$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer File: CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer (raw, json) Hash identifier: OcZqFQO0zzET1ifkvlYdLQG2TJXBuswKfBeNwmHVW/0= Subject key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5FBF6F3D1A5B2F4C619AB295108F9F3C862B2FF5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:26:45 +0000 Certificate not after: Thu 05 Feb 2026 00:31:45 +0000 Subordinate resources: AS: 18678 IP: 179.1.0.0 -- 179.1.143.255 IP: 179.1.176.0 -- 179.1.255.255 IP: 190.90.0.0/16 IP: 2800:310::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bf:6f:3d:1a:5b:2f:4c:61:9a:b2:95:10:8f:9f:3c:86:2b:2f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:26:45 2025 GMT Not After : Feb 5 00:31:45 2026 GMT Subject: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:40:ca:65:0a:a7:bc:d2:fb:29:d4:bd:79: b5:46:03:16:2b:1f:48:ce:ca:be:f2:c7:d7:21:51: c5:dd:d6:c1:db:51:f6:23:ab:a8:04:6b:ba:4d:a7: 44:b7:34:e5:80:8e:7e:c9:6b:1d:64:17:06:01:ff: 58:92:4d:f9:cd:69:0e:8d:b5:7c:e3:1c:74:c3:3a: a2:c1:a8:92:11:51:28:e9:b6:a7:26:ec:03:28:0f: 66:f0:87:11:7e:dc:db:73:0b:cb:03:cf:d5:04:2f: cb:44:4c:3d:6c:65:5e:8f:84:e2:d2:b4:60:ee:7c: 63:29:cd:11:c4:f1:77:a1:53:36:54:69:90:56:12: d0:66:5e:df:bc:c4:28:87:cb:24:02:31:5c:cf:7a: f1:cb:dc:b1:8a:4f:58:82:8d:c3:b7:19:02:b7:03: 1d:31:d5:aa:13:c4:b5:9f:43:29:94:e6:9f:58:c4: 6f:2c:2c:a9:b9:03:6d:f5:9d:52:47:29:2e:d4:11: 5b:2f:6d:be:e0:d4:08:42:3b:ba:8c:31:bc:99:2c: c5:fe:fa:47:3a:45:28:b8:4f:be:93:b6:58:ba:bc: 38:56:f5:66:28:da:af:86:c8:34:fa:21:54:66:c6: 5f:d4:12:28:97:c9:2f:b3:ed:a8:f2:e1:73:80:08: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.1.0.0-179.1.143.255 179.1.176.0-179.1.255.255 190.90.0.0/16 IPv6: 2800:310::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18678 Signature Algorithm: sha256WithRSAEncryption 2c:2d:1a:e0:00:ab:bb:c4:a4:93:7f:de:5a:b5:a4:b5:35:13: 73:a9:d9:44:4b:cb:c5:37:1c:3b:38:af:8d:51:c9:69:46:43: 05:ba:08:48:4e:4d:60:bb:a6:09:cf:7f:ca:49:5a:b5:c7:cd: ba:3c:d5:bd:f3:7f:83:fa:0f:fb:f1:f7:60:ae:a3:79:b7:56: ac:d8:60:d7:cb:a8:1d:1a:63:cc:cf:49:a2:6d:a7:a5:db:7e: 03:57:86:ef:ef:89:85:ce:01:e1:ab:8f:88:ed:8b:b6:81:fc: 87:19:03:d0:06:83:3d:de:07:84:b5:40:dc:5d:33:d5:db:22: 6e:bf:e4:42:59:93:b1:c4:30:47:f2:e6:50:7d:05:5d:3d:6c: 52:01:bd:83:88:6f:86:46:86:eb:6a:bf:cf:53:33:48:2b:4e: 93:0c:f1:75:26:e2:bd:e5:5f:b1:32:a6:60:68:92:16:3b:2f: d3:ac:d0:50:8b:5a:65:10:57:81:29:49:6b:85:af:2a:2b:ba: 30:04:72:25:92:4f:44:2b:21:28:16:80:ad:59:cd:68:07:7b: 62:17:e9:8c:28:57:f8:6f:32:92:2a:0b:a3:b1:31:ec:a6:4b: ff:25:58:0b:74:9d:2d:3d:66:0f:36:cc:5e:c3:1b:fb:08:6e: 6d:dd:4b:fa -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIUX79vPRpbL0xhmrKVEI+fPIYrL/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDI2NDVaFw0yNjAyMDUwMDMxNDVaMDMxMTAvBgNV BAMTKENCREU4OEM2NTMyMEQzRUJEOEVEMkY1NjhEODk2RjM5MzVFODdDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNKEDKZQqnvNL7KdS9ebVGAxYr H0jOyr7yx9chUcXd1sHbUfYjq6gEa7pNp0S3NOWAjn7Jax1kFwYB/1iSTfnNaQ6N tXzjHHTDOqLBqJIRUSjptqcm7AMoD2bwhxF+3NtzC8sDz9UEL8tETD1sZV6PhOLS tGDufGMpzRHE8XehUzZUaZBWEtBmXt+8xCiHyyQCMVzPevHL3LGKT1iCjcO3GQK3 Ax0x1aoTxLWfQymU5p9YxG8sLKm5A231nVJHKS7UEVsvbb7g1AhCO7qMMbyZLMX+ +kc6RSi4T76Ttli6vDhW9WYo2q+GyDT6IVRmxl/UEiiXyS+z7ajy4XOACIJFAgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTL3ojGUyDT69jt L1aNiW85Neh8xTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQz QkJENDk4QzNGMUNFRjFGODdGMzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0YxQ0VGMUY4N0Yz ODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2 OEQ4OTZGMzkzNUU4N0NDNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAlBAIAATAfMAsDAwCzAQMEBLMB gDALAwQEswGwAwMBswADAwC+WjANBAIAAjAHAwUAKAADEDAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgJI9jANBgkqhkiG9w0BAQsFAAOCAQEALC0a4ACru8Skk3/eWrWk tTUTc6nZREvLxTccOzivjVHJaUZDBboISE5NYLumCc9/yklatcfNujzVvfN/g/oP +/H3YK6jebdWrNhg18uoHRpjzM9Jom2npdt+A1eG7++Jhc4B4auPiO2LtoH8hxkD 0AaDPd4HhLVA3F0z1dsibr/kQlmTscQwR/LmUH0FXT1sUgG9g4hvhkaG62q/z1Mz SCtOkwzxdSbiveVfsTKmYGiSFjsv06zQUItaZRBXgSlJa4WvKiu6MARyJZJPRCsh KBaArVnNaAd7YhfpjChX+G8ykioLo7Ex7KZL/yVYC3SdLT1mDzbMXsMb+whubd1L +g== -----END CERTIFICATE-----Generated at Sun Apr 6 08:03:24 2025 by rpki-client