$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer File: EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer (raw, json) Hash identifier: T4d3tciFnFwtG+OzowTJA493FpoFxUg3b95HQ9sV7ns= Subject key identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 481931EB0B19114EAEB47AFE9AE269DF4816D591 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 08:04:28 +0000 Certificate not after: Wed 04 Feb 2026 08:09:28 +0000 Subordinate resources: AS: 273129 IP: 45.7.240.0/22 IP: 2803:23c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:19:31:eb:0b:19:11:4e:ae:b4:7a:fe:9a:e2:69:df:48:16:d5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 08:04:28 2025 GMT Not After : Feb 4 08:09:28 2026 GMT Subject: CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:26:a2:e4:5c:e3:f8:33:c7:0d:fc:f3:95: 42:30:a2:db:f7:48:23:90:8c:d1:20:fa:a2:a2:db: 76:94:c0:0c:34:d7:7e:29:e6:c0:0a:d3:55:a3:35: b5:67:e5:35:f6:d8:a2:05:1f:04:42:ed:18:d8:4b: 17:cd:57:fd:ff:f7:8f:9f:15:48:21:46:ec:ea:2c: 77:74:cd:c1:b2:60:50:d0:4f:69:c6:b1:ae:45:a8: d3:1d:d7:2c:6d:ad:c9:04:2e:7d:d9:7a:87:43:47: c4:35:78:8c:d1:cb:80:79:02:ac:6c:5f:60:cd:a2: 58:a3:52:1e:5b:d0:de:6d:a8:64:85:fe:d9:ae:33: 78:88:d5:2e:f3:af:23:f6:62:20:05:74:51:b1:f8: da:54:55:e6:02:b6:2d:1c:07:e8:1c:ba:37:a4:28: f0:d4:4d:17:af:79:c0:74:c6:b3:bb:43:2b:80:b1: 82:db:d8:72:e2:61:6c:5d:ce:14:dd:d6:e3:95:cd: 0e:88:97:0e:c9:07:a9:9c:47:43:d4:51:6c:d4:20: 01:b4:f3:18:2d:c8:6e:81:6f:c9:44:04:04:76:d7: 67:e0:32:71:6b:7c:81:fb:25:4a:9a:7f:38:31:53: ce:42:7d:7f:3d:5a:07:85:a6:3c:1d:9b:4a:82:ef: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.240.0/22 IPv6: 2803:23c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273129 Signature Algorithm: sha256WithRSAEncryption 66:c4:a4:ef:3f:c7:69:52:5c:55:6c:f4:db:30:d0:da:ec:04: 16:91:3c:51:43:c3:50:ef:8a:46:f8:da:af:f2:f7:ed:82:2e: 4d:a2:d2:73:14:29:ca:a8:24:e0:5c:e4:ae:ce:f7:1f:39:8b: 76:dc:74:45:73:12:60:04:8f:22:38:2b:7a:39:c6:0e:32:fb: f8:c0:29:84:a3:88:e6:a4:8f:cc:00:94:a1:2f:19:7d:17:34: 04:34:40:d0:21:2c:c6:02:42:68:02:b7:8c:2b:fc:45:71:71: de:b1:6f:11:27:de:9f:ba:d3:ef:10:5b:0a:d7:1b:bb:07:7e: 83:f2:e5:a6:f1:98:67:65:0c:f3:92:75:0e:bb:ba:df:6f:25: 19:91:32:ee:80:b3:a7:d8:52:b6:a4:ca:7a:53:e6:86:f9:0d: b9:f5:dc:78:12:0d:10:59:38:88:5d:15:b0:5a:3d:ea:2e:ea: a2:73:9f:8e:5c:46:91:dd:4b:34:3c:d9:eb:3e:3e:1b:b4:31: f0:33:09:96:5a:57:08:d8:d1:48:bf:61:14:8b:6d:7b:2c:42: fc:c0:93:34:97:bf:8a:af:5e:94:e7:7b:86:b3:ae:25:af:45: f6:8f:3f:96:53:f2:c5:44:0b:a4:0b:38:77:10:7c:34:f1:04: c7:82:ba:f5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSBkx6wsZEU6utHr+muJp30gW1ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwODA0MjhaFw0yNjAyMDQwODA5MjhaMDMxMTAvBgNV BAMTKEVDNTJBN0IwNkMwMEE3OUE2MUNCRjJDNzEyMzJBRjYxRDNEREFGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Lyai5Fzj+DPHDfzzlUIwotv3 SCOQjNEg+qKi23aUwAw0134p5sAK01WjNbVn5TX22KIFHwRC7RjYSxfNV/3/94+f FUghRuzqLHd0zcGyYFDQT2nGsa5FqNMd1yxtrckELn3ZeodDR8Q1eIzRy4B5Aqxs X2DNolijUh5b0N5tqGSF/tmuM3iI1S7zryP2YiAFdFGx+NpUVeYCti0cB+gcujek KPDUTRevecB0xrO7QyuAsYLb2HLiYWxdzhTd1uOVzQ6Ilw7JB6mcR0PUUWzUIAG0 8xgtyG6Bb8lEBAR212fgMnFrfIH7JUqafzgxU85CfX89WgeFpjwdm0qC775zAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsUqewbACnmmHL 8scSMq9h092vUjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkU1M0I1RjgwMTdFNkU0NzI5NDM1NUQ5 MENDQkEwQzIyNEExNTY0NkREOTcwMTdGOEZFMEJCQUJENzZFMUFCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82RTUzQjVGODAxN0U2RTQ3Mjk0MzU1RDkwQ0NCQTBDMjI0QTE1NjQ2REQ5 NzAxN0Y4RkUwQkJBQkQ3NkUxQUI5LzAvRUM1MkE3QjA2QzAwQTc5QTYxQ0JGMkM3 MTIzMkFGNjFEM0REQUY1Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQfwMA0