$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2884A48504D6BB3B4A646F633909D872E544072.cer File: D2884A48504D6BB3B4A646F633909D872E544072.cer (raw, json) Hash identifier: jLfIdU3E0BITdEQ6FkUtFgkxoMTd0fFNRVbXLew/Ep4= Subject key identifier: D2:88:4A:48:50:4D:6B:B3:B4:A6:46:F6:33:90:9D:87:2E:54:40:72 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3E0874A4A5878834F59DA1A68A993051D99C9A05 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/D2884A48504D6BB3B4A646F633909D872E544072.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 17:45:26 +0000 Certificate not after: Wed 04 Feb 2026 17:50:26 +0000 Subordinate resources: AS: 273081 IP: 2803:1f90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 14:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:08:74:a4:a5:87:88:34:f5:9d:a1:a6:8a:99:30:51:d9:9c:9a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 17:45:26 2025 GMT Not After : Feb 4 17:50:26 2026 GMT Subject: CN=D2884A48504D6BB3B4A646F633909D872E544072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:d6:08:00:43:09:18:ca:08:99:18:d4:1b: a7:6d:2e:0a:17:e1:24:ba:e0:a7:39:34:bc:9b:7c: 76:9f:83:e1:7b:f9:c2:fb:04:b5:68:f3:77:ab:b0: 1e:85:54:af:ed:bc:45:a8:5d:d5:fd:c9:ca:92:e4: d9:9a:01:78:fd:43:49:07:32:a6:14:61:50:28:1b: 19:b5:f1:ed:b3:b0:82:35:8d:29:f5:54:50:99:6f: 09:33:90:e3:70:2e:82:fa:ce:76:ef:69:d4:8e:73: 3d:2a:ce:1a:23:30:73:4b:7a:30:1e:b4:f3:1f:c9: c6:72:6c:87:55:50:74:be:90:73:65:13:6f:8a:4d: b5:55:34:27:95:5e:f2:4f:6c:b9:a1:48:12:45:3d: ef:0d:cc:a1:02:8d:94:64:2f:ce:65:56:ec:03:5d: 8f:e8:0f:ee:50:9f:72:eb:22:eb:c6:94:9a:b4:cf: 7e:dd:93:58:e5:88:66:d3:96:75:6a:21:65:83:34: e1:83:5c:79:9f:37:eb:3a:a1:ab:8e:52:69:27:29: 7d:7a:53:43:89:9d:58:f1:f5:d0:de:47:ec:65:38: 0d:bd:21:8c:05:09:30:dc:ae:2a:47:f6:6a:8c:c0: 43:25:3d:5c:f4:7a:04:78:a7:f6:24:c5:8d:61:1c: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:88:4A:48:50:4D:6B:B3:B4:A6:46:F6:33:90:9D:87:2E:54:40:72 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/33A99BDB536F925B006921C3920F2A5C268719CA55396C2C3DEA4CD9DE552C2D/0/D2884A48504D6BB3B4A646F633909D872E544072.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1f90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273081 Signature Algorithm: sha256WithRSAEncryption 9f:d6:39:df:d0:d4:1a:f0:ec:1b:b5:a7:57:26:55:2b:5a:bc: ba:a1:2e:42:4c:64:26:c7:fa:d9:82:d4:1b:e6:6b:77:3c:bd: 66:ad:84:f1:78:6f:d1:b7:b5:6a:aa:24:25:a7:ff:5a:fa:e3: e5:1d:77:69:62:c5:4c:c1:85:ff:c1:f9:4e:37:ce:5d:43:e8: c9:1e:90:09:52:6d:b3:f6:0a:7f:ad:3d:e2:28:f7:14:53:0a: bf:21:9e:89:b3:46:45:97:e9:22:a1:58:69:90:41:cd:08:4a: 92:59:03:d9:3b:e3:74:31:28:7a:f9:2e:23:dd:69:04:c9:97: d2:1d:e1:2f:30:7c:d6:7a:09:92:c7:7b:15:db:b1:84:7d:19: 63:58:96:4d:7f:17:41:47:0a:5b:d1:c4:99:ff:7c:ab:2f:ce: 99:46:fe:8b:df:6f:4b:2c:7a:d9:97:cd:71:18:e1:f9:37:3a: 99:18:4f:fc:a6:78:1a:ff:1c:72:88:8d:d2:ec:8a:00:0c:a5: 58:99:2c:e6:c5:d6:8c:42:4f:88:39:d7:f5:15:45:33:b7:d8: ea:30:32:77:5a:62:9f:7c:4c:50:74:c5:b0:48:b2:2e:4d:d8: 04:ee:ac:b3:80:72:8e:05:1a:61:8a:59:20:08:cb:74:2a:60: 2f:bc:5c:64 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUPgh0pKWHiDT1naGmipkwUdmcmgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNzQ1MjZaFw0yNjAyMDQxNzUwMjZaMDMxMTAvBgNV BAMTKEQyODg0QTQ4NTA0RDZCQjNCNEE2NDZGNjMzOTA5RDg3MkU1NDQwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvdYIAEMJGMoImRjUG6dtLgoX 4SS64Kc5NLybfHafg+F7+cL7BLVo83ersB6FVK/tvEWoXdX9ycqS5NmaAXj9Q0kH MqYUYVAoGxm18e2zsII1jSn1VFCZbwkzkONwLoL6znbvadSOcz0qzhojMHNLejAe tPMfycZybIdVUHS+kHNlE2+KTbVVNCeVXvJPbLmhSBJFPe8NzKECjZRkL85lVuwD XY/oD+5Qn3LrIuvGlJq0z37dk1jliGbTlnVqIWWDNOGDXHmfN+s6oauOUmknKX16 U0OJnVjx9dDeR+xlOA29IYwFCTDcripH9mqMwEMlPVz0egR4p/YkxY1hHPWrAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSiEpIUE1rs7Sm RvYzkJ2HLlRAcjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzNBOTlCREI1MzZGOTI1QjAwNjkyMUMz OTIwRjJBNUMyNjg3MTlDQTU1Mzk2QzJDM0RFQTRDRDlERTU1MkMyRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zM0E5OUJEQjUzNkY5MjVCMDA2OTIxQzM5MjBGMkE1QzI2ODcxOUNBNTUz OTZDMkMzREVBNENEOURFNTUyQzJELzAvRDI4ODRBNDg1MDRENkJCM0I0QTY0NkY2 MzM5MDlEODcyRTU0NDA3Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMfkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKrkwDQYJKoZIhvcNAQELBQADggEBAJ/WOd/Q 1Brw7Bu1p1cmVStavLqhLkJMZCbH+tmC1Bvma3c8vWathPF4b9G3tWqqJCWn/1r6 4+Udd2lixUzBhf/B+U43zl1D6MkekAlSbbP2Cn+tPeIo9xRTCr8hnomzRkWX6SKh WGmQQc0ISpJZA9k743QxKHr5LiPdaQTJl9Id4S8wfNZ6CZLHexXbsYR9GWNYlk1/ F0FHClvRxJn/fKsvzplG/ovfb0ssetmXzXEY4fk3OpkYT/ymeBr/HHKIjdLsigAM pViZLObF1oxCT4g51/UVRTO32OowMndaYp98TFB0xbBIsi5N2ATurLOAco4FGmGK WSAIy3QqYC+8XGQ= -----END CERTIFICATE-----Generated at Mon Apr 7 08:09:31 2025 by rpki-client