$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer File: AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer (raw, json) Hash identifier: BGg/iXZeXwX6GbE+H3XPjL9KJKq7eoaqmu03e61M6mA= Subject key identifier: AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5B5A26CFF6027CD25E764B8423744FE4C2F2EB0E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 15:42:12 +0000 Certificate not after: Wed 04 Feb 2026 15:47:12 +0000 Subordinate resources: IP: 45.70.196.0/22 IP: 2803:b420::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 14 Apr 2025 20:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5a:26:cf:f6:02:7c:d2:5e:76:4b:84:23:74:4f:e4:c2:f2:eb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 15:42:12 2025 GMT Not After : Feb 4 15:47:12 2026 GMT Subject: CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:2d:a0:e1:1c:54:40:34:00:27:3f:d2:27: 75:72:3d:b5:f0:11:37:0b:97:42:79:b5:27:8e:0d: f8:a6:26:f4:3a:7c:9d:3c:31:c8:cb:1e:9c:36:9e: 06:f4:8c:a1:96:da:fe:84:2b:c3:fc:7b:a7:c4:46: 01:3c:22:7f:59:b4:59:0e:3f:4b:d0:58:ad:32:d4: d1:0e:c8:77:3f:0a:9d:b0:a5:b4:6e:4c:4a:b9:36: 07:53:06:9c:97:16:58:4c:7f:9b:7a:31:58:2b:b0: 16:5c:8d:61:f8:38:0c:1c:da:1d:18:60:f8:c3:ed: dc:ea:b8:6e:79:91:52:52:6c:89:00:7e:ec:c3:cd: 79:af:b9:1b:c1:ea:ca:a9:c6:b7:c7:fb:73:62:48: 9d:f5:66:dc:b5:16:35:b2:97:19:02:c8:ab:82:ff: d7:71:64:ad:ed:10:a9:9f:bd:c5:a5:ea:4c:fa:71: 90:15:38:d2:45:4c:a9:bc:b8:d1:45:8a:f9:c3:e6: 44:af:16:cd:da:2a:ec:f1:0a:b2:fa:fb:a8:e5:05: f6:73:25:41:11:0d:b0:ae:42:c9:e0:71:77:b5:ab: 63:aa:b0:85:80:cf:02:c1:45:e5:ef:74:6e:9a:fa: 73:bc:8e:26:4e:65:11:8b:e2:70:5a:68:6e:1b:07: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.196.0/22 IPv6: 2803:b420::/32 Signature Algorithm: sha256WithRSAEncryption 70:d1:d4:43:23:d3:cb:80:62:7f:a2:df:b8:49:f1:2f:3d:3b: 7e:e7:65:f5:d3:f6:91:d6:e1:0f:92:84:1f:a0:84:90:c1:5f: 97:12:e0:e4:c5:a2:22:12:69:27:b3:41:45:c5:6d:7f:fb:a2: 1f:df:17:19:5d:98:97:b5:b4:2b:f4:85:67:a1:c7:be:d4:20: 03:35:e0:d6:da:78:ae:a6:a3:25:d6:4e:d6:b7:e8:e0:76:86: 0e:15:61:61:2a:b0:7e:77:f7:6d:72:cd:57:84:59:e6:c8:09: b7:88:06:cd:89:6f:3f:a0:b3:4c:30:0f:fe:dd:06:83:d9:e6: 38:a6:8c:c5:70:11:f4:0f:b8:40:a5:0d:50:1b:33:61:93:f9: f2:cb:e6:be:e7:5e:a9:5e:bf:06:89:69:77:15:c2:63:c2:4a: f7:94:ed:f4:74:df:62:63:a4:bc:06:78:b0:64:0b:52:8d:f4: f0:6c:4b:03:b7:bb:0f:00:ea:c0:2a:aa:48:d1:10:e6:a3:00: e7:ca:8c:97:49:eb:ef:88:d8:06:c6:9d:ab:09:b9:36:b2:62: 72:1e:2e:ba:25:26:bb:dd:c7:b7:5f:83:82:71:e6:45:c9:24: 5a:f2:e6:e6:7f:17:38:2c:5e:2d:bb:b9:9f:92:ea:ae:c6:57: af:e7:19:5a -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUW1omz/YCfNJedkuEI3RP5MLy6w4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNTQyMTJaFw0yNjAyMDQxNTQ3MTJaMDMxMTAvBgNV BAMTKEFFRDRBMUU2MjAxREE4NTJCOTYwRjU5NDZGNEY3RTVFQUE5QTFGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mi2g4RxUQDQAJz/SJ3VyPbXw ETcLl0J5tSeODfimJvQ6fJ08McjLHpw2ngb0jKGW2v6EK8P8e6fERgE8In9ZtFkO P0vQWK0y1NEOyHc/Cp2wpbRuTEq5NgdTBpyXFlhMf5t6MVgrsBZcjWH4OAwc2h0Y YPjD7dzquG55kVJSbIkAfuzDzXmvuRvB6sqpxrfH+3NiSJ31Zty1FjWylxkCyKuC /9dxZK3tEKmfvcWl6kz6cZAVONJFTKm8uNFFivnD5kSvFs3aKuzxCrL6+6jlBfZz JUERDbCuQsngcXe1q2OqsIWAzwLBReXvdG6a+nO8jiZOZRGL4nBaaG4bBxQ1AgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSu1KHmIB2oUrlg 9ZRvT35eqpofhjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0UzMUZDRUU2NzRCODg5RENCMjYxMDFC QjNBNDJEQTgxMzMwQjlBQTYzRDI3MjJEREY1MTVEMDY3QUY4NjEyNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83RTMxRkNFRTY3NEI4ODlEQ0IyNjEwMUJCM0E0MkRBODEzMzBCOUFBNjNE MjcyMkRERjUxNUQwNjdBRjg2MTI1LzAvQUVENEExRTYyMDFEQTg1MkI5NjBGNTk0 NkY0RjdFNUVBQTlBMUY4Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUbEMA0EAgAC MAcDBQAoA7QgMA0GCSqGSIb3DQEBCwUAA4IBAQBw0dRDI9PLgGJ/ot+4SfEvPTt+ 52X10/aR1uEPkoQfoISQwV+XEuDkxaIiEmkns0FFxW1/+6If3xcZXZiXtbQr9IVn oce+1CADNeDW2niupqMl1k7Wt+jgdoYOFWFhKrB+d/dtcs1XhFnmyAm3iAbNiW8/ oLNMMA/+3QaD2eY4pozFcBH0D7hApQ1QGzNhk/nyy+a+516pXr8GiWl3FcJjwkr3 lO30dN9iY6S8BniwZAtSjfTwbEsDt7sPAOrAKqpI0RDmowDnyoyXSevviNgGxp2r Cbk2smJyHi66JSa73ce3X4OCceZFySRa8ubmfxc4LF4tu7mfkuquxlev5xla -----END CERTIFICATE-----Generated at Fri Apr 11 14:25:27 2025 by rpki-client