$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD2FADB92F8663C868137A4FDBDCBF8EE11DFA3E.cer File: AD2FADB92F8663C868137A4FDBDCBF8EE11DFA3E.cer (raw, json) Hash identifier: c2ldb3u7J8IvnOX4onBWhdUf3VLqr0ftktD/GTIX8DM= Subject key identifier: AD:2F:AD:B9:2F:86:63:C8:68:13:7A:4F:DB:DC:BF:8E:E1:1D:FA:3E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 42389DD98160DED399CA59F62BBAB9E2ABD1C4F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/634999664F36C1976602FB91E51FC8F4B6E96DE88D610D282C6BD7386EE073A4/0/AD2FADB92F8663C868137A4FDBDCBF8EE11DFA3E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/634999664F36C1976602FB91E51FC8F4B6E96DE88D610D282C6BD7386EE073A4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 02 Jan 2025 20:45:01 +0000 Certificate not after: Thu 01 Jan 2026 20:50:01 +0000 Subordinate resources: AS: 273994 IP: 2803:58d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:38:9d:d9:81:60:de:d3:99:ca:59:f6:2b:ba:b9:e2:ab:d1:c4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 2 20:45:01 2025 GMT Not After : Jan 1 20:50:01 2026 GMT Subject: CN=AD2FADB92F8663C868137A4FDBDCBF8EE11DFA3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:73:b9:df:fc:53:bb:02:6f:96:60:81:30: 0e:b8:96:f1:74:59:40:60:53:ed:db:11:4b:c5:35: 0e:0f:0d:6f:0d:59:b3:63:c2:e8:6b:d6:3a:1c:07: f5:58:7f:2a:c2:ba:a1:54:df:e0:6d:d1:58:80:15: 33:14:5d:47:cb:ea:ba:95:4c:6f:87:bc:4a:b3:6b: e1:e6:a9:71:4c:c8:5c:ec:ed:b1:6c:c6:3e:36:c6: 13:0f:bc:b5:be:1e:8f:c5:9e:d2:8d:73:f8:02:a2: d1:5e:b4:0e:d1:a9:65:6d:08:d7:1e:31:ad:ed:e7: 75:22:77:3f:e7:20:d8:f8:ba:b8:84:96:d3:f1:9b: b8:4e:d6:26:18:75:91:af:c0:56:5f:c6:76:76:8c: e4:e2:cb:2d:f5:13:7b:1a:a3:9d:11:37:51:ff:8f: 94:af:0e:9c:d0:95:3a:b7:08:c2:10:a6:55:e2:a1: f7:02:04:95:13:58:80:c1:9f:22:8e:bd:c5:8c:62: 4b:6d:16:e1:64:2d:80:62:0a:20:ce:7b:89:ca:6c: 0d:db:aa:bc:52:85:5b:12:34:f5:7b:df:d7:2e:0f: de:bf:5e:8e:30:ba:f8:5f:db:1b:36:2c:d2:13:ad: 84:53:6f:80:33:cd:c5:b9:06:a7:d8:21:c0:f5:4e: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:2F:AD:B9:2F:86:63:C8:68:13:7A:4F:DB:DC:BF:8E:E1:1D:FA:3E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/634999664F36C1976602FB91E51FC8F4B6E96DE88D610D282C6BD7386EE073A4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/634999664F36C1976602FB91E51FC8F4B6E96DE88D610D282C6BD7386EE073A4/0/AD2FADB92F8663C868137A4FDBDCBF8EE11DFA3E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:58d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273994 