$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.cer File: C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.cer (raw, json) Hash identifier: R7piI7WN5YtMh+WhvNr7fT5nO32No8ECXJDycPti8UE= Subject key identifier: C6:DB:FB:09:D8:3A:EC:AE:EA:3B:B7:BF:A8:B9:F9:28:51:4F:E7:D0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2B7E9DB5E3A8BD9B7809CA116F5AAD2622FFEBB2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:13:20 +0000 Certificate not after: Thu 05 Feb 2026 00:18:20 +0000 Subordinate resources: AS: 267847 IP: 45.174.48.0/22 IP: 2803:2c60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7e:9d:b5:e3:a8:bd:9b:78:09:ca:11:6f:5a:ad:26:22:ff:eb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:13:20 2025 GMT Not After : Feb 5 00:18:20 2026 GMT Subject: CN=C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:bc:9c:35:1b:2b:2c:71:93:4f:06:32:74: 44:74:fb:f0:9d:95:eb:ac:00:d3:46:96:67:43:9a: fa:54:f4:93:59:44:5d:bc:8e:e3:d8:1a:a4:1c:08: 59:21:5d:00:a7:5b:7e:2e:e0:59:8c:73:00:f8:c3: 23:ae:5a:46:8a:fe:9b:86:9e:41:0e:7b:6b:00:ee: 4c:cc:13:6e:f4:b4:8b:2a:d8:68:19:91:6c:b6:50: d0:cf:07:b1:15:cd:4d:24:06:c1:a8:52:b7:22:3e: 8a:2a:58:2a:ac:85:c1:99:23:c3:44:9d:b0:ec:36: c7:e2:20:df:15:ce:a2:e0:98:3d:28:15:ce:24:ef: c7:4b:b3:c6:01:77:db:59:06:0a:bf:61:f5:54:1e: bd:d9:67:38:ec:20:84:7b:c8:15:8b:58:6b:aa:92: a8:84:ea:e5:4f:f2:50:4b:5b:9e:52:78:85:78:cc: 9c:db:6f:50:27:87:fd:b3:72:f7:34:d6:a0:62:7c: 85:d6:18:6e:8c:76:68:fd:e9:8e:84:cc:69:74:62: 59:f7:46:72:75:7e:e6:fb:92:f8:ce:35:69:d8:16: a0:09:9e:90:70:cf:84:9a:41:08:7f:8d:75:2c:17: 56:30:02:72:28:08:3c:84:b7:a7:ee:6a:99:ca:3c: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:DB:FB:09:D8:3A:EC:AE:EA:3B:B7:BF:A8:B9:F9:28:51:4F:E7:D0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.48.0/22 IPv6: 2803:2c60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267847 Signature Algorithm: sha256WithRSAEncryption a2:19:8c:81:3d:e0:f8:f7:c7:83:86:ca:71:1d:a0:86:d5:c9: b6:6c:58:20:e9:a5:4f:ad:ec:69:18:9a:28:ad:64:cd:d3:06: f0:cc:c5:51:2c:38:54:9c:dc:da:f5:cc:8e:02:9a:6f:9c:77: 58:8a:d3:6c:c6:53:83:63:be:a5:66:50:0f:ed:3e:77:17:59: 23:1d:7d:38:b9:46:63:ff:0c:c0:35:0a:82:f7:0e:08:b0:b9: 06:7b:15:02:0e:b1:b4:04:e9:4b:ea:b7:3d:a9:2d:eb:eb:20: 50:60:30:44:f9:fb:e4:db:90:da:7d:08:dd:6a:a1:86:9a:8a: 09:56:2d:69:f5:37:e9:6b:a4:38:1f:e4:b6:05:ae:3a:23:42: 85:34:1d:29:f8:49:ea:d7:34:d3:ab:8d:c2:ee:31:c6:c4:ed: e4:38:dc:5b:a5:36:a5:81:5b:5d:68:16:0a:0d:2d:6d:de:ce: 4f:26:ec:f8:eb:91:43:df:4b:f9:69:fb:39:8b:cc:1b:53:a3: 21:4c:a7:ea:37:c8:1f:cf:b6:63:b4:18:e9:3a:93:4b:e3:dd: d6:b3:6b:96:68:b0:c2:6e:67:f6:f6:87:d2:ea:f4:54:23:1e: ab:44:90:05:dd:34:27:7c:7d:d0:e1:3d:ae:b9:7c:24:53:11: a4:1d:04:77 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUK36dteOovZt4CcoRb1qtJiL/67IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDEzMjBaFw0yNjAyMDUwMDE4MjBaMDMxMTAvBgNV BAMTKEM2REJGQjA5RDgzQUVDQUVFQTNCQjdCRkE4QjlGOTI4NTE0RkU3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+LycNRsrLHGTTwYydER0+/Cd leusANNGlmdDmvpU9JNZRF28juPYGqQcCFkhXQCnW34u4FmMcwD4wyOuWkaK/puG nkEOe2sA7kzME270tIsq2GgZkWy2UNDPB7EVzU0kBsGoUrciPooqWCqshcGZI8NE nbDsNsfiIN8VzqLgmD0oFc4k78dLs8YBd9tZBgq/YfVUHr3ZZzjsIIR7yBWLWGuq kqiE6uVP8lBLW55SeIV4zJzbb1Anh/2zcvc01qBifIXWGG6Mdmj96Y6EzGl0Yln3 RnJ1fub7kvjONWnYFqAJnpBwz4SaQQh/jXUsF1YwAnIoCDyEt6fuapnKPATPAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTG2/sJ2Drsruo7 t7+oufkoUU/n0DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkQ0NUJGMDQyNzNENzk0NjE1Mzg5RkM3 RTEyRUNCQUM3RUE1MjQ3OEYwQjFENDc0OTEzMjY2Q0Y4RUU1ODk1NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRDQ1QkYwNDI3M0Q3OTQ2MTUzODlGQzdFMTJFQ0JBQzdFQTUyNDc4RjBC MUQ0NzQ5MTMyNjZDRjhFRTU4OTU0LzAvQzZEQkZCMDlEODNBRUNBRUVBM0JCN0JG QThCOUY5Mjg1MTRGRTdEMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa4wMA0EAgAC MAcDBQAoAyxgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWRzANBgkqhkiG9w0B AQsFAAOCAQEAohmMgT3g+PfHg4bKcR2ghtXJtmxYIOmlT63saRiaKK1kzdMG8MzF USw4VJzc2vXMjgKab5x3WIrTbMZTg2O+pWZQD+0+dxdZIx19OLlGY/8MwDUKgvcO CLC5BnsVAg6xtATpS+q3Pakt6+sgUGAwRPn75NuQ2n0I3WqhhpqKCVYtafU36Wuk OB/ktgWuOiNChTQdKfhJ6tc006uNwu4xxsTt5DjcW6U2pYFbXWgWCg0tbd7OTybs +OuRQ99L+Wn7OYvMG1OjIUyn6jfIH8+2Y7QY6TqTS+Pd1rNrlmiwwm5n9vaH0ur0 VCMeq0SQBd00J3x90OE9rrl8JFMRpB0Edw== -----END CERTIFICATE-----Generated at Sat Apr 12 09:51:56 2025 by rpki-client