$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer File: D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer (raw, json) Hash identifier: kdQ1PQ3xq/ReiPc0dSapZUQZkO2K5LV5EYV0fF3rW9c= Subject key identifier: D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5613FF3C967D29171FE5425E835784E95044E600 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 07:43:08 +0000 Certificate not after: Wed 04 Feb 2026 07:48:08 +0000 Subordinate resources: AS: 267921 IP: 45.177.72.0 -- 45.177.74.255 IP: 2803:ce60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:13:ff:3c:96:7d:29:17:1f:e5:42:5e:83:57:84:e9:50:44:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 07:43:08 2025 GMT Not After : Feb 4 07:48:08 2026 GMT Subject: CN=D931FE44222442BBDEDD8D7CA42FDACF1AB78A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:bd:53:4b:4e:12:3f:14:27:7a:f5:ba:a1: 6e:42:77:95:8b:81:30:ce:b5:e1:09:5f:a2:42:85: 10:5a:b3:c3:e7:8c:4d:7c:ae:68:9f:69:b0:28:66: 30:03:77:b2:1e:b3:0b:da:66:6b:c4:a1:d5:58:ed: 7f:ff:86:2a:59:bf:fa:78:63:ba:38:a7:21:67:8b: 9a:ee:ea:bc:c0:f3:dd:43:b6:d9:b1:7f:1e:d6:58: 3f:6f:5f:ac:90:0d:9a:d0:b0:33:43:7d:41:1f:78: 62:5d:5c:4f:45:7b:f5:6b:e5:52:06:af:21:59:24: 9c:12:ce:ce:e0:d1:16:eb:ef:da:da:38:41:fc:79: 04:a6:ee:a5:9a:db:a8:ca:7f:e7:a9:46:30:c1:3b: dd:e4:b4:17:85:d3:31:02:d9:dd:cd:d4:df:7c:7c: bf:ad:e1:28:ee:df:c5:78:f4:f5:8a:35:b9:ba:3d: 51:92:26:08:f3:cc:ce:8d:74:ef:3b:69:0f:52:ff: 40:34:3c:91:74:cd:3f:b1:68:e4:cb:42:7f:7c:32: 5e:79:d4:9a:e7:da:6f:7b:d4:11:cf:56:7b:bb:40: d6:7c:3d:e0:74:22:96:a4:72:ff:cf:d5:2f:23:f6: 4c:4b:94:b8:7c:99:ac:3a:97:5c:d8:c8:1e:8e:ac: b0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.72.0-45.177.74.255 IPv6: 2803:ce60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267921 Signature Algorithm: sha256WithRSAEncryption 02:42:db:21:07:68:67:1b:8b:4b:3c:a2:77:56:b6:7f:de:f7: 80:50:69:d5:1d:e3:50:c8:e3:26:37:bf:a9:b7:c8:ec:ff:bf: 34:3a:0a:33:f4:b4:f2:43:3c:b5:49:35:0b:e6:19:1f:90:d1: c4:f3:d5:80:10:fd:09:40:31:84:29:3a:1a:d7:0a:45:ab:3e: a9:12:0d:20:53:09:f9:7f:8a:dd:c4:12:f3:8c:3e:90:4f:1d: 94:42:8d:ed:95:9a:d4:96:2a:3b:62:8d:6f:fb:c0:c6:19:ce: 28:02:e6:e5:2a:83:0b:cc:0c:10:49:57:1f:95:67:f3:8c:04: 96:6c:00:b2:5e:51:cb:15:d4:e8:6f:38:61:4e:36:e2:bf:e4: b5:4c:27:2f:89:90:57:9f:cd:85:03:5a:6c:aa:3e:64:86:d8: a8:58:ed:17:b8:2e:43:a6:04:60:c8:0d:ae:34:01:1c:7d:81: de:00:61:ba:57:28:4b:a1:43:e3:96:41:2b:90:dd:27:0e:92: 37:62:56:64:7a:65:c0:1d:a3:fd:13:a8:be:cc:f0:76:4e:26: 4c:1a:79:5f:33:8a:df:7e:f8:93:28:fd:34:36:8c:16:9c:3d: a8:78:9c:05:4b:66:f3:de:71:d2:77:a4:69:38:a7:53:f6:a5: 5d:1a:41:84 -----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgIUVhP/PJZ9KRcf5UJeg1eE6VBE5gAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNzQzMDhaFw0yNjAyMDQwNzQ4MDhaMDMxMTAvBgNV BAMTKEQ5MzFGRTQ0MjIyNDQyQkJERUREOEQ3Q0E0MkZEQUNGMUFCNzhBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1L1TS04SPxQnevW6oW5Cd5WL gTDOteEJX6JChRBas8PnjE18rmifabAoZjADd7IeswvaZmvEodVY7X//hipZv/p4 Y7o4pyFni5ru6rzA891Dttmxfx7WWD9vX6yQDZrQsDNDfUEfeGJdXE9Fe/Vr5VIG ryFZJJwSzs7g0Rbr79raOEH8eQSm7qWa26jKf+epRjDBO93ktBeF0zEC2d3N1N98 fL+t4Sju38V49PWKNbm6PVGSJgjzzM6NdO87aQ9S/0A0PJF0zT+xaOTLQn98Ml55 1Jrn2m971BHPVnu7QNZ8PeB0Ipakcv/P1S8j9kxLlLh8maw6l1zYyB6OrLC3AgMB AAGjggO3MIIDszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZMf5EIiRCu97d jXykL9rPGreKlDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUQyMjA4QUMzMjk4RjhCRjFFRUI1RTlD NDE0MEYzNEVGRTM0NkM1Q0M2M0NCNjc4QjQ5RkEzRjc2Q0Q4MEJBNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RDIyMDhBQzMyOThGOEJGMUVFQjVFOUM0MTQwRjM0RUZFMzQ2QzVDQzYz Q0I2NzhCNDlGQTNGNzZDRDgwQkE0LzAvRDkzMUZFNDQyMjI0NDJCQkRFREQ4RDdD QTQyRkRBQ0YxQUI3OEE5NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAMtsUgDBAAt sUowDQQCAAIwBwMFACgDzmAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBaRMA0G CSqGSIb3DQEBCwUAA4IBAQACQtshB2hnG4tLPKJ3VrZ/3veAUGnVHeNQyOMmN7+p t8js/780Ogoz9LTyQzy1STUL5hkfkNHE89WAEP0JQDGEKToa1wpFqz6pEg0gUwn5 f4rdxBLzjD6QTx2UQo3tlZrUlio7Yo1v+8DGGc4oAublKoMLzAwQSVcflWfzjASW bACyXlHLFdTobzhhTjbiv+S1TCcviZBXn82FA1psqj5khtioWO0XuC5DpgRgyA2u NAEcfYHeAGG6VyhLoUPjlkErkN0nDpI3YlZkemXAHaP9E6i+zPB2TiZMGnlfM4rf fviTKP00NowWnD2oeJwFS2bz3nHSd6RpOKdT9qVdGkGE -----END CERTIFICATE-----Generated at Mon Apr 14 16:16:58 2025 by rpki-client