWmHac3Mcuof8zHlBNQDIdclBoI8iUTxapXojbITEWMmeVE1tn7HZtfk76 M4O7Oi2ECMLaYcrl9uiehOPpJFIZ2fjKMeblI0Bt8g4qkz3mfLXfL9JD5plIwZby zlMED8xWhgY0j9hWuzmFmDuMt0z3r28TPfm6JLDmhN648ZO9JnlX30YqfOe1GxmO IXn8uUX6FjG7e9gVQ8hg3Cqkm3zZesIcbn94pE/EWxRDI355/YHh4+1Ln1w0Bikt vTMmduWgE4nM -----END CERTIFICATE-----Generated at Sun Apr 6 08:05:47 2025 by rpki-client