$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer File: EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer (raw, json) Hash identifier: tgJGbzJg1YdQkoRcKY1yK7YPiVuFl/WaEZ0pwMJp0HM= Subject key identifier: EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 692780127AAFF950EEE830FF37A00EDFE51EED50 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:53:06 +0000 Certificate not after: Wed 04 Feb 2026 05:58:06 +0000 Subordinate resources: IP: 45.173.228.0/22 IP: 2803:5c60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:27:80:12:7a:af:f9:50:ee:e8:30:ff:37:a0:0e:df:e5:1e:ed:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:53:06 2025 GMT Not After : Feb 4 05:58:06 2026 GMT Subject: CN=EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:7d:e3:a9:2a:b0:9d:20:49:d1:19:07:cb: 63:d0:ea:b1:05:a1:f3:70:11:85:31:7d:5c:f3:5f: d6:08:3f:0f:94:5d:71:df:a3:a8:07:30:6c:5e:00: 8e:25:a7:06:92:19:d0:c0:11:16:23:13:b7:1b:23: dd:f8:0f:f2:23:54:bb:88:08:2f:0c:54:5c:0d:c9: c9:06:54:ed:64:6a:9f:59:d2:de:70:6b:41:05:42: c7:22:af:88:c2:d5:a1:47:4d:e4:e8:2a:e6:d3:2e: df:51:86:a8:8a:7c:7d:54:a5:78:03:0a:51:3e:f1: 10:6c:56:bd:df:ed:0e:2f:94:4a:32:6a:63:1c:9d: 68:7a:70:38:c8:02:38:d4:47:e9:81:fd:99:7a:75: 31:65:a0:85:82:e9:ce:f3:13:1b:2e:a9:71:fd:48: 3f:8f:0a:a6:f1:11:8b:48:35:61:77:a4:4c:cf:e2: da:af:14:67:a1:23:ab:28:fd:47:50:d9:33:33:ce: cf:0b:75:e0:91:f3:c7:95:d7:88:90:8e:f9:67:99: 28:86:b9:d8:d7:66:6d:77:ae:55:37:64:95:59:d1: e9:19:49:f4:4d:50:4a:53:29:f3:01:64:a1:c4:4a: 63:b9:b0:17:0d:cd:98:a3:95:b2:4f:98:2a:78:54: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.228.0/22 IPv6: 2803:5c60::/32 Signature Algorithm: sha256WithRSAEncryption e6:5c:db:45:9e:c5:3c:2f:9f:5d:d5:8d:4c:2e:3f:87:da:c5: 0c:dd:4d:3b:c4:4a:b0:2a:c0:b8:ee:10:dc:3e:d1:8a:5e:01: 07:8c:87:8a:9c:5e:9b:bb:c9:b6:2c:72:39:1e:80:bc:9d:83: 52:d5:ca:6d:c9:9d:b4:75:89:40:44:08:20:1b:83:df:fb:6d: 49:1f:59:c5:63:f6:e6:1c:86:e3:ad:41:95:22:32:66:ed:41: 63:79:56:57:c7:28:cf:86:e9:80:6b:ba:63:89:19:d0:f2:56: f6:26:6f:ef:c8:d0:12:b2:01:71:bd:f2:99:36:96:7b:05:b4: 8a:fb:b0:75:31:53:33:17:bd:c8:d5:9e:ca:a3:08:48:24:8c: 66:73:ca:8a:c2:d0:0e:26:d0:05:db:d8:eb:15:dd:4e:4a:df: f7:d1:32:bf:3e:d1:d3:43:68:07:bd:ee:b9:74:cc:a1:bc:0e: f1:a0:d9:a1:30:67:75:1d:f4:17:96:e6:21:94:24:17:fd:ff: 68:f7:2f:4b:97:f1:c3:ad:42:4b:55:eb:ba:90:90:9b:8b:d4: 94:ac:d8:5c:b0:fd:2c:b9:5a:0f:63:33:89:5c:f8:47:f6:31: 77:b5:a1:4c:56:26:4a:ac:06:f7:ea:90:1a:d6:ce:3c:22:94: 26:c1:91:3d -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUaSeAEnqv+VDu6DD/N6AO3+Ue7VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTUzMDZaFw0yNjAyMDQwNTU4MDZaMDMxMTAvBgNV BAMTKEVCNDhBNkM5NzkxREVGMTIyOTBGQ0JGREM2M0U5QzhBQzJDMkVBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtCH3jqSqwnSBJ0RkHy2PQ6rEF ofNwEYUxfVzzX9YIPw+UXXHfo6gHMGxeAI4lpwaSGdDAERYjE7cbI934D/IjVLuI CC8MVFwNyckGVO1kap9Z0t5wa0EFQscir4jC1aFHTeToKubTLt9RhqiKfH1UpXgD ClE+8RBsVr3f7Q4vlEoyamMcnWh6cDjIAjjUR+mB/Zl6dTFloIWC6c7zExsuqXH9 SD+PCqbxEYtINWF3pEzP4tqvFGehI6so/UdQ2TMzzs8LdeCR88eV14iQjvlnmSiG udjXZm13rlU3ZJVZ0ekZSfRNUEpTKfMBZKHESmO5sBcNzZijlbJPmCp4VPYDAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrSKbJeR3vEikP y/3GPpyKwsLq7TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkJEREREQ0MyNkRCRDlEMEVGNUMyODc0 NzI3NUNEODAxQzk2Mzc5QTVEMEE5Qjc1OERGNDAxOUNEODhGODM4MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQkRERERDQzI2REJEOUQwRUY1QzI4NzQ3Mjc1Q0Q4MDFDOTYzNzlBNUQw QTlCNzU4REY0MDE5Q0Q4OEY4MzgwLzAvRUI0OEE2Qzk3OTFERUYxMjI5MEZDQkZE QzYzRTlDOEFDMkMyRUFFRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa3kMA0EAgAC MAcDBQAoA1xgMA0GCSqGSIb3DQEBCwUAA4IBAQDmXNtFnsU8L59d1Y1MLj+H2sUM 3U07xEqwKsC47hDcPtGKXgEHjIeKnF6bu8m2LHI5HoC8nYNS1cptyZ20dYlARAgg G4Pf+21JH1nFY/bmHIbjrUGVIjJm7UFjeVZXxyjPhumAa7pjiRnQ8lb2Jm/vyNAS sgFxvfKZNpZ7BbSK+7B1MVMzF73I1Z7KowhIJIxmc8qKwtAOJtAF29jrFd1OSt/3 0TK/PtHTQ2gHve65dMyhvA7xoNmhMGd1HfQXluYhlCQX/f9o9y9Ll/HDrUJLVeu6 kJCbi9SUrNhcsP0suVoPYzOJXPhH9jF3taFMViZKrAb36pAa1s48IpQmwZE9 -----END CERTIFICATE-----Generated at Sat Apr 5 23:49:45 2025 by rpki-client