$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer File: D09418521EA53A7D75F8FDF01F073B4955B0B259.cer (raw, json) Hash identifier: jzGt1xoM4uvrbvQBvEnhrk2t4OS5EEmq/mMSxuEhImc= Subject key identifier: D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: EAFBD59D5F0296160904E1D8C61E810D8F7E3D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 08:53:15 +0000 Certificate not after: Wed 04 Feb 2026 08:58:15 +0000 Subordinate resources: AS: 266762 IP: 45.234.88.0/22 IP: 2803:b720::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ea:fb:d5:9d:5f:02:96:16:09:04:e1:d8:c6:1e:81:0d:8f:7e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 08:53:15 2025 GMT Not After : Feb 4 08:58:15 2026 GMT Subject: CN=D09418521EA53A7D75F8FDF01F073B4955B0B259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:15:4f:35:3f:67:06:38:24:86:e7:ae:25: 96:99:c4:88:50:7b:07:eb:11:07:9e:f7:03:81:5a: 6c:59:84:72:00:6f:23:fa:8d:f1:01:7a:16:7a:45: 52:3a:d4:e8:18:e5:f1:4b:67:85:ff:59:9f:9d:69: bf:1e:72:72:c3:a2:68:96:07:40:64:c2:89:91:b1: e1:77:f8:1a:ed:99:1b:9e:52:83:38:65:62:34:67: 5f:76:5e:ef:3d:42:ec:39:11:a6:d5:78:63:47:72: da:63:12:18:1f:13:21:41:18:af:31:10:eb:dd:5c: 61:3d:d3:5c:eb:01:01:f9:1e:b0:3d:a3:4a:2d:df: 16:bb:36:aa:82:93:12:a5:d3:0a:65:60:f9:0a:f8: 6e:72:02:67:bd:d0:29:3c:6e:69:c9:b1:f4:76:e0: 69:5b:1f:da:3a:d1:4e:82:d2:60:cc:d7:d3:d9:c4: 3e:0c:be:0b:f0:ba:d5:a8:60:87:1d:f1:67:48:f4: 7b:57:09:6e:39:16:ba:21:d9:a8:1c:df:a7:6b:7a: 34:92:0b:de:f4:27:9f:9c:55:e6:f7:f8:c7:be:d2: f4:3e:d3:7a:4d:6d:23:d0:7f:57:9b:f7:26:97:d6: 22:8b:c9:bc:f1:6b:49:09:9f:1b:00:12:31:ee:d2: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.88.0/22 IPv6: 2803:b720::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266762 Signature Algorithm: sha256WithRSAEncryption 30:e2:f3:a1:cc:c7:f0:8a:50:5f:e0:a6:ca:a4:0a:8f:d8:3a: 5d:18:b3:67:c0:00:f4:75:56:33:c1:ae:12:d5:1a:b3:bf:c7: 0d:23:01:38:75:7b:3a:72:5b:ed:d6:3d:3a:a1:99:0e:fc:94: f7:f6:d4:13:09:7e:e0:1c:1f:8a:f8:e4:a9:02:df:48:5e:39: 00:b0:0d:1a:7a:47:b3:54:1c:31:1b:be:5b:d1:37:41:02:b4: 7a:76:24:31:04:cf:08:ff:4e:2d:51:13:fc:9c:d9:04:14:fe: da:1a:1d:59:d9:c6:72:0c:c9:19:29:eb:c4:36:cb:13:11:2c: 22:b3:c0:54:02:ad:a2:3e:89:e0:e8:7a:f0:76:ff:b3:c9:22: f1:20:a2:32:0a:79:29:ba:60:f3:7f:88:ad:af:81:e8:56:e6: 5e:9f:1e:77:d5:69:f0:ef:a9:60:1d:33:25:96:c7:99:f3:e1: 57:80:45:16:47:18:1b:69:2b:bb:d1:cb:e4:b7:dd:b0:bc:ee: 87:a7:1a:dc:0f:f5:05:65:15:b9:97:80:0b:9e:19:5b:79:dc: 10:ef:f4:b5:f4:c7:07:bd:c2:41:37:d4:63:b9:b9:7e:a8:f2: f7:1f:25:a4:80:5a:48:5d:b6:51:20:e1:bd:49:16:b2:50:c2: 2a:b0:6f:a7 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUAOr71Z1fApYWCQTh2MYegQ2Pfj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwODUzMTVaFw0yNjAyMDQwODU4MTVaMDMxMTAvBgNV BAMTKEQwOTQxODUyMUVBNTNBN0Q3NUY4RkRGMDFGMDczQjQ5NTVCMEIyNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wBVPNT9nBjgkhueuJZaZxIhQ ewfrEQee9wOBWmxZhHIAbyP6jfEBehZ6RVI61OgY5fFLZ4X/WZ+dab8ecnLDomiW B0BkwomRseF3+BrtmRueUoM4ZWI0Z192Xu89Quw5EabVeGNHctpjEhgfEyFBGK8x EOvdXGE901zrAQH5HrA9o0ot3xa7NqqCkxKl0wplYPkK+G5yAme90Ck8bmnJsfR2 4GlbH9o60U6C0mDM19PZxD4MvgvwutWoYIcd8WdI9HtXCW45Froh2agc36drejSS C970J5+cVeb3+Me+0vQ+03pNbSPQf1eb9yaX1iKLybzxa0kJnxsAEjHu0lG/AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQlBhSHqU6fXX4 /fAfBztJVbCyWTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkY5Q0VBOUEwRjA3MEM5QTk1MkI3QjhC Q0EyQkI1MTlFRTAwMTI4NUVDMkRGNDEzOTQxMTg5ODFCRkJCNTM4OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRjlDRUE5QTBGMDcwQzlBOTUyQjdCOEJDQTJCQjUxOUVFMDAxMjg1RUMy REY0MTM5NDExODk4MUJGQkI1Mzg5LzAvRDA5NDE4NTIxRUE1M0E3RDc1RjhGREYw MUYwNzNCNDk1NUIwQjI1OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLepYMA0EAgAC MAcDBQAoA7cgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSCjANBgkqhkiG9w0B AQsFAAOCAQEAMOLzoczH8IpQX+CmyqQKj9g6XRizZ8AA9HVWM8GuEtUas7/HDSMB OHV7OnJb7dY9OqGZDvyU9/bUEwl+4BwfivjkqQLfSF45ALANGnpHs1QcMRu+W9E3 QQK0enYkMQTPCP9OLVET/JzZBBT+2hodWdnGcgzJGSnrxDbLExEsIrPAVAKtoj6J 4Oh68Hb/s8ki8SCiMgp5Kbpg83+Ira+B6FbmXp8ed9Vp8O+pYB0zJZbHmfPhV4BF FkcYG2kru9HL5LfdsLzuh6ca3A/1BWUVuZeAC54ZW3ncEO/0tfTHB73CQTfUY7m5 fqjy9x8lpIBaSF22USDhvUkWslDCKrBvpw== -----END CERTIFICATE-----Generated at Sun Apr 6 09:22:54 2025 by rpki-client