$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer File: C097077D00F9B394156695ADC73EFDCF74721DB1.cer (raw, json) Hash identifier: R9tOqfHgYsgr88dSvLe+oUVbpj8a4TAoSzWYFjD1R30= Subject key identifier: C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3A7A28B48BE23BA5ED82264F31BA45F4F39563F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 07:42:59 +0000 Certificate not after: Wed 04 Feb 2026 07:47:59 +0000 Subordinate resources: AS: 266765 IP: 45.234.224.0/22 IP: 2803:f20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7a:28:b4:8b:e2:3b:a5:ed:82:26:4f:31:ba:45:f4:f3:95:63:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 07:42:59 2025 GMT Not After : Feb 4 07:47:59 2026 GMT Subject: CN=C097077D00F9B394156695ADC73EFDCF74721DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:61:40:94:ad:fd:2f:f2:dd:15:18:5e:79: 65:53:79:8a:3e:48:d4:87:1e:04:04:18:7e:2f:56: e7:ff:04:39:97:f3:37:0f:de:af:0a:a8:76:88:f9: c3:4f:02:79:7a:8a:0d:71:24:22:29:e2:19:dd:ef: 0b:fc:c5:b7:ac:58:4b:e6:f0:1c:43:b3:83:35:94: 37:0f:7b:77:34:50:83:c2:3f:bd:a7:33:c4:61:82: 7a:c9:95:ae:87:f9:7a:4e:ad:e9:51:e2:04:10:a1: 13:02:75:ae:81:d9:18:b6:b2:ce:76:4c:87:53:34: 53:93:d6:27:33:36:a9:95:b6:c3:11:2e:97:07:aa: f1:a0:55:81:11:ff:3b:f8:93:83:f1:2d:0b:78:7b: 23:83:b1:45:3f:94:14:29:64:24:d5:42:d0:ef:c7: b3:a3:b8:e9:2b:cf:60:9e:88:50:04:e2:64:cf:72: f4:41:9e:81:ce:a4:cb:9b:0a:0a:ab:8c:5e:58:56: 5b:10:ce:f6:98:fb:33:0b:43:f5:b5:a4:f0:a4:06: d8:56:fd:6b:e5:68:dc:9e:bc:87:16:24:a0:f7:d0: 0b:11:0f:f0:0e:e1:7a:ba:33:e6:a3:e4:56:0f:f3: 93:9d:8f:d2:1b:7f:0e:d4:02:6b:c7:ca:20:76:01: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.224.0/22 IPv6: 2803:f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266765 Signature Algorithm: sha256WithRSAEncryption 5d:7b:ca:24:10:0a:42:4a:3a:4e:00:e9:f8:5b:7f:a8:30:01: 18:93:9d:a5:73:e8:79:5d:c7:6a:80:17:e9:b6:90:80:f5:7c: 44:ae:bb:ec:a6:ea:dc:61:a8:63:22:ae:22:8f:2d:22:4a:81: 7d:b2:ea:41:4a:5c:22:8c:ea:16:a5:75:8f:1d:b4:cf:df:9d: 42:02:2c:f1:11:03:49:93:6a:a1:2a:3c:f8:55:47:41:99:5c: 86:55:7b:d8:e9:9b:3f:4f:0f:1e:00:66:1f:ae:a2:57:4e:8a: fd:fa:6e:49:9b:d9:cb:fe:32:3b:41:2d:8c:30:ad:69:95:b6: 10:ad:b0:fb:e2:17:d7:fc:09:7f:b8:db:c6:28:c4:d1:b9:06: d4:a4:8b:b7:30:64:bf:17:0f:a1:52:d2:ac:0b:87:06:12:d0: 36:58:1e:c3:51:8c:38:9b:d2:bb:e4:bc:d7:ae:5e:dd:dd:5a: 08:0d:ae:9e:27:5b:50:12:1a:33:b8:b2:e3:2a:8b:42:7d:1d: f6:5b:21:37:8b:7f:8a:3a:a9:4b:d4:12:00:9b:d8:1f:69:72: f8:fb:34:53:6a:c1:6e:6d:2f:23:e2:16:be:8e:b2:ec:07:69: 91:43:02:b3:5d:44:20:4f:0a:52:f8:6b:b8:78:fb:b0:a6:79: eb:87:02:18 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUOnootIviO6XtgiZPMbpF9POVY/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNzQyNTlaFw0yNjAyMDQwNzQ3NTlaMDMxMTAvBgNV BAMTKEMwOTcwNzdEMDBGOUIzOTQxNTY2OTVBREM3M0VGRENGNzQ3MjFEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWWFAlK39L/LdFRheeWVTeYo+ SNSHHgQEGH4vVuf/BDmX8zcP3q8KqHaI+cNPAnl6ig1xJCIp4hnd7wv8xbesWEvm 8BxDs4M1lDcPe3c0UIPCP72nM8RhgnrJla6H+XpOrelR4gQQoRMCda6B2Ri2ss52 TIdTNFOT1iczNqmVtsMRLpcHqvGgVYER/zv4k4PxLQt4eyODsUU/lBQpZCTVQtDv x7OjuOkrz2CeiFAE4mTPcvRBnoHOpMubCgqrjF5YVlsQzvaY+zMLQ/W1pPCkBthW /WvlaNyevIcWJKD30AsRD/AO4Xq6M+aj5FYP85Odj9Ibfw7UAmvHyiB2AYQ5AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAlwd9APmzlBVm la3HPv3PdHIdsTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkJDNjE0MkJCMUFCRTI3OUREQjFBODRE QzQzNzFBMzAxQTEzMjk4NDhDMzE5ODZCMUY4NkM5QjEyMjg0MzZCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QkM2MTQyQkIxQUJFMjc5RERCMUE4NERDNDM3MUEzMDFBMTMyOTg0OEMz MTk4NkIxRjg2QzlCMTIyODQzNkI5LzAvQzA5NzA3N0QwMEY5QjM5NDE1NjY5NUFE QzczRUZEQ0Y3NDcyMURCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLergMA0EAgAC MAcDBQAoAw8gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSDTANBgkqhkiG9w0B AQsFAAOCAQEAXXvKJBAKQko6TgDp+Ft/qDABGJOdpXPoeV3HaoAX6baQgPV8RK67 7Kbq3GGoYyKuIo8tIkqBfbLqQUpcIozqFqV1jx20z9+dQgIs8REDSZNqoSo8+FVH QZlchlV72OmbP08PHgBmH66iV06K/fpuSZvZy/4yO0EtjDCtaZW2EK2w++IX1/wJ f7jbxijE0bkG1KSLtzBkvxcPoVLSrAuHBhLQNlgew1GMOJvSu+S8165e3d1aCA2u nidbUBIaM7iy4yqLQn0d9lshN4t/ijqpS9QSAJvYH2ly+Ps0U2rBbm0vI+IWvo6y 7AdpkUMCs11EIE8KUvhruHj7sKZ564cCGA== -----END CERTIFICATE-----Generated at Mon Apr 7 01:55:37 2025 by rpki-client