$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer File: ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer (raw, json) Hash identifier: 7AAK4cAWamAFY0u9vUKI31rbALgDovdbTY9HWhJ1Bno= Subject key identifier: AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 38F607126E3222F60A4CFDD700B04620B7A398AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 19:39:04 +0000 Certificate not after: Tue 03 Feb 2026 19:44:04 +0000 Subordinate resources: AS: 262157 IP: 200.14.83.0/24 IP: 2801:0:420::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f6:07:12:6e:32:22:f6:0a:4c:fd:d7:00:b0:46:20:b7:a3:98:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 19:39:04 2025 GMT Not After : Feb 3 19:44:04 2026 GMT Subject: CN=ABCA5BFE80371D74C85885F36AA97BA698DFAE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:31:53:69:38:13:5f:2b:18:ad:08:e2:43: 97:aa:03:9d:03:ba:91:8f:54:99:6a:a1:20:2f:40: 5e:33:12:3f:11:b1:eb:57:50:bf:f7:03:78:c6:75: de:a4:3f:e8:09:62:4c:1a:d9:9d:2a:2b:20:ae:a9: e1:c7:28:98:65:4b:b4:ff:be:30:b0:99:05:cb:24: c6:ad:11:c8:ea:f0:1a:16:99:68:66:ee:89:fe:d8: f8:9f:a6:43:57:35:11:30:6b:8f:a9:f0:e8:f2:b3: 18:59:78:f5:bd:87:d2:c2:1f:e0:03:f8:0a:ae:94: 3d:f7:34:33:af:0a:c4:68:2a:a1:9d:6e:a8:27:26: 23:89:0b:93:55:64:01:06:da:2d:4c:ed:6b:8c:d8: 39:4a:6e:c3:71:60:36:24:81:73:ed:98:31:ed:95: 78:50:2f:bb:60:25:90:64:f4:e8:1b:0d:cd:11:29: f5:b0:35:39:d2:dd:c3:3b:16:83:94:75:7e:93:ff: 51:b7:94:cd:46:31:f7:89:a9:73:55:61:f7:86:77: 17:f4:9c:58:d1:aa:13:c6:69:3e:83:37:6b:75:4e: d2:f6:a3:cc:19:00:31:b1:1b:79:0f:3f:62:eb:de: b5:06:81:ab:12:4f:9a:c9:2d:4a:0b:43:7e:f6:b0: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.14.83.0/24 IPv6: 2801:0:420::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262157 Signature Algorithm: sha256WithRSAEncryption 4e:8e:fe:0b:bf:53:d2:f3:5c:98:7f:0a:18:3d:07:b2:5a:8d: 0f:b7:85:09:a8:77:88:0c:56:df:0c:0f:af:35:2d:96:16:38: b5:57:98:d8:45:83:a1:e0:bb:d1:e0:c0:36:be:13:ed:08:d3: 4e:ba:c1:ba:b9:92:f6:d3:f2:fb:a5:d4:d3:52:f6:bb:dd:1a: a9:ff:7b:e2:d9:26:48:67:50:2f:d8:0e:be:2e:15:2d:fc:c5: 62:26:8e:ab:ce:6d:ef:ce:a6:2d:90:46:d1:f6:d2:4b:97:7a: 4d:9f:f6:fd:4d:31:c5:2f:4c:d7:f0:c1:08:f7:a2:fb:2c:60: a6:3e:80:b2:9f:35:35:5e:5b:81:18:86:c8:cd:e7:8e:e5:c0: ff:8a:62:fc:6f:61:01:f2:f6:b4:e5:dd:73:57:cd:7d:f8:ae: a4:77:85:f7:dd:af:27:2e:1a:e6:84:53:e4:2e:f3:72:21:27: 31:a4:23:b9:05:80:c2:40:e7:ff:ee:4a:63:4d:af:4d:f1:b4: fc:7c:be:12:63:e8:2d:1f:7b:5a:5e:b7:18:19:02:82:9a:27: 86:d7:8f:df:28:f9:4b:23:61:a0:c2:e7:ca:79:c5:19:2f:19: 76:14:c7:b6:ba:d1:16:11:fe:72:a9:af:a7:cd:54:26:05:61: 9f:66:14:2c -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUOPYHEm4yIvYKTP3XALBGILejmK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxOTM5MDRaFw0yNjAyMDMxOTQ0MDRaMDMxMTAvBgNV BAMTKEFCQ0E1QkZFODAzNzFENzRDODU4ODVGMzZBQTk3QkE2OThERkFFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6zFTaTgTXysYrQjiQ5eqA50D upGPVJlqoSAvQF4zEj8RsetXUL/3A3jGdd6kP+gJYkwa2Z0qKyCuqeHHKJhlS7T/ vjCwmQXLJMatEcjq8BoWmWhm7on+2PifpkNXNREwa4+p8OjysxhZePW9h9LCH+AD +AqulD33NDOvCsRoKqGdbqgnJiOJC5NVZAEG2i1M7WuM2DlKbsNxYDYkgXPtmDHt lXhQL7tgJZBk9OgbDc0RKfWwNTnS3cM7FoOUdX6T/1G3lM1GMfeJqXNVYfeGdxf0 nFjRqhPGaT6DN2t1TtL2o8wZADGxG3kPP2Lr3rUGgasST5rJLUoLQ372sINvAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSrylv+gDcddMhY hfNqqXummN+uAjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjYzQkJBOERBMUMxQjhEOTRBMThDM0Y5 QTM5QkYyOUVGNzZCMDQ5OUYyQUVCN0FFRUJFMDc2QUJDNDdGRTREOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNjNCQkE4REExQzFCOEQ5NEExOEMzRjlBMzlCRjI5RUY3NkIwNDk5RjJB RUI3QUVFQkUwNzZBQkM0N0ZFNEQ4LzAvQUJDQTVCRkU4MDM3MUQ3NEM4NTg4NUYz NkFBOTdCQTY5OERGQUUwMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyA5TMA8EAgAC MAkDBwAoAQAABCAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAANMA0GCSqGSIb3 DQEBCwUAA4IBAQBOjv4Lv1PS81yYfwoYPQeyWo0Pt4UJqHeIDFbfDA+vNS2WFji1 V5jYRYOh4LvR4MA2vhPtCNNOusG6uZL20/L7pdTTUva73Rqp/3vi2SZIZ1Av2A6+ LhUt/MViJo6rzm3vzqYtkEbR9tJLl3pNn/b9TTHFL0zX8MEI96L7LGCmPoCynzU1 XluBGIbIzeeO5cD/imL8b2EB8va05d1zV819+K6kd4X33a8nLhrmhFPkLvNyIScx pCO5BYDCQOf/7kpjTa9N8bT8fL4SY+gtH3taXrcYGQKCmieG14/fKPlLI2GgwufK ecUZLxl2FMe2utEWEf5yqa+nzVQmBWGfZhQs -----END CERTIFICATE-----Generated at Mon Apr 7 01:57:51 2025 by rpki-client