$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer File: C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer (raw, json) Hash identifier: a8eHgbg0mGzOvkQO0tgumZ9Ha81/2cGs/IF2KzAuhQY= Subject key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7705E2D1C65AA73C2F907FEA70DD4A3F0524BF41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:50:54 +0000 Certificate not after: Wed 04 Feb 2026 05:55:54 +0000 Subordinate resources: AS: 270035 AS: 271924 IP: 130.250.228.0/22 IP: 190.108.76.0/22 IP: 190.151.142.0/23 IP: 2803:e5e0::/30 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:05:e2:d1:c6:5a:a7:3c:2f:90:7f:ea:70:dd:4a:3f:05:24:bf:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:50:54 2025 GMT Not After : Feb 4 05:55:54 2026 GMT Subject: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:3d:ca:88:9c:63:ab:07:d7:5f:97:98:ee: a1:d1:49:60:67:26:b7:17:a6:98:b9:6e:19:cd:38: d9:c4:52:82:08:ac:e4:ea:38:e7:15:3a:9c:9b:4f: 8a:a3:ac:cb:41:0e:fd:c8:4f:7f:b0:d1:1d:f2:5a: 93:05:52:82:e7:4d:14:53:68:35:be:50:49:2f:2b: 05:12:0a:d6:59:9c:3c:15:81:b9:5b:7a:aa:9e:b2: 05:60:64:72:30:b9:41:d6:57:8a:cb:17:91:0f:85: a1:51:01:0f:d6:e6:7e:f3:59:5b:80:f9:c3:a1:b1: 1b:74:b4:59:7d:b8:95:c4:af:dd:87:c7:e6:f2:f7: 6b:46:70:b6:f7:1d:82:f5:43:cd:09:b9:80:94:4d: f4:64:b8:3a:ff:81:37:30:a6:e8:13:23:f3:cf:65: 11:b5:46:3b:87:2a:77:d0:f0:9b:2d:0b:4c:c6:9d: 3f:02:43:8a:51:1a:5a:24:c5:a0:a1:e9:2c:fe:3f: 46:6d:2f:e8:88:23:87:ab:20:bb:b6:b2:d8:80:b1: 83:eb:29:88:72:46:ea:48:97:51:82:10:c9:fd:52: d7:78:d9:05:e7:fb:03:c6:ec:61:c4:27:e0:e7:25: 7e:ff:01:9a:96:14:c1:79:5b:29:40:f0:96:16:3b: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.250.228.0/22 190.108.76.0/22 190.151.142.0/23 IPv6: 2803:e5e0::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270035 271924 Signature Algorithm: sha256WithRSAEncryption af:13:4a:65:97:5e:4b:09:2f:00:5c:97:2c:04:68:85:ed:38: 29:c2:14:8c:0e:08:af:de:21:bf:2f:6d:8c:10:6d:2d:f8:df: 7d:41:1f:1a:5b:4e:ba:b7:26:20:17:0a:29:1c:e4:85:27:d7: 7e:c9:a9:fc:7a:a5:3e:87:29:62:bf:eb:61:49:dc:22:8c:3b: 77:36:a0:6e:af:ea:f7:21:f9:fa:68:79:37:ff:aa:00:09:56: cf:a7:33:e4:97:f1:56:2b:2d:ed:e6:22:38:95:27:6b:b9:59: 95:b7:4c:60:e6:11:52:8e:da:97:d0:7c:31:ab:25:82:a8:15: d0:f6:60:dc:9b:73:91:16:b0:ea:c4:29:72:ba:66:fc:2b:ad: b0:d6:6a:2f:ab:3e:20:99:84:1f:93:77:48:fb:96:72:83:b1: bc:22:fd:4a:b5:e7:d2:72:81:4c:20:ad:99:f8:30:50:51:80: da:96:7a:39:38:e7:a0:fe:28:3b:f1:42:fa:6b:fa:95:a5:20: 00:e3:25:c2:94:77:a3:0e:0d:50:ec:94:08:70:c3:47:c3:7f: 8f:0f:38:03:03:96:ac:c9:fc:66:81:21:71:5b:64:32:a0:c4: 74:58:9d:46:b9:fa:db:d6:ce:40:f1:67:ca:f1:b5:69:5c:f6: 85:fa:65:6a -----BEGIN CERTIFICATE----- MIIGtjCCBZ6gAwIBAgIUdwXi0cZapzwvkH/qcN1KPwUkv0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTUwNTRaFw0yNjAyMDQwNTU1NTRaMDMxMTAvBgNV BAMTKEM0OUIzRUI4NUVCQUVDNUFFNzM3M0E2Mzk4QzQyNTA2OERFNDI1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrtD3KiJxjqwfXX5eY7qHRSWBn JrcXppi5bhnNONnEUoIIrOTqOOcVOpybT4qjrMtBDv3IT3+w0R3yWpMFUoLnTRRT aDW+UEkvKwUSCtZZnDwVgblbeqqesgVgZHIwuUHWV4rLF5EPhaFRAQ/W5n7zWVuA +cOhsRt0tFl9uJXEr92Hx+by92tGcLb3HYL1Q80JuYCUTfRkuDr/gTcwpugTI/PP ZRG1RjuHKnfQ8JstC0zGnT8CQ4pRGlokxaCh6Sz+P0ZtL+iII4erILu2stiAsYPr KYhyRupIl1GCEMn9Utd42QXn+wPG7GHEJ+DnJX7/AZqWFMF5WylA8JYWO+s1AgMB AAGjggPAMIIDvDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEmz64XrrsWuc3 OmOYxCUGjeQlejAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTk1MDk4OEU1QUVFRUYxRkU4NzZCRkQ4 QjBGMjRENTYwMEM0MEQyQjA1M0ExQkQ3ODZGRDVBOEFEM0VCQTU2Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xOTUwOTg4RTVBRUVFRjFGRTg3NkJGRDhCMEYyNEQ1NjAwQzQwRDJCMDUz QTFCRDc4NkZENUE4QUQzRUJBNTZDLzAvQzQ5QjNFQjg1RUJBRUM1QUU3MzczQTYz OThDNDI1MDY4REU0MjU3QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCgvrkAwQCvmxM AwQBvpeOMA0EAgACMAcDBQIoA+XgMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwQe 0wIDBCY0MA0GCSqGSIb3DQEBCwUAA4IBAQCvE0pll15LCS8AXJcsBGiF7TgpwhSM Dgiv3iG/L22MEG0t+N99QR8aW066tyYgFwopHOSFJ9d+yan8eqU+hyliv+thSdwi jDt3NqBur+r3Ifn6aHk3/6oACVbPpzPkl/FWKy3t5iI4lSdruVmVt0xg5hFSjtqX 0HwxqyWCqBXQ9mDcm3ORFrDqxClyumb8K62w1movqz4gmYQfk3dI+5Zyg7G8Iv1K tefScoFMIK2Z+DBQUYDalno5OOeg/ig78UL6a/qVpSAA4yXClHejDg1Q7JQIcMNH w3+PDzgDA5asyfxmgSFxW2QyoMR0WJ1Gufrb1s5A8WfK8bVpXPaF+mVq -----END CERTIFICATE-----Generated at Sun Apr 6 09:22:01 2025 by rpki-client