Signature Algorithm: sha256WithRSAEncryption 2f:2b:68:13:f1:6c:0e:0e:11:2c:8e:68:5d:78:cb:b6:d2:c6: b3:19:16:d6:72:90:f3:fe:d2:e6:8a:55:19:61:ee:4e:dc:77: e9:ee:ac:27:3e:af:d1:66:93:54:d1:93:25:eb:75:bc:2a:a5: 85:1c:f3:bc:d7:ac:e1:d1:8e:3d:42:5b:3b:45:ce:bb:8b:9c: 39:da:57:e2:4d:68:71:7e:ef:76:82:32:12:be:ea:9d:bd:c7: 5c:94:ca:df:c4:0f:db:8c:b0:84:f0:f4:db:ad:5c:34:cc:df: b3:4a:a5:b1:d7:b3:16:0c:b8:f1:8e:87:0d:30:b8:77:c0:42: d0:4c:91:3a:7c:ba:fc:ec:5b:ac:c5:25:cb:76:62:5e:54:9a: c0:c0:a2:33:9f:7d:0f:2a:e3:10:c1:c0:75:2f:a2:a7:70:af: 1f:f7:8a:05:61:ec:37:5f:b7:f2:3b:ff:25:0c:3b:b6:5b:a8: 2e:5e:b5:a1:a6:43:d0:be:5c:ef:ff:4e:f8:b0:b5:d7:1b:5d: c4:5e:06:a2:b0:d2:12:b0:9e:97:34:86:07:2d:1d:f9:47:97: db:9a:19:af:1b:3e:a7:8b:a3:5f:7d:62:17:f9:fd:b9:bc:28: d1:be:a2:ee:9b:fd:91:e5:bc:d4:85:ac:88:a7:3a:52:f6:c5: c0:40:35:f0 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQjid2YFg3tOZyln2K7q54qvRxPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAxMDIyMDQ1MDFaFw0yNjAxMDEyMDUwMDFaMDMxMTAvBgNV BAMTKEFEMkZBREI5MkY4NjYzQzg2ODEzN0E0RkRCRENCRjhFRTExREZBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeK3O53/xTuwJvlmCBMA64lvF0 WUBgU+3bEUvFNQ4PDW8NWbNjwuhr1jocB/VYfyrCuqFU3+Bt0ViAFTMUXUfL6rqV TG+HvEqza+HmqXFMyFzs7bFsxj42xhMPvLW+Ho/FntKNc/gCotFetA7RqWVtCNce Ma3t53Uidz/nINj4uriEltPxm7hO1iYYdZGvwFZfxnZ2jOTiyy31E3sao50RN1H/ j5SvDpzQlTq3CMIQplXiofcCBJUTWIDBnyKOvcWMYkttFuFkLYBiCiDOe4nKbA3b qrxShVsSNPV739cuD96/Xo4wuvhf2xs2LNITrYRTb4AzzcW5BqfYIcD1TgxPAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStL625L4ZjyGgT ek/b3L+O4R36PjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjM0OTk5NjY0RjM2QzE5NzY2MDJGQjkx RTUxRkM4RjRCNkU5NkRFODhENjEwRDI4MkM2QkQ3Mzg2RUUwNzNBNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MzQ5OTk2NjRGMzZDMTk3NjYwMkZCOTFFNTFGQzhGNEI2RTk2REU4OEQ2 MTBEMjgyQzZCRDczODZFRTA3M0E0LzAvQUQyRkFEQjkyRjg2NjNDODY4MTM3QTRG REJEQ0JGOEVFMTFERkEzRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANY0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELkowDQYJKoZIhvcNAQELBQADggEBAC8raBPx bA4OESyOaF14y7bSxrMZFtZykPP+0uaKVRlh7k7cd+nurCc+r9Fmk1TRkyXrdbwq pYUc87zXrOHRjj1CWztFzruLnDnaV+JNaHF+73aCMhK+6p29x1yUyt/ED9uMsITw 9NutXDTM37NKpbHXsxYMuPGOhw0wuHfAQtBMkTp8uvzsW6zFJct2Yl5UmsDAojOf fQ8q4xDBwHUvoqdwrx/3igVh7Ddft/I7/yUMO7ZbqC5etaGmQ9C+XO//Tviwtdcb XcReBqKw0hKwnpc0hgctHflHl9uaGa8bPqeLo199Yhf5/bm8KNG+ou6b/ZHlvNSF rIinOlL2xcBANfA= -----END CERTIFICATE-----Generated at Sat Apr 12 09:37:39 2025 by rpki-client