$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer File: BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer (raw, json) Hash identifier: xRv+TAsb33vg9XdMpoaN/00JHwC5+w/6D4qte5pu3Tc= Subject key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 743F6CD51EEFCFF0AFD036CF3543AB30E84EC0CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 10:52:12 +0000 Certificate not after: Wed 04 Feb 2026 10:57:12 +0000 Subordinate resources: AS: 272153 IP: 2801:189::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3f:6c:d5:1e:ef:cf:f0:af:d0:36:cf:35:43:ab:30:e8:4e:c0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 10:52:12 2025 GMT Not After : Feb 4 10:57:12 2026 GMT Subject: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:94:41:dc:21:5e:b9:0f:9d:fb:9d:d5:a5: f7:b2:4b:e7:59:66:7a:b4:5a:c7:7d:2b:b1:42:c7: cf:a2:07:3e:6b:5b:83:86:96:69:f3:ad:89:b1:f1: 46:36:55:51:48:2e:06:3d:fe:39:01:ee:b3:48:97: ae:e8:1f:bd:28:02:2e:78:4e:f8:46:c5:14:fa:df: ff:5d:09:c0:29:f6:2c:29:d9:0d:d1:45:1d:9c:d4: ba:3e:10:4a:4f:c5:53:ef:13:28:d8:10:63:a8:d2: 03:41:a1:79:23:47:d7:ee:bf:a0:19:f9:d0:61:eb: f5:4f:95:3d:0d:db:57:80:2b:6b:a1:7a:42:84:6e: 3d:67:d3:71:ee:74:48:9d:dd:6e:47:a6:e3:52:39: f3:02:c0:e9:f9:be:5d:74:7f:ba:a9:b3:71:9e:0c: d9:33:84:ea:37:e8:b4:7f:a4:79:28:3b:0b:ec:9f: b6:86:8c:bc:ae:d8:e4:b2:db:7b:68:59:e9:2c:81: fd:6f:3b:2f:99:d3:46:98:75:64:b2:be:e1:de:7e: 4a:87:da:e5:fd:0a:6a:94:2f:51:6e:0a:5c:47:09: b1:40:ea:05:c8:84:c6:d1:47:c6:74:13:f8:1b:72: b2:d8:da:c8:12:20:29:cc:c7:c2:69:8d:39:51:43: 6e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:189::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272153 Signature Algorithm: sha256WithRSAEncryption d6:de:d5:77:08:99:d9:57:6a:9f:ae:35:43:1d:e8:68:63:1c: d4:cb:df:fc:76:77:49:40:32:67:42:59:f3:c5:c6:25:55:8e: f1:ca:65:58:68:71:d3:cc:80:c6:9a:fc:34:b0:02:c9:3d:1f: 92:fd:d1:5b:59:d1:03:fe:ae:d6:77:f2:8f:ea:72:60:f3:7c: aa:46:bf:ee:5e:5c:70:54:cd:9d:ca:b9:98:5f:88:a6:69:ed: a6:95:ab:fe:7c:fc:c6:bc:15:4a:4a:76:35:3a:67:4b:da:22: 19:4a:e9:d2:85:d3:18:41:c7:73:8b:9c:84:b9:3b:2e:aa:53: aa:4e:7d:f7:18:34:80:f3:80:b8:ed:0e:a8:96:42:58:bc:83: 96:3b:bb:72:b0:92:ee:d9:bc:06:cc:01:99:78:6b:68:46:33: 62:f9:34:80:7b:a2:1c:ee:5e:18:eb:2d:fe:7a:a5:4c:b7:cc: 25:c7:05:0a:f2:85:a8:60:2b:5b:06:67:df:f7:c8:55:2d:57: 7e:f1:14:a4:2f:c8:72:bb:c6:8c:60:ac:58:19:d0:18:f3:a5: cc:52:7f:d6:35:5f:77:45:46:cf:b8:1a:34:f1:38:cf:53:e4: 90:17:8e:ef:38:4c:01:ff:6c:5e:2a:54:0d:0f:78:e9:75:28: 49:ef:71:29 -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUdD9s1R7vz/Cv0DbPNUOrMOhOwMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMDUyMTJaFw0yNjAyMDQxMDU3MTJaMDMxMTAvBgNV BAMTKEJERkUyRjc5MzAzMEM2NUE4MDkxNDc1QjY3RUY1QThDQzE5RjE5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQ5RB3CFeuQ+d+53VpfeyS+dZ Znq0Wsd9K7FCx8+iBz5rW4OGlmnzrYmx8UY2VVFILgY9/jkB7rNIl67oH70oAi54 TvhGxRT63/9dCcAp9iwp2Q3RRR2c1Lo+EEpPxVPvEyjYEGOo0gNBoXkjR9fuv6AZ +dBh6/VPlT0N21eAK2uhekKEbj1n03HudEid3W5HpuNSOfMCwOn5vl10f7qps3Ge DNkzhOo36LR/pHkoOwvsn7aGjLyu2OSy23toWeksgf1vOy+Z00aYdWSyvuHefkqH 2uX9CmqUL1FuClxHCbFA6gXIhMbRR8Z0E/gbcrLY2sgSICnMx8JpjTlRQ27jAgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9/i95MDDGWoCR R1tn71qMwZ8ZUzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDkzRTA1RkJENkE5MUEyQjNDODI1MjZC NjQzNkNBOTU1OTM4RTA4REU1NjA0NURDNEJCNkZDN0QxMUFCODcyQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OTNFMDVGQkQ2QTkxQTJCM0M4MjUyNkI2NDM2Q0E5NTU5MzhFMDhERTU2 MDQ1REM0QkI2RkM3RDExQUI4NzJBLzAvQkRGRTJGNzkzMDMwQzY1QTgwOTE0NzVC NjdFRjVBOENDMTlGMTk1My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBiQAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQnGTANBgkqhkiG9w0BAQsFAAOCAQEA1t7V dwiZ2Vdqn641Qx3oaGMc1Mvf/HZ3SUAyZ0JZ88XGJVWO8cplWGhx08yAxpr8NLAC yT0fkv3RW1nRA/6u1nfyj+pyYPN8qka/7l5ccFTNncq5mF+IpmntppWr/nz8xrwV Skp2NTpnS9oiGUrp0oXTGEHHc4uchLk7LqpTqk599xg0gPOAuO0OqJZCWLyDlju7 crCS7tm8BswBmXhraEYzYvk0gHuiHO5eGOst/nqlTLfMJccFCvKFqGArWwZn3/fI VS1XfvEUpC/IcrvGjGCsWBnQGPOlzFJ/1jVfd0VGz7gaNPE4z1PkkBeO7zhMAf9s XipUDQ946XUoSe9xKQ== -----END CERTIFICATE-----Generated at Sun Apr 6 19:50:04 2025 by rpki-client