$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.cer File: E84F144969E820C9D6A078340F2D2DFBB8604F63.cer (raw, json) Hash identifier: Pe9IEvR0D3vTpy6Lu6IvUTWREGUVZuRZv8XKb2o0lpk= Subject key identifier: E8:4F:14:49:69:E8:20:C9:D6:A0:78:34:0F:2D:2D:FB:B8:60:4F:63 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 34C2AAD8C38BD099D1B2DA4F3B689CEB6AC258B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 02:33:59 +0000 Certificate not after: Thu 05 Feb 2026 02:38:59 +0000 Subordinate resources: AS: 266721 IP: 45.229.204.0/22 IP: 2803:2320::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c2:aa:d8:c3:8b:d0:99:d1:b2:da:4f:3b:68:9c:eb:6a:c2:58:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 02:33:59 2025 GMT Not After : Feb 5 02:38:59 2026 GMT Subject: CN=E84F144969E820C9D6A078340F2D2DFBB8604F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:b6:3a:76:9f:da:99:80:e2:9d:07:24:78: fa:d4:3a:54:a4:13:94:6e:8a:e4:af:b2:2b:77:ad: ec:19:a8:6f:72:e7:a7:5d:0e:08:a8:c1:44:ca:9a: 94:d6:38:dd:9f:8f:66:42:f1:40:ed:f8:d1:8d:68: 81:b1:ac:f7:a8:0e:63:db:30:0c:1a:2f:e2:d7:1c: 98:6d:50:26:da:5b:e2:33:a6:f6:ae:b5:a5:41:46: 1e:22:41:b3:1f:af:50:e4:8a:61:f1:53:34:82:88: 16:7f:03:a9:93:6c:c6:db:84:4b:96:27:a5:d5:08: 7d:58:a9:52:df:f0:f5:4c:70:66:e2:f8:1f:f3:73: 53:b5:95:da:66:c3:ae:60:af:52:67:93:24:86:68: b1:03:d9:91:57:ff:5d:35:72:30:07:9b:40:1a:09: 54:1d:09:c7:84:0e:a1:68:b0:aa:02:23:c9:cf:86: 02:6a:3a:a4:07:15:45:ac:dc:72:32:3b:9b:37:9d: de:8b:be:df:50:60:54:70:12:67:e6:f3:0b:a1:c4: 21:89:62:ac:47:ed:8b:71:38:67:0e:30:e3:1a:35: 3e:36:64:4c:3d:f4:8e:5b:e9:e4:79:2f:c8:67:62: 20:03:5a:63:cc:de:4f:a5:6d:ad:cb:75:81:1d:99: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:4F:14:49:69:E8:20:C9:D6:A0:78:34:0F:2D:2D:FB:B8:60:4F:63 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.204.0/22 IPv6: 2803:2320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266721 Signature Algorithm: sha256WithRSAEncryption 9b:15:c5:68:5b:fe:d2:38:9d:46:79:9b:0a:94:d3:8d:d6:78: e0:89:de:99:b7:fa:33:7e:37:c7:07:78:42:44:db:86:a9:aa: 8a:ce:1f:b2:92:b2:00:c6:b2:ee:70:7d:f6:63:c6:60:bd:d4: 55:99:45:d7:e4:b4:e2:0b:f7:a2:52:1d:43:c8:76:2a:70:3a: 1a:19:c7:ca:c7:7c:da:05:c7:c2:5a:5a:48:de:78:3a:b9:0e: e7:ed:02:4f:25:d0:c6:ba:7a:3c:5b:89:72:1c:3f:6c:5d:f9: 70:58:99:d1:f4:10:60:0e:85:4e:0e:e2:ce:be:49:27:f5:f1: 6a:e3:39:e0:4a:6a:59:e5:1d:d9:ea:04:fb:95:c6:f6:57:22: fc:a0:0e:d0:7f:40:18:b9:85:fb:b8:62:c6:8c:01:8b:ec:13: 0f:fa:f9:14:97:6a:8b:b2:60:ad:fa:d5:f7:6f:e8:af:09:6f: bc:e3:a0:1d:0d:ee:5c:1e:1d:bd:86:23:51:2b:3f:34:a3:75: 3e:9b:7b:77:e3:76:b7:b5:91:9c:e5:f0:6a:5a:eb:4a:a3:d1: 26:e0:08:27:45:e2:3b:f0:25:bf:f8:97:4b:27:77:5b:1f:21: 07:a9:97:1f:09:de:4f:ea:37:c8:c9:cf:07:1d:62:bb:fc:fa: 4a:d4:9d:6a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNMKq2MOL0JnRstpPO2ic62rCWLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMjMzNTlaFw0yNjAyMDUwMjM4NTlaMDMxMTAvBgNV BAMTKEU4NEYxNDQ5NjlFODIwQzlENkEwNzgzNDBGMkQyREZCQjg2MDRGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZErY6dp/amYDinQckePrUOlSk E5RuiuSvsit3rewZqG9y56ddDgiowUTKmpTWON2fj2ZC8UDt+NGNaIGxrPeoDmPb MAwaL+LXHJhtUCbaW+IzpvautaVBRh4iQbMfr1DkimHxUzSCiBZ/A6mTbMbbhEuW J6XVCH1YqVLf8PVMcGbi+B/zc1O1ldpmw65gr1JnkySGaLED2ZFX/101cjAHm0Aa CVQdCceEDqFosKoCI8nPhgJqOqQHFUWs3HIyO5s3nd6Lvt9QYFRwEmfm8wuhxCGJ YqxH7YtxOGcOMOMaNT42ZEw99I5b6eR5L8hnYiADWmPM3k+lba3LdYEdmTcrAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToTxRJaeggydag eDQPLS37uGBPYzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0JEOTY0MDFERTRENzE4ODg1NkRENDk2 NEYwMkE5NEJDNjkzQzg2MzM1MkMyQzE4NkY2MjM3RjkxMjY4NzE1RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQkQ5NjQwMURFNEQ3MTg4ODU2REQ0OTY0RjAyQTk0QkM2OTNDODYzMzUy QzJDMTg2RjYyMzdGOTEyNjg3MTVFLzAvRTg0RjE0NDk2OUU4MjBDOUQ2QTA3ODM0 MEYyRDJERkJCODYwNEY2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeXMMA0EAgAC MAcDBQAoAyMgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQR4TANBgkqhkiG9w0B AQsFAAOCAQEAmxXFaFv+0jidRnmbCpTTjdZ44Inembf6M343xwd4QkTbhqmqis4f spKyAMay7nB99mPGYL3UVZlF1+S04gv3olIdQ8h2KnA6GhnHysd82gXHwlpaSN54 OrkO5+0CTyXQxrp6PFuJchw/bF35cFiZ0fQQYA6FTg7izr5JJ/XxauM54EpqWeUd 2eoE+5XG9lci/KAO0H9AGLmF+7hixowBi+wTD/r5FJdqi7JgrfrV92/orwlvvOOg HQ3uXB4dvYYjUSs/NKN1Ppt7d+N2t7WRnOXwalrrSqPRJuAIJ0XiO/Alv/iXSyd3 Wx8hB6mXHwneT+o3yMnPBx1iu/z6StSdag== -----END CERTIFICATE-----Generated at Sun Apr 6 09:19:08 2025 by rpki-client