$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer File: D7363F403DF6F6AE0C574D827665A0235A1DED01.cer (raw, json) Hash identifier: kYzKfoAL/rpMHbPHQz6k0Mzet1STqksxu2g3CtHlqSs= Subject key identifier: D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 500C529DC34F493FCEF2FCC586F845EE52B70EC5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 02:24:06 +0000 Certificate not after: Thu 05 Feb 2026 02:29:06 +0000 Subordinate resources: AS: 52473 IP: 186.148.120.0/21 IP: 190.8.184.0/21 IP: 2803:eb00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0c:52:9d:c3:4f:49:3f:ce:f2:fc:c5:86:f8:45:ee:52:b7:0e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 02:24:06 2025 GMT Not After : Feb 5 02:29:06 2026 GMT Subject: CN=D7363F403DF6F6AE0C574D827665A0235A1DED01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:f7:d6:a4:fc:85:50:ce:1c:23:0f:df:0c: 9c:58:f2:00:47:07:3f:a8:75:88:68:0d:e6:30:77: 80:43:14:89:5c:3d:17:6b:68:38:ab:b8:6c:e9:5e: a2:f5:1a:52:9b:71:8d:5d:56:94:5b:7a:c2:51:95: 3d:d4:78:83:98:13:41:0f:5d:7d:84:30:2c:40:bd: 41:a7:fe:33:1d:66:7f:79:16:79:db:ce:61:81:36: ae:f1:90:6b:1d:dd:93:70:e5:d1:2a:7f:38:dd:93: f4:1d:38:23:79:97:eb:36:5c:06:b8:85:97:40:e4: 1f:74:10:29:1f:63:b9:da:f1:2f:17:85:e9:ea:40: 02:72:43:10:3b:a5:9a:d8:08:97:e9:77:18:c7:5b: ae:18:ec:56:c9:b9:88:c7:39:2c:0d:32:26:78:a1: 35:0a:16:29:32:a8:6f:62:03:06:e5:77:16:7f:15: e8:e1:fe:1a:c9:1b:e7:0e:e4:e8:26:61:28:e8:49: ae:35:75:f6:46:88:76:0d:b5:e5:e4:e5:db:04:c9: d2:ac:73:94:5f:cc:d3:06:94:fe:23:e0:91:01:d2: 03:7b:8d:4d:73:6b:9a:0a:20:fc:d4:7b:1d:2b:a3: 53:39:5c:db:26:f0:6b:a3:03:7a:72:ae:fb:74:74: a7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.148.120.0/21 190.8.184.0/21 IPv6: 2803:eb00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52473 Signature Algorithm: sha256WithRSAEncryption 9a:95:81:2b:3b:aa:a2:4a:e0:ad:aa:7f:f4:3b:84:9d:26:ea: 0b:87:2a:06:b8:55:1d:36:5f:f5:6d:27:be:bd:a3:10:eb:07: e4:d5:5d:12:7d:3a:d6:82:eb:c5:98:87:98:49:40:1f:0a:f2: 0c:a1:e0:60:d0:f2:c3:54:69:32:65:23:83:8c:4f:13:a0:4c: d3:10:36:62:6a:d2:d5:5b:fd:44:cc:d9:57:20:e3:e9:37:ac: 60:fd:98:82:85:33:b1:c7:00:46:27:e1:e4:ac:47:f0:95:1b: 6c:90:02:65:91:de:eb:2b:10:b0:e8:12:a3:e9:4c:8b:32:fd: 7d:23:5f:1e:5b:6b:8f:7a:bc:27:3e:00:40:9e:2e:03:ed:a6: 45:6e:0f:66:63:b4:77:0e:bd:4e:d5:59:57:fb:10:4a:11:be: 9f:09:f3:9e:73:be:b3:d1:59:96:a1:9c:31:76:2d:a0:d5:ea: 0d:b4:cc:14:e6:ad:c1:31:59:77:9d:03:35:21:4b:69:3f:22: 10:0f:43:88:10:d5:94:59:e9:8d:45:05:5b:86:48:b5:05:ae: 72:6d:47:14:b4:e5:41:7e:8d:b0:4d:9f:e3:36:17:39:75:7e: 53:2b:3a:f4:85:14:6f:a3:67:cc:3d:9e:58:41:27:20:2c:b3: c0:5f:9f:e6 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUUAxSncNPST/O8vzFhvhF7lK3DsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMjI0MDZaFw0yNjAyMDUwMjI5MDZaMDMxMTAvBgNV BAMTKEQ3MzYzRjQwM0RGNkY2QUUwQzU3NEQ4Mjc2NjVBMDIzNUExREVEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxeffWpPyFUM4cIw/fDJxY8gBH Bz+odYhoDeYwd4BDFIlcPRdraDiruGzpXqL1GlKbcY1dVpRbesJRlT3UeIOYE0EP XX2EMCxAvUGn/jMdZn95FnnbzmGBNq7xkGsd3ZNw5dEqfzjdk/QdOCN5l+s2XAa4 hZdA5B90ECkfY7na8S8XhenqQAJyQxA7pZrYCJfpdxjHW64Y7FbJuYjHOSwNMiZ4 oTUKFikyqG9iAwbldxZ/Fejh/hrJG+cO5OgmYSjoSa41dfZGiHYNteXk5dsEydKs c5RfzNMGlP4j4JEB0gN7jU1za5oKIPzUex0ro1M5XNsm8GujA3pyrvt0dKftAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXNj9APfb2rgxX TYJ2ZaAjWh3tATAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkFGOEEzQkRGQTEzQUQ0MkRCNjQyNkVB NDNFNDMyRDkxQkVEOEFCQjlFMzM4RDQ3NzBDMTI1MjEwRkFGNkRCNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QUY4QTNCREZBMTNBRDQyREI2NDI2RUE0M0U0MzJEOTFCRUQ4QUJCOUUz MzhENDc3MEMxMjUyMTBGQUY2REI0LzAvRDczNjNGNDAzREY2RjZBRTBDNTc0RDgy NzY2NUEwMjM1QTFERUQwMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDupR4AwQDvgi4 MA0EAgACMAcDBQAoA+sAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDM+TANBgkq hkiG9w0BAQsFAAOCAQEAmpWBKzuqokrgrap/9DuEnSbqC4cqBrhVHTZf9W0nvr2j EOsH5NVdEn061oLrxZiHmElAHwryDKHgYNDyw1RpMmUjg4xPE6BM0xA2YmrS1Vv9 RMzZVyDj6TesYP2YgoUzsccARifh5KxH8JUbbJACZZHe6ysQsOgSo+lMizL9fSNf Hltrj3q8Jz4AQJ4uA+2mRW4PZmO0dw69TtVZV/sQShG+nwnznnO+s9FZlqGcMXYt oNXqDbTMFOatwTFZd50DNSFLaT8iEA9DiBDVlFnpjUUFW4ZItQWucm1HFLTlQX6N sE2f4zYXOXV+Uys69IUUb6NnzD2eWEEnICyzwF+f5g== -----END CERTIFICATE-----Generated at Sat Apr 12 09:54:13 2025 by rpki-client