$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer File: D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer (raw, json) Hash identifier: QiXzs3zlFjdmPJgpmTmIlb46yEdnuUQ+S99ImGY/V+s= Subject key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7F530B780BBE289FD783069F163EB9AF1D74A9DE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 01:11:47 +0000 Certificate not after: Wed 04 Feb 2026 01:16:47 +0000 Subordinate resources: AS: 265746 IP: 128.201.168.0/22 IP: 2803:8bc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:53:0b:78:0b:be:28:9f:d7:83:06:9f:16:3e:b9:af:1d:74:a9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 01:11:47 2025 GMT Not After : Feb 4 01:16:47 2026 GMT Subject: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:57:f4:07:8e:ed:c5:0d:79:40:c8:38:b5: 2f:18:4d:60:e1:9e:91:69:7b:ec:09:75:37:7d:5b: d4:25:19:59:32:a6:ab:90:82:c2:1e:e2:44:33:ab: 00:3a:b9:69:7f:d5:aa:2c:67:0c:27:bf:25:21:f3: 8d:68:96:67:d1:cd:a4:5f:27:ad:71:c7:66:df:dd: 75:57:f3:0f:fd:3b:83:c2:fe:7c:6f:76:b8:87:7f: 4a:7c:4c:67:e3:35:b2:f8:47:98:0b:cd:7c:a6:d6: 5f:ab:f9:d6:b7:93:6f:85:73:cd:d2:ea:a7:3e:10: dd:be:e3:27:40:98:64:3f:d5:61:50:7a:c9:27:b2: 58:05:bc:f4:77:4b:b0:cc:0a:fc:ce:f8:e7:da:9d: 8d:6e:5e:f9:98:ee:22:25:64:f3:5e:d7:73:84:36: 1f:da:8b:ae:6c:1d:2a:f6:94:db:61:43:03:37:25: e6:07:28:5f:6a:ac:f4:27:8a:21:42:e6:e6:0c:c3: 0d:0d:c6:de:fc:5c:d6:69:5e:e6:29:e1:b1:84:45: 49:e2:22:0e:4d:e8:84:4e:68:22:8b:7a:d0:da:ef: 50:8c:53:e6:5a:bd:b9:53:71:db:d8:78:69:e0:31: ef:d8:da:49:d1:2c:92:11:34:90:c3:d5:10:78:d2: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.168.0/22 IPv6: 2803:8bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265746 Signature Algorithm: sha256WithRSAEncryption 3f:a6:18:32:02:ab:cc:da:d4:b3:01:e7:38:1b:b1:f8:75:9c: 92:60:36:dd:e7:bc:1c:25:68:e9:a0:d0:72:d0:67:53:d8:60: 13:19:4a:f0:89:00:1d:a0:e6:ec:9c:94:bf:f0:3f:6c:ac:38: 6c:ed:a7:fa:d2:85:02:cf:31:81:5d:35:a2:f5:e8:81:8f:23: 78:cc:5d:a0:03:ca:25:9f:58:99:1e:89:41:2c:2d:1d:09:f1: 7f:00:90:0a:e5:83:38:d2:c3:87:a8:2f:4a:21:4e:17:8d:48: f7:f4:e3:7e:25:31:8e:47:85:4f:1e:b1:03:3f:dd:9f:f2:58: e1:16:80:55:89:05:37:0b:21:8b:a8:1d:b2:a0:61:94:da:46: a0:0d:99:cb:57:82:8a:99:19:40:1f:48:fc:e6:ea:d6:87:28: a7:c9:f3:30:f4:bc:f2:a0:f8:09:71:ac:27:5c:ab:43:9a:9f: 00:a7:8e:59:6f:73:18:99:13:00:28:76:44:4f:fc:b5:43:4e: 4c:d6:cd:36:23:65:40:d2:be:50:8b:84:cf:3a:7b:6c:25:68: 18:25:68:86:dd:da:1f:80:de:a4:26:7c:a5:21:24:61:ad:f4: 96:e9:1b:ac:b1:9b:d4:0e:0b:d6:0f:61:c2:1e:4c:e3:55:0d: a6:a8:6e:dd -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUf1MLeAu+KJ/XgwafFj65rx10qd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMTExNDdaFw0yNjAyMDQwMTE2NDdaMDMxMTAvBgNV BAMTKEQ1NDkwQUM2OTNCMDBDMUJGNTE1ODJCMTY5MUZDMkRDNDZCNzFGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK71f0B47txQ15QMg4tS8YTWDh npFpe+wJdTd9W9QlGVkypquQgsIe4kQzqwA6uWl/1aosZwwnvyUh841olmfRzaRf J61xx2bf3XVX8w/9O4PC/nxvdriHf0p8TGfjNbL4R5gLzXym1l+r+da3k2+Fc83S 6qc+EN2+4ydAmGQ/1WFQesknslgFvPR3S7DMCvzO+OfanY1uXvmY7iIlZPNe13OE Nh/ai65sHSr2lNthQwM3JeYHKF9qrPQniiFC5uYMww0Nxt78XNZpXuYp4bGERUni Ig5N6IROaCKLetDa71CMU+ZavblTcdvYeGngMe/Y2knRLJIRNJDD1RB40sodAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVSQrGk7AMG/UV grFpH8LcRrcfqTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTUzRTkxNUM3OEIxMTVFRDFFRjZCOEQ2 MTM0QTJENjREQjY1MTUyMjNCMDgyRkQ0RkIyN0FCODE0NkFBODhBMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NTNFOTE1Qzc4QjExNUVEMUVGNkI4RDYxMzRBMkQ2NERCNjUxNTIyM0Iw ODJGRDRGQjI3QUI4MTQ2QUE4OEEyLzAvRDU0OTBBQzY5M0IwMEMxQkY1MTU4MkIx NjkxRkMyREM0NkI3MUZBOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCgMmoMA0EAgAC MAcDBQAoA4vAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOEjANBgkqhkiG9w0B AQsFAAOCAQEAP6YYMgKrzNrUswHnOBux+HWckmA23ee8HCVo6aDQctBnU9hgExlK 8IkAHaDm7JyUv/A/bKw4bO2n+tKFAs8xgV01ovXogY8jeMxdoAPKJZ9YmR6JQSwt HQnxfwCQCuWDONLDh6gvSiFOF41I9/TjfiUxjkeFTx6xAz/dn/JY4RaAVYkFNwsh i6gdsqBhlNpGoA2Zy1eCipkZQB9I/Obq1ocop8nzMPS88qD4CXGsJ1yrQ5qfAKeO WW9zGJkTACh2RE/8tUNOTNbNNiNlQNK+UIuEzzp7bCVoGCVoht3aH4DepCZ8pSEk Ya30lukbrLGb1A4L1g9hwh5M41UNpqhu3Q== -----END CERTIFICATE-----Generated at Mon Apr 7 00:58:02 2025 by rpki-client