$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer File: DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer (raw, json) Hash identifier: yM92N63peve2A3YItibwwN/ciY5Cru2RzaHHLBj+oKs= Subject key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 44A1A25128D42FEC0B6EC128281B9D685BD035DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:25 +0000 Certificate not after: Tue 03 Feb 2026 18:59:25 +0000 Subordinate resources: AS: 27960 IP: 179.60.96.0/20 IP: 190.122.32.0/19 IP: 200.49.120.0/21 IP: 2803:d080::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a1:a2:51:28:d4:2f:ec:0b:6e:c1:28:28:1b:9d:68:5b:d0:35:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:25 2025 GMT Not After : Feb 3 18:59:25 2026 GMT Subject: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:35:07:b7:9f:c0:8c:f0:22:6d:04:65:ab: 0c:6a:af:1b:d6:04:36:ca:81:4a:5e:bc:ba:6d:aa: 26:1d:c7:26:50:6e:d2:ff:36:8c:42:b6:a7:6e:6c: 52:f1:26:99:3a:a4:24:3c:32:80:d8:26:b3:64:98: ac:1f:07:30:40:35:6b:6f:0c:84:3b:60:d4:fd:ef: 6b:63:9d:9a:e4:dc:f7:e3:c5:fb:db:e9:6a:20:2d: 76:7d:87:86:2c:34:a9:b7:e7:e5:67:e4:40:ac:21: ae:5e:35:d3:da:b0:45:e9:73:a5:95:1c:23:52:3e: 21:a6:12:75:42:a7:b8:ba:08:68:80:56:60:3a:75: 82:5e:82:a8:8e:23:e4:4d:cd:73:bd:53:6e:20:ae: 39:7a:d4:4e:0c:97:fd:6b:8b:6a:20:24:93:e8:6b: e7:f0:23:40:f3:cc:84:63:53:23:53:4d:8c:33:7f: 5d:79:d6:cf:d1:8c:8a:6c:bf:aa:8f:e6:1c:e1:3c: 43:c9:5d:67:d7:2f:86:e4:a5:c8:80:34:6b:cc:82: f8:3c:e3:fd:f7:59:2e:0e:42:6c:e9:04:94:07:af: f6:27:29:e0:e1:cc:6f:af:ff:47:db:c8:13:16:6d: 31:40:6d:9c:9c:ae:c4:24:7c:cb:5c:d6:56:f4:22: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.60.96.0/20 190.122.32.0/19 200.49.120.0/21 IPv6: 2803:d080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27960 Signature Algorithm: sha256WithRSAEncryption ba:9b:0b:cb:20:4c:e0:7d:38:f3:c2:c2:0c:bf:3f:8d:8a:ef: 7a:5f:f1:4b:5b:41:07:8b:d2:3a:88:04:5e:b2:df:3d:fb:66: 16:33:86:f5:78:ac:50:2d:8f:c4:d4:48:56:6f:43:e6:7b:a1: 6e:5b:85:b2:e6:2b:94:04:bc:da:bb:1e:fa:cc:6c:d4:1e:3e: 1a:f6:48:62:d2:ee:ea:e2:b2:3b:f7:01:ec:c4:6e:e4:2e:b0: d9:06:f4:37:ff:ee:42:51:95:b3:3a:e9:6d:f4:bd:0d:fb:9b: 02:d6:ff:17:70:7e:ce:da:82:dc:f1:82:ef:72:e1:50:17:94: 77:ed:6e:48:ab:03:52:b2:7c:ad:ed:92:62:bf:f2:e5:d6:5d: 7f:25:18:a6:9b:35:79:75:90:1a:95:fc:9b:2d:72:93:81:b4: dd:23:95:58:45:e4:b9:89:fe:b4:2e:b1:8d:ec:9a:0b:b0:16: b0:db:11:b5:af:af:c3:3d:f4:64:24:c2:c3:65:0b:bc:7a:c7: 74:a4:18:3f:85:39:c4:f9:46:7d:94:df:b0:40:8a:26:b3:92: 1e:22:7b:5a:90:97:87:c2:87:88:6d:38:e9:1c:fc:10:d8:aa: b9:26:d5:26:65:00:be:20:fb:22:6e:39:5c:c2:7d:d0:28:54: 16:19:8a:bb -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIURKGiUSjUL+wLbsEoKBudaFvQNdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MjVaFw0yNjAyMDMxODU5MjVaMDMxMTAvBgNV BAMTKERCOUZBNzdGN0U1RTVFMjhDQzU5NUJDRjJGMEU0OEUwQTQ2MzM2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYajUHt5/AjPAibQRlqwxqrxvW BDbKgUpevLptqiYdxyZQbtL/NoxCtqdubFLxJpk6pCQ8MoDYJrNkmKwfBzBANWtv DIQ7YNT972tjnZrk3Pfjxfvb6WogLXZ9h4YsNKm35+Vn5ECsIa5eNdPasEXpc6WV HCNSPiGmEnVCp7i6CGiAVmA6dYJegqiOI+RNzXO9U24grjl61E4Ml/1ri2ogJJPo a+fwI0DzzIRjUyNTTYwzf1151s/RjIpsv6qP5hzhPEPJXWfXL4bkpciANGvMgvg8 4/33WS4OQmzpBJQHr/YnKeDhzG+v/0fbyBMWbTFAbZycrsQkfMtc1lb0IkJBAgMB AAGjggO6MIIDtjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbn6d/fl5eKMxZ W88vDkjgpGM2ZjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUNBQjE1NzY1MDU4NkZEMkMzRjk2RjE2 RDUwMjZDMUYwOERBN0MwOUM0MTFCOTQ0NjFGOEU4QUE4OTI5MkUyMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQ0FCMTU3NjUwNTg2RkQyQzNGOTZGMTZENTAyNkMxRjA4REE3QzA5QzQx MUI5NDQ2MUY4RThBQTg5MjkyRTIxLzAvREI5RkE3N0Y3RTVFNUUyOENDNTk1QkNG MkYwRTQ4RTBBNDYzMzY2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEszxgAwQFvnog AwQDyDF4MA0EAgACMAcDBQAoA9CAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm04 MA0GCSqGSIb3DQEBCwUAA4IBAQC6mwvLIEzgfTjzwsIMvz+Niu96X/FLW0EHi9I6 iARest89+2YWM4b1eKxQLY/E1EhWb0Pme6FuW4Wy5iuUBLzaux76zGzUHj4a9khi 0u7q4rI79wHsxG7kLrDZBvQ3/+5CUZWzOult9L0N+5sC1v8XcH7O2oLc8YLvcuFQ F5R37W5IqwNSsnyt7ZJiv/Ll1l1/JRimmzV5dZAalfybLXKTgbTdI5VYReS5if60 LrGN7JoLsBaw2xG1r6/DPfRkJMLDZQu8esd0pBg/hTnE+UZ9lN+wQIoms5IeInta kJeHwoeIbTjpHPwQ2Kq5JtUmZQC+IPsibjlcwn3QKFQWGYq7 -----END CERTIFICATE-----Generated at Mon Apr 7 01:22:58 2025 by rpki-client