$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer File: DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer (raw, json) Hash identifier: W8SDn7TUYS1RemmzSy8CK6RZQUBrTRciiD/aeOfEWPQ= Subject key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 15CAEC5B5E7AA84ED0618A76BDDCD0789F151B6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:02:27 +0000 Certificate not after: Wed 04 Feb 2026 04:07:27 +0000 Subordinate resources: AS: 273127 IP: 2803:2450::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ca:ec:5b:5e:7a:a8:4e:d0:61:8a:76:bd:dc:d0:78:9f:15:1b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:02:27 2025 GMT Not After : Feb 4 04:07:27 2026 GMT Subject: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:c8:4b:3f:ef:e9:7c:34:ac:7e:74:e6:93: b9:9e:0e:02:35:18:3f:f5:8d:33:9a:d5:bc:b5:69: 06:d0:e1:f8:ba:a3:f1:49:b7:db:81:96:f8:2d:7b: b3:48:2d:d0:26:48:bb:f0:da:71:4e:9f:b9:16:0a: 10:29:1c:f9:97:03:77:6d:d9:58:85:3d:d8:48:33: ee:05:eb:71:28:f7:06:60:80:d1:3a:fa:83:a6:ae: 66:be:05:b6:d5:c0:59:3b:2b:48:a8:0b:2b:f6:03: fb:43:c6:52:06:1d:cc:cd:70:02:83:4a:44:d4:55: 21:9d:f0:2a:58:3b:c8:ac:c7:83:48:0e:c2:b3:9f: bb:56:70:13:cd:17:c4:08:ac:ba:9d:45:90:b1:fa: e9:42:46:79:8e:f7:5f:d5:93:8e:3d:70:13:37:c3: db:a2:5d:68:0c:46:6e:21:80:ff:3d:43:80:15:a9: ed:f2:1c:52:de:f6:fc:06:9e:c3:4f:9a:e0:89:5e: 53:54:b6:4f:ef:e6:60:d5:e7:c0:b1:46:f7:60:86: 2f:4d:07:86:ff:b0:00:88:e4:c5:60:0f:df:28:53: bb:06:bf:75:09:ca:5c:83:e8:1e:10:a2:58:b4:65: e8:b9:46:a5:1d:0e:ea:91:63:3a:c4:32:83:47:bf: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273127 Signature Algorithm: sha256WithRSAEncryption 3c:48:75:d8:e0:ea:fe:7f:35:19:93:ca:2d:4a:31:03:95:c9: 6b:79:85:f8:53:c5:2b:f8:c5:64:f0:cf:7a:ba:05:d9:c0:b9: 31:54:b2:74:3c:c6:99:a8:89:50:c2:9d:b0:7a:e1:76:d2:40: ef:d3:46:69:df:f2:8a:cd:1e:28:3f:f2:19:b9:83:ab:2a:b5: 30:12:c9:1a:97:d5:f1:a6:24:d7:ae:80:6c:ec:1e:91:fc:a7: 88:dd:c5:fe:94:01:2c:aa:a9:05:05:9d:3c:c8:26:ec:a5:e4: 52:46:57:31:af:28:de:81:90:1c:91:6e:5b:c6:17:fc:d7:72: ed:ba:c8:51:e5:72:3a:ac:b8:75:fc:ec:94:30:bb:36:9e:3f: 28:60:8a:cc:72:af:0d:62:ce:3b:32:f2:2b:0e:17:c1:8b:b0: 92:bf:6d:9e:eb:0c:4a:e5:cf:db:4f:05:76:97:6e:62:90:48: 36:3b:70:ec:31:6a:65:a1:fb:8d:39:d9:03:9e:55:fe:6b:82: e9:00:6e:cb:44:1b:91:0d:49:d2:8e:73:75:ef:39:8f:b4:30: 28:4d:a8:4e:28:94:44:ee:e9:cd:35:98:4e:2f:bc:6e:90:6a: d6:72:9f:e0:49:3b:62:84:e9:e9:7d:33:cc:97:6f:df:02:7c: d3:dc:df:45 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUFcrsW156qE7QYYp2vdzQeJ8VG2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDAyMjdaFw0yNjAyMDQwNDA3MjdaMDMxMTAvBgNV BAMTKERFQUMxRTRDRTVFMUJDODA2ODQxODk5OTdFNDYyRUM3NDk5OUJGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcishLP+/pfDSsfnTmk7meDgI1 GD/1jTOa1by1aQbQ4fi6o/FJt9uBlvgte7NILdAmSLvw2nFOn7kWChApHPmXA3dt 2ViFPdhIM+4F63Eo9wZggNE6+oOmrma+BbbVwFk7K0ioCyv2A/tDxlIGHczNcAKD SkTUVSGd8CpYO8isx4NIDsKzn7tWcBPNF8QIrLqdRZCx+ulCRnmO91/Vk449cBM3 w9uiXWgMRm4hgP89Q4AVqe3yHFLe9vwGnsNPmuCJXlNUtk/v5mDV58CxRvdghi9N B4b/sACI5MVgD98oU7sGv3UJylyD6B4Qoli0Zei5RqUdDuqRYzrEMoNHv1rtAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTerB5M5eG8gGhB iZl+Ri7HSZm/WDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTQxQ0U2OTFCMDg3NjBBMDY0MUUyMjBC OEUwM0E1Nzg3RjU3QzM0RTg4RjI4Q0FBOThDMTFBM0E3RkE2NDc0Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNDFDRTY5MUIwODc2MEEwNjQxRTIyMEI4RTAzQTU3ODdGNTdDMzRFODhG MjhDQUE5OEMxMUEzQTdGQTY0NzQ3LzAvREVBQzFFNENFNUUxQkM4MDY4NDE4OTk5 N0U0NjJFQzc0OTk5QkY1OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMkUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKucwDQYJKoZIhvcNAQELBQADggEBADxIddjg 6v5/NRmTyi1KMQOVyWt5hfhTxSv4xWTwz3q6BdnAuTFUsnQ8xpmoiVDCnbB64XbS QO/TRmnf8orNHig/8hm5g6sqtTASyRqX1fGmJNeugGzsHpH8p4jdxf6UASyqqQUF nTzIJuyl5FJGVzGvKN6BkByRblvGF/zXcu26yFHlcjqsuHX87JQwuzaePyhgisxy rw1izjsy8isOF8GLsJK/bZ7rDErlz9tPBXaXbmKQSDY7cOwxamWh+4052QOeVf5r gukAbstEG5ENSdKOc3XvOY+0MChNqE4olETu6c01mE4vvG6QatZyn+BJO2KE6el9 M8yXb98CfNPc30U= -----END CERTIFICATE-----Generated at Sun Apr 6 18:43:30 2025 by rpki-client