$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer File: ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer (raw, json) Hash identifier: +fC/LKDcwBpCtJsLQYnY2cjYRRoEDdia/GpIaUTJmqI= Subject key identifier: AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6C066B48F01D1C12219D71AB8ED27F02C0628A49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 04:38:09 +0000 Certificate not after: Thu 05 Feb 2026 04:43:09 +0000 Subordinate resources: AS: 28386 IP: 201.131.3.0/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:06:6b:48:f0:1d:1c:12:21:9d:71:ab:8e:d2:7f:02:c0:62:8a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 04:38:09 2025 GMT Not After : Feb 5 04:43:09 2026 GMT Subject: CN=ABA235F8E2EFBF10D89E96447F61BBA90CF14811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:2d:a7:2c:44:61:b5:e8:d6:15:ec:a3:b6: 93:85:e8:3d:f6:7c:19:7f:06:06:59:75:01:96:4f: d5:f7:9a:ad:bd:b9:ca:d4:f5:31:2f:82:05:71:c9: 1d:b7:8c:cd:f5:61:1f:41:45:62:18:ed:27:51:bd: fb:91:be:62:06:83:44:73:6e:03:7d:8e:ac:f6:d6: 4c:84:47:bc:60:13:c8:e7:63:0d:35:42:56:c1:e7: 36:6b:c6:d7:6c:cb:ce:ae:85:e2:9d:4f:e8:9f:a0: 54:05:e1:48:19:a2:b1:80:81:f4:88:72:90:79:35: 63:6f:f2:dd:51:0c:0f:f2:96:ca:fe:3f:79:61:39: d2:cc:7f:9d:e3:a0:c7:99:a3:66:30:88:89:d8:ba: 5d:d5:bb:d8:47:f1:59:16:1e:5a:42:b5:42:98:a6: 83:4c:39:67:d1:e4:c6:77:67:12:dc:e2:5a:f4:b1: 7b:4a:cc:c0:1e:3b:b6:24:1a:31:cf:f5:f3:aa:a2: 04:0b:18:30:73:0e:c6:eb:f3:48:43:cc:a4:ca:5c: 4e:d0:89:f9:53:08:d1:a5:bb:38:b3:81:15:85:93: 98:3e:bb:5c:78:85:e4:27:ea:32:90:6c:ba:50:0d: 5d:a1:7d:5c:bf:86:7d:b1:3e:e6:8f:8b:80:5e:a6: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.131.3.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28386 Signature Algorithm: sha256WithRSAEncryption 08:7f:3b:5c:0d:b2:c8:aa:26:b1:ee:b1:10:4c:fe:7a:81:ac: 23:a7:96:fa:47:92:0f:d4:cf:ee:c4:28:5b:c0:24:64:97:2b: ec:c9:d5:26:ef:89:c0:8b:fe:21:49:5e:9a:2c:ce:ea:f8:9b: 15:eb:6f:49:f1:9e:e8:38:22:cf:e1:64:03:2e:b9:4a:79:52: 6f:48:d8:77:5c:fb:a8:d6:98:fa:f7:26:5e:ed:96:9b:49:25: 05:57:5d:58:e8:ba:2c:5c:6d:4e:0e:62:62:8c:c3:3b:f6:0c: 9e:2b:13:55:0f:ba:c1:b9:57:7d:a8:97:92:fd:55:f7:0d:7b: 3a:3a:7b:d6:e5:e9:02:f6:78:d6:53:d5:ed:ef:14:0d:77:22: 3e:6b:43:28:d1:5e:0c:4d:bf:87:69:d5:27:6a:1e:f7:54:43: ff:59:da:aa:8f:c7:de:0d:c7:95:67:6a:b0:73:8e:4a:3e:e6: ea:9f:ce:fa:2c:f9:2b:87:35:d6:08:b1:2c:4f:36:fb:29:1a: 5e:bc:d1:24:ff:1a:a0:71:16:d7:3b:41:15:97:34:3a:c5:9b: 31:da:9e:5e:30:06:93:4f:c6:48:0a:3e:f2:a1:39:63:e3:c6: a9:f8:30:bd:de:49:a1:35:15:c1:47:56:af:ef:d6:88:3c:a8: 7b:ed:f7:e2 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUbAZrSPAdHBIhnXGrjtJ/AsBiikkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwNDM4MDlaFw0yNjAyMDUwNDQzMDlaMDMxMTAvBgNV BAMTKEFCQTIzNUY4RTJFRkJGMTBEODlFOTY0NDdGNjFCQkE5MENGMTQ4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEy2nLERhtejWFeyjtpOF6D32 fBl/BgZZdQGWT9X3mq29ucrU9TEvggVxyR23jM31YR9BRWIY7SdRvfuRvmIGg0Rz bgN9jqz21kyER7xgE8jnYw01QlbB5zZrxtdsy86uheKdT+ifoFQF4UgZorGAgfSI cpB5NWNv8t1RDA/ylsr+P3lhOdLMf53joMeZo2YwiInYul3Vu9hH8VkWHlpCtUKY poNMOWfR5MZ3ZxLc4lr0sXtKzMAeO7YkGjHP9fOqogQLGDBzDsbr80hDzKTKXE7Q iflTCNGluzizgRWFk5g+u1x4heQn6jKQbLpQDV2hfVy/hn2xPuaPi4BepqYjAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSrojX44u+/ENie lkR/YbupDPFIETAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREJBMEZBQkQ1MkE5RjhEQTg2NkQ3RTAz RUM2OUQwNzBERDlBNTZFNjVCN0NCMzlFRTUxN0Q2NTcxNzY1RDRDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQkEwRkFCRDUyQTlGOERBODY2RDdFMDNFQzY5RDA3MEREOUE1NkU2NUI3 Q0IzOUVFNTE3RDY1NzE3NjVENENDLzAvQUJBMjM1RjhFMkVGQkYxMEQ4OUU5NjQ0 N0Y2MUJCQTkwQ0YxNDgxMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYMDMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm7iMA0GCSqGSIb3DQEBCwUAA4IBAQAIfztcDbLI qiax7rEQTP56gawjp5b6R5IP1M/uxChbwCRklyvsydUm74nAi/4hSV6aLM7q+JsV 629J8Z7oOCLP4WQDLrlKeVJvSNh3XPuo1pj69yZe7ZabSSUFV11Y6LosXG1ODmJi jMM79gyeKxNVD7rBuVd9qJeS/VX3DXs6OnvW5ekC9njWU9Xt7xQNdyI+a0Mo0V4M Tb+HadUnah73VEP/Wdqqj8feDceVZ2qwc45KPubqn876LPkrhzXWCLEsTzb7KRpe vNEk/xqgcRbXO0EVlzQ6xZsx2p5eMAaTT8ZICj7yoTlj48ap+DC93kmhNRXBR1av 79aIPKh77ffi -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:48 2025 by rpki-client