$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer File: E4680E7DB5E2661029DADF95F18EDCCD3A194B02.cer (raw, json) Hash identifier: xzNAzOI1Lt6hqQXa2b39/gXQXHDawhE5+vtXSSb6lA4= Subject key identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 071A239D337C2FD3A3DC8FA937E5D3C7BE173A49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:12:41 +0000 Certificate not after: Wed 04 Feb 2026 04:17:41 +0000 Subordinate resources: AS: 271889 IP: 190.9.124.0/23 IP: 2803:210::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1a:23:9d:33:7c:2f:d3:a3:dc:8f:a9:37:e5:d3:c7:be:17:3a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:12:41 2025 GMT Not After : Feb 4 04:17:41 2026 GMT Subject: CN=E4680E7DB5E2661029DADF95F18EDCCD3A194B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:e8:54:77:b0:c9:e7:57:c5:16:09:fa:2c: 3c:d0:ab:ca:31:4b:4b:0d:da:27:e8:7f:88:4c:69: 41:3b:1e:4b:55:2f:8c:ff:75:40:d4:64:13:83:f2: 4d:62:5b:f7:14:1b:64:db:d4:b3:40:2c:ef:08:30: 50:57:11:3a:dc:5f:d3:50:dd:1b:e1:75:44:c3:bb: 88:f0:ac:10:6f:66:87:7e:a0:b8:6d:6b:18:64:40: 85:fb:bc:4b:d7:9d:ef:de:ed:6b:38:e4:40:f4:30: b7:f9:cb:11:4c:3f:7a:be:10:63:e8:ea:12:11:eb: 2a:ef:34:7c:5b:dc:54:f0:18:61:84:3f:30:c7:80: a0:94:1f:5f:cb:c7:b2:d4:c7:df:6b:36:b2:44:0a: 88:5b:72:76:87:67:be:37:f2:73:e4:f5:49:ab:92: 92:e3:b8:09:c8:6f:db:18:a5:a9:8a:b5:1b:0d:b9: 9e:74:e6:54:87:17:b0:d8:ad:06:e8:64:64:b2:55: 97:40:a6:62:43:91:48:dc:a8:c7:8c:0c:0e:d4:8c: b2:5e:d8:69:f9:e1:67:88:ab:1b:32:e0:47:29:e7: 14:9c:de:bf:fa:6d:7a:f7:a3:21:7b:78:23:0a:5f: 3c:81:04:a6:7f:c5:dd:c7:bf:33:7d:ff:69:84:11: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:68:0E:7D:B5:E2:66:10:29:DA:DF:95:F1:8E:DC:CD:3A:19:4B:02 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB9848E9893725A7D22E0CBCE9B9EDCA70AC5F5B2DE28C64352B5D7BDCD4696/0/E4680E7DB5E2661029DADF95F18EDCCD3A194B02.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.124.0/23 IPv6: 2803:210::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271889 Signature Algorithm: sha256WithRSAEncryption 9f:1f:bd:0f:12:73:46:b9:dc:18:f5:73:d6:53:35:02:2a:6b: 00:36:68:77:cd:42:4d:95:49:36:97:fd:64:5f:2b:2d:bc:c2: 22:ea:a1:71:b6:3c:5b:45:08:e9:06:83:ca:e6:b8:09:3a:58: b9:ce:41:a9:e9:c8:b5:7b:4e:6d:c5:bb:97:81:c7:12:3b:36: 9b:95:79:87:6b:49:ee:83:3c:05:d0:b2:a0:41:91:2a:64:31: 06:c0:d9:c8:b8:a7:da:f9:4f:aa:94:e4:01:f3:15:4d:cd:3d: 53:39:2e:fb:7b:ae:7f:01:72:62:1e:3b:ba:12:54:88:93:2d: 03:21:36:1c:c5:27:82:01:ef:c5:e9:78:e4:32:7a:93:f5:c1: 4a:6e:08:2d:31:37:de:4d:22:f7:d6:65:9e:d6:9f:7a:7f:76: be:90:4a:f9:5d:cb:d7:97:bb:32:60:40:7d:0c:d8:12:d4:23: 42:64:67:35:dc:6d:ec:94:a6:42:ca:68:d1:2e:2c:e5:4c:4a: 58:94:d2:62:cd:de:77:b3:93:d1:8e:a5:08:c4:46:ea:08:b6: 8b:e0:f7:8d:df:fb:27:bc:32:51:09:aa:54:a2:9d:a2:4c:d0: 61:ca:e1:39:05:8d:c3:e7:4e:6a:61:26:e3:f7:81:3a:cc:6b: b4:1d:ec:e6 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUBxojnTN8L9Oj3I+pN+XTx74XOkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDEyNDFaFw0yNjAyMDQwNDE3NDFaMDMxMTAvBgNV BAMTKEU0NjgwRTdEQjVFMjY2MTAyOURBREY5NUYxOEVEQ0NEM0ExOTRCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZOhUd7DJ51fFFgn6LDzQq8ox S0sN2ifof4hMaUE7HktVL4z/dUDUZBOD8k1iW/cUG2Tb1LNALO8IMFBXETrcX9NQ 3RvhdUTDu4jwrBBvZod+oLhtaxhkQIX7vEvXne/e7Ws45ED0MLf5yxFMP3q+EGPo 6hIR6yrvNHxb3FTwGGGEPzDHgKCUH1/Lx7LUx99rNrJECohbcnaHZ7438nPk9Umr kpLjuAnIb9sYpamKtRsNuZ505lSHF7DYrQboZGSyVZdApmJDkUjcqMeMDA7UjLJe 2Gn54WeIqxsy4Ecp5xSc3r/6bXr3oyF7eCMKXzyBBKZ/xd3HvzN9/2mEEW5VAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkaA59teJmECna 35XxjtzNOhlLAjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUNCOTg0OEU5ODkzNzI1QTdEMjJFMENC Q0U5QjlFRENBNzBBQzVGNUIyREUyOEM2NDM1MkI1RDdCRENENDY5Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81Q0I5ODQ4RTk4OTM3MjVBN0QyMkUwQ0JDRTlCOUVEQ0E3MEFDNUY1QjJE RTI4QzY0MzUyQjVEN0JEQ0Q0Njk2LzAvRTQ2ODBFN0RCNUUyNjYxMDI5REFERjk1 RjE4RURDQ0QzQTE5NEIwMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvgl8MA0EAgAC MAcDBQAoAwIQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmETANBgkqhkiG9w0B AQsFAAOCAQEAnx+9DxJzRrncGPVz1lM1AiprADZod81CTZVJNpf9ZF8rLbzCIuqh cbY8W0UI6QaDyua4CTpYuc5BqenItXtObcW7l4HHEjs2m5V5h2tJ7oM8BdCyoEGR KmQxBsDZyLin2vlPqpTkAfMVTc09Uzku+3uufwFyYh47uhJUiJMtAyE2HMUnggHv xel45DJ6k/XBSm4ILTE33k0i99Zlntafen92vpBK+V3L15e7MmBAfQzYEtQjQmRn Ndxt7JSmQspo0S4s5UxKWJTSYs3ed7OT0Y6lCMRG6gi2i+D3jd/7J7wyUQmqVKKd okzQYcrhOQWNw+dOamEm4/eBOsxrtB3s5g== -----END CERTIFICATE-----Generated at Mon Apr 14 00:28:14 2025 by rpki-client