$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer File: C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer (raw, json) Hash identifier: 3t3ACYsdQHuRyp6e5Rd8ZCv9pIOkIaUlPpGNKdAr9ok= Subject key identifier: C9:A2:3B:0E:44:88:1F:29:E5:47:66:EB:C8:C9:B7:E6:71:B4:19:C9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 49504944E311A9EFF8744AA9608BA0920FD00CCC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:11:55 +0000 Certificate not after: Wed 04 Feb 2026 05:16:55 +0000 Subordinate resources: AS: 263235 IP: 192.100.186.0/23 IP: 2803:70e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:50:49:44:e3:11:a9:ef:f8:74:4a:a9:60:8b:a0:92:0f:d0:0c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:11:55 2025 GMT Not After : Feb 4 05:16:55 2026 GMT Subject: CN=C9A23B0E44881F29E54766EBC8C9B7E671B419C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:95:af:ab:4e:d5:ac:0e:50:80:b4:06:ee: 6e:81:bd:d2:be:be:d9:90:86:f6:5f:e3:3a:8b:bf: 18:8f:1c:c4:96:59:7d:ab:ec:65:22:34:b2:ec:76: 9f:0b:7a:44:64:38:a5:e7:b0:8d:a2:e5:19:c8:41: 4b:b7:89:73:1a:25:b8:09:3b:93:7c:f5:e4:18:87: 3e:09:17:d8:dc:a6:cf:de:89:6b:07:7c:73:80:4b: ef:d4:25:35:44:42:6c:c9:20:dc:3a:c5:41:36:4b: 42:4e:75:55:d4:91:da:a4:b2:63:0a:3b:52:99:50: 73:b8:b6:64:c9:25:67:2c:ee:fc:81:ad:bf:b9:64: da:4f:f3:f8:cc:e4:c8:db:0d:42:cf:7c:61:10:4e: c8:7f:0c:55:55:f2:a3:7a:92:70:d6:38:4d:f2:17: a8:d0:0b:57:75:cd:e4:26:59:61:39:5d:ca:f7:d4: 05:07:6a:10:6f:f5:0a:cb:ab:fe:43:36:49:48:5d: d7:23:97:b2:87:48:0c:6b:e1:01:1b:d8:42:63:21: 6b:f5:3b:79:c7:b3:01:ba:4f:8d:33:6a:77:94:f8: a9:6c:5d:b0:96:31:f4:6b:e1:31:cf:90:2b:d1:d1: 05:d8:6f:0c:b3:d3:04:c5:64:3a:82:f8:58:aa:a9: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:A2:3B:0E:44:88:1F:29:E5:47:66:EB:C8:C9:B7:E6:71:B4:19:C9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.100.186.0/23 IPv6: 2803:70e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263235 Signature Algorithm: sha256WithRSAEncryption 01:28:d0:10:f0:d8:7b:79:4c:a9:86:db:87:a5:6d:a4:bc:31: 70:c3:0b:cf:9f:4f:4e:b8:1a:b4:41:48:ab:d1:df:c2:f6:20: a9:af:13:c1:ba:8b:e7:f3:47:26:5c:e5:9f:cc:22:4e:ff:d5: 22:78:2b:d3:57:6b:a2:d6:9b:0b:ad:93:83:8d:3a:72:cb:18: 3b:b4:f2:69:ca:53:db:0e:81:a6:06:f2:fc:be:cc:9a:2d:1f: 0b:af:cc:3a:28:fa:1e:64:ff:07:5b:24:7d:94:4f:d3:1f:bd: 05:1e:92:e1:3c:03:8f:4d:7a:e4:14:4b:41:c7:9f:e1:57:ea: fc:e0:d1:d7:01:60:31:b2:2b:5d:46:42:56:5b:98:86:d9:07: 8a:74:a2:5b:d0:00:7a:92:eb:5f:e7:cc:38:5d:c8:be:fc:b8: f3:c3:2b:a6:ac:ad:06:d4:cc:e5:df:39:a6:70:9d:ae:31:21: 1a:2d:e2:37:61:71:df:a7:71:54:75:0d:c2:ac:a7:2c:50:35: 21:7e:3e:ab:8b:b1:27:1e:ba:60:48:0b:50:95:43:33:fe:da: a8:35:01:43:bd:3a:c0:2e:91:1d:d5:43:d6:8d:f4:4c:23:27: 8b:40:95:3b:5c:4c:56:72:dd:27:c3:f1:30:61:b3:e1:22:21: 05:f7:3d:2b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSVBJROMRqe/4dEqpYIugkg/QDMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTExNTVaFw0yNjAyMDQwNTE2NTVaMDMxMTAvBgNV BAMTKEM5QTIzQjBFNDQ4ODFGMjlFNTQ3NjZFQkM4QzlCN0U2NzFCNDE5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfZWvq07VrA5QgLQG7m6BvdK+ vtmQhvZf4zqLvxiPHMSWWX2r7GUiNLLsdp8LekRkOKXnsI2i5RnIQUu3iXMaJbgJ O5N89eQYhz4JF9jcps/eiWsHfHOAS+/UJTVEQmzJINw6xUE2S0JOdVXUkdqksmMK O1KZUHO4tmTJJWcs7vyBrb+5ZNpP8/jM5MjbDULPfGEQTsh/DFVV8qN6knDWOE3y F6jQC1d1zeQmWWE5Xcr31AUHahBv9QrLq/5DNklIXdcjl7KHSAxr4QEb2EJjIWv1 O3nHswG6T40zaneU+KlsXbCWMfRr4THPkCvR0QXYbwyz0wTFZDqC+FiqqQTtAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJojsORIgfKeVH ZuvIybfmcbQZyTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDgxQUM4Qjc2OUY5OTg2NENDNEJENkI1 MzJGMkMwNTdFRDVFQ0RCQUEwRUUxNUFEOEM0NTlCMjIzRUE1NzQ0Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80ODFBQzhCNzY5Rjk5ODY0Q0M0QkQ2QjUzMkYyQzA1N0VENUVDREJBQTBF RTE1QUQ4QzQ1OUIyMjNFQTU3NDQ3LzAvQzlBMjNCMEU0NDg4MUYyOUU1NDc2NkVC QzhDOUI3RTY3MUI0MTlDOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwGS6MA0EAgAC MAcDBQAoA3DgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEQzANBgkqhkiG9w0B AQsFAAOCAQEAASjQEPDYe3lMqYbbh6VtpLwxcMMLz59PTrgatEFIq9HfwvYgqa8T wbqL5/NHJlzln8wiTv/VIngr01drotabC62Tg406cssYO7TyacpT2w6Bpgby/L7M mi0fC6/MOij6HmT/B1skfZRP0x+9BR6S4TwDj0165BRLQcef4Vfq/ODR1wFgMbIr XUZCVluYhtkHinSiW9AAepLrX+fMOF3Ivvy488MrpqytBtTM5d85pnCdrjEhGi3i N2Fx36dxVHUNwqynLFA1IX4+q4uxJx66YEgLUJVDM/7aqDUBQ706wC6RHdVD1o30 TCMni0CVO1xMVnLdJ8PxMGGz4SIhBfc9Kw== -----END CERTIFICATE-----Generated at Sun Apr 6 09:19:12 2025 by rpki-client