$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer File: CDE9A086136079BC935532C1329B043B4912BF62.cer (raw, json) Hash identifier: 8eQwCApv6Z5IVi2U+3pVDS8azpiIfYEeOw1M5rw2/SQ= Subject key identifier: CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0303860BD6BA85C50A4A8083C51F698B75C8ECD9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:12 +0000 Certificate not after: Tue 03 Feb 2026 18:59:12 +0000 Subordinate resources: AS: 269833 IP: 45.188.20.0/22 IP: 2803:cf60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:03:86:0b:d6:ba:85:c5:0a:4a:80:83:c5:1f:69:8b:75:c8:ec:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:12 2025 GMT Not After : Feb 3 18:59:12 2026 GMT Subject: CN=CDE9A086136079BC935532C1329B043B4912BF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:a3:81:61:d8:7a:59:5f:cb:40:23:21:51: 1a:4b:b1:8e:86:c4:10:b6:58:b3:9b:a7:f6:ad:47: df:05:d9:35:e0:7e:9e:17:fe:ed:24:09:27:7d:f6: 3c:a7:2e:27:50:f8:4a:1d:ef:07:cd:08:32:a4:45: 16:27:73:fe:d1:c0:7b:5c:9f:76:40:c1:78:c6:ec: 69:33:18:b6:57:91:6c:7a:cf:42:4d:b8:63:9d:60: 25:f2:57:5b:fa:b6:9f:7d:6f:88:e4:fb:95:48:dd: 87:fd:73:15:e5:16:d8:f3:8a:1f:50:f2:c2:6a:83: 7a:49:a8:36:14:f6:bb:2d:d5:ac:0e:9a:69:72:6b: 53:08:c0:d7:39:07:b6:38:86:62:33:66:31:a9:f6: cf:06:9c:89:31:b4:91:e5:b0:a2:b0:e4:76:f9:a0: d1:b4:96:66:c5:0a:75:42:05:1f:f4:29:4c:2a:60: 70:b6:a0:cd:44:a2:eb:74:15:2d:64:45:6a:66:af: 49:75:ce:66:0a:31:88:bc:86:58:a2:6a:68:42:b9: d4:5b:3a:9b:06:72:d5:35:40:b7:85:a8:cb:d7:80: 48:05:b9:47:b3:ed:02:88:00:b1:eb:76:fd:0c:3b: 1d:f3:b8:78:24:be:98:01:60:8d:35:c8:50:8d:5e: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.20.0/22 IPv6: 2803:cf60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269833 Signature Algorithm: sha256WithRSAEncryption 77:03:be:f5:6c:c7:b6:3b:6e:19:77:f5:f4:5c:73:8e:7e:4b: 18:48:76:ce:5b:70:0e:c1:02:db:0e:93:2f:78:41:0c:5a:76: fc:0e:2b:7b:31:90:ce:fe:5f:d0:95:07:97:24:a4:2e:1b:b1: c3:da:79:09:4c:c0:21:f7:15:85:9e:f5:37:2a:ef:33:db:97: 74:bd:f2:61:19:02:99:27:85:45:bd:78:bb:80:d0:33:4f:b7: 61:9c:87:b1:da:8c:cd:c9:65:03:3d:c2:fc:2f:5e:8b:90:ee: 80:4d:47:58:4b:7e:58:79:f0:28:26:7b:ff:02:a5:eb:a6:78: a0:17:73:21:7d:07:3e:c4:88:ec:5f:a2:f1:58:d7:5d:a1:b0: 34:b2:22:bc:ac:7f:f8:20:34:c5:0b:34:36:0a:dc:d3:70:a1: d1:2b:79:16:13:83:0c:33:e8:f1:da:37:ef:29:4e:52:b0:f8: a5:45:d1:bf:e8:01:6f:b3:5d:77:6c:d0:1e:17:e1:a3:ef:15: 89:cc:d4:b2:9b:63:80:7c:e9:12:54:ac:05:e9:e8:b9:2e:7f: 38:6a:72:9a:31:f6:74:46:35:61:b9:bc:e7:a4:14:84:b4:05: a3:f7:93:39:49:1d:b8:e8:cc:ab:43:ab:3a:82:1d:5f:f8:f4: 8d:69:37:e9 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUAwOGC9a6hcUKSoCDxR9pi3XI7NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MTJaFw0yNjAyMDMxODU5MTJaMDMxMTAvBgNV BAMTKENERTlBMDg2MTM2MDc5QkM5MzU1MzJDMTMyOUIwNDNCNDkxMkJGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c6OBYdh6WV/LQCMhURpLsY6G xBC2WLObp/atR98F2TXgfp4X/u0kCSd99jynLidQ+Eod7wfNCDKkRRYnc/7RwHtc n3ZAwXjG7GkzGLZXkWx6z0JNuGOdYCXyV1v6tp99b4jk+5VI3Yf9cxXlFtjzih9Q 8sJqg3pJqDYU9rst1awOmmlya1MIwNc5B7Y4hmIzZjGp9s8GnIkxtJHlsKKw5Hb5 oNG0lmbFCnVCBR/0KUwqYHC2oM1Eout0FS1kRWpmr0l1zmYKMYi8hliiamhCudRb OpsGctU1QLeFqMvXgEgFuUez7QKIALHrdv0MOx3zuHgkvpgBYI01yFCNXj2TAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTN6aCGE2B5vJNV MsEymwQ7SRK/YjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDVDRUZEMTE0OUI3ODg5MzY1QjI1ODQ3 QjMyRkI0NDc1MjA4MkU1QTU1MUE2MUU3OUI0NkNBMjcxMDBFRDkzRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENUNFRkQxMTQ5Qjc4ODkzNjVCMjU4NDdCMzJGQjQ0NzUyMDgyRTVBNTUx QTYxRTc5QjQ2Q0EyNzEwMEVEOTNGLzAvQ0RFOUEwODYxMzYwNzlCQzkzNTUzMkMx MzI5QjA0M0I0OTEyQkY2Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbwUMA0EAgAC MAcDBQAoA89gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeCTANBgkqhkiG9w0B AQsFAAOCAQEAdwO+9WzHtjtuGXf19Fxzjn5LGEh2zltwDsEC2w6TL3hBDFp2/A4r ezGQzv5f0JUHlySkLhuxw9p5CUzAIfcVhZ71NyrvM9uXdL3yYRkCmSeFRb14u4DQ M0+3YZyHsdqMzcllAz3C/C9ei5DugE1HWEt+WHnwKCZ7/wKl66Z4oBdzIX0HPsSI 7F+i8VjXXaGwNLIivKx/+CA0xQs0Ngrc03Ch0St5FhODDDPo8do37ylOUrD4pUXR v+gBb7Ndd2zQHhfho+8ViczUsptjgHzpElSsBenouS5/OGpymjH2dEY1Ybm856QU hLQFo/eTOUkduOjMq0OrOoIdX/j0jWk36Q== -----END CERTIFICATE-----Generated at Mon Apr 14 13:54:29 2025 by rpki-client