$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.cer File: EB6F7C65D0D0E90316E9740CDF465857E2002AA0.cer (raw, json) Hash identifier: 3umuldglGVHK4fxEvSI/npot6c4v00mkfeyizg53lzs= Subject key identifier: EB:6F:7C:65:D0:D0:E9:03:16:E9:74:0C:DF:46:58:57:E2:00:2A:A0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5A87299B2DA08ED9D78D10B2FF527089FFDB9E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 21:32:54 +0000 Certificate not after: Wed 04 Feb 2026 21:37:54 +0000 Subordinate resources: AS: 266867 IP: 164.163.160.0/22 IP: 2803:fc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:87:29:9b:2d:a0:8e:d9:d7:8d:10:b2:ff:52:70:89:ff:db:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 21:32:54 2025 GMT Not After : Feb 4 21:37:54 2026 GMT Subject: CN=EB6F7C65D0D0E90316E9740CDF465857E2002AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:5b:f3:1e:36:38:79:e6:38:f3:eb:4d:14: 55:d2:ad:f5:9d:48:68:78:cf:45:c5:a9:0c:53:2e: 14:e9:bb:10:e8:8d:aa:90:fc:7a:ae:f3:e7:fe:49: 41:ff:d0:df:0f:28:52:b9:68:3e:b7:e5:af:84:2c: bd:ed:96:7b:3e:a4:1e:a2:1a:0a:57:65:2d:57:cd: 03:f8:64:df:b9:b1:fa:f7:7d:46:41:f7:18:7d:3c: e7:e8:f6:63:33:59:86:21:17:b6:15:5a:ee:3d:87: e7:ff:a3:60:c3:a1:70:1a:a7:48:ab:60:a1:92:6d: af:8a:43:65:10:b9:80:07:9a:3b:1d:1a:7d:4e:88: 0b:d1:e8:22:6a:01:72:a7:dd:18:82:93:82:d0:98: 59:a2:5a:37:5f:d8:89:af:7d:f2:b7:8e:49:77:81: 97:94:30:a5:c7:b9:b6:62:8d:f5:29:27:c2:2c:0b: 05:0a:6e:74:1b:7a:08:70:4a:30:23:2a:da:a9:8e: ed:d9:a1:47:d1:d0:57:49:7d:17:1f:89:68:42:2c: f6:8c:a0:c4:ce:dd:23:72:25:4a:44:f2:ca:a5:8f: 5c:3e:a2:3d:ea:1d:da:8e:38:a5:00:f7:20:eb:c4: 9c:44:68:2a:bc:57:56:b8:f7:68:c3:68:91:8b:f9: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:6F:7C:65:D0:D0:E9:03:16:E9:74:0C:DF:46:58:57:E2:00:2A:A0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.160.0/22 IPv6: 2803:fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266867 Signature Algorithm: sha256WithRSAEncryption 92:88:54:2e:cf:c6:ef:98:50:c1:9d:4d:98:a4:60:3f:7c:05: 1f:c9:d1:39:f2:33:e6:f8:be:34:6f:c1:15:d0:64:ff:07:28: a9:fc:3d:8c:c5:79:a9:6c:6c:8f:d1:96:b7:e3:f9:39:9f:f1: 64:c2:e2:05:18:f5:b4:8b:5b:7b:d7:9f:59:3a:9c:8b:a6:f5: 18:94:26:99:c0:0c:38:5f:18:33:55:a1:70:11:fc:02:d6:fe: f4:e0:96:25:ae:6e:78:72:d3:4b:fb:37:31:d5:0b:08:d7:8c: 62:0f:94:9e:a8:91:28:f7:c5:db:99:12:55:c8:72:b5:f7:23: 4c:26:d8:bf:2f:53:2d:02:ff:87:f3:bf:25:4d:e4:7d:19:24: 34:6b:78:ca:de:d0:87:5d:2a:53:d0:96:ec:e6:76:78:bf:4c: 19:3d:09:cc:25:63:5e:1b:05:65:df:e7:c7:92:88:b8:32:2a: 93:fd:3e:68:6d:a7:9d:cc:ea:ce:e4:27:0f:bb:68:28:01:18: f7:88:ff:5d:f9:1f:42:a7:a1:29:83:62:30:be:77:aa:86:c5: 90:d2:67:70:84:91:10:8e:3f:cb:d3:ef:83:cd:4b:76:c4:72: 92:29:f1:3e:7e:0a:59:ad:4a:88:03:56:2f:e5:77:e0:ff:c4: e1:e9:8f:a9 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgITWocpmy2gjtnXjRCy/1Jwif/bnjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI1MDIwNTIxMzI1NFoXDTI2MDIwNDIxMzc1NFowMzExMC8GA1UE AxMoRUI2RjdDNjVEMEQwRTkwMzE2RTk3NDBDREY0NjU4NTdFMjAwMkFBMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQkW/MeNjh55jjz600UVdKt9Z1I aHjPRcWpDFMuFOm7EOiNqpD8eq7z5/5JQf/Q3w8oUrloPrflr4Qsve2Wez6kHqIa CldlLVfNA/hk37mx+vd9RkH3GH085+j2YzNZhiEXthVa7j2H5/+jYMOhcBqnSKtg oZJtr4pDZRC5gAeaOx0afU6IC9HoImoBcqfdGIKTgtCYWaJaN1/Yia998reOSXeB l5Qwpce5tmKN9SknwiwLBQpudBt6CHBKMCMq2qmO7dmhR9HQV0l9Fx+JaEIs9oyg xM7dI3IlSkTyyqWPXD6iPeod2o44pQD3IOvEnERoKrxXVrj3aMNokYv5Sv0CAwEA AaOCA68wggOrMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFOtvfGXQ0OkDFul0 DN9GWFfiACqgMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy81OTdGN0FBMjMyRjIxOTE5QjU4MDE2Njky OTU0MjY1RTQyQzU5RkZFNTE0RTY1NzM0Q0U2OUFGNjQxRThFODI3LzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzU5N0Y3QUEyMzJGMjE5MTlCNTgwMTY2OTI5NTQyNjVFNDJDNTlGRkU1MTRF NjU3MzRDRTY5QUY2NDFFOEU4MjcvMC9FQjZGN0M2NUQwRDBFOTAzMTZFOTc0MENE RjQ2NTg1N0UyMDAyQUEwLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKko6AwDQQCAAIw BwMFACgDD8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBJzMA0GCSqGSIb3DQEB CwUAA4IBAQCSiFQuz8bvmFDBnU2YpGA/fAUfydE58jPm+L40b8EV0GT/Byip/D2M xXmpbGyP0Za34/k5n/FkwuIFGPW0i1t7159ZOpyLpvUYlCaZwAw4XxgzVaFwEfwC 1v704JYlrm54ctNL+zcx1QsI14xiD5SeqJEo98XbmRJVyHK19yNMJti/L1MtAv+H 878lTeR9GSQ0a3jK3tCHXSpT0Jbs5nZ4v0wZPQnMJWNeGwVl3+fHkoi4MiqT/T5o baedzOrO5CcPu2goARj3iP9d+R9Cp6Epg2IwvneqhsWQ0mdwhJEQjj/L0++DzUt2 xHKSKfE+fgpZrUqIA1Yv5Xfg/8Th6Y+p -----END CERTIFICATE-----Generated at Sun Apr 6 03:57:42 2025 by rpki-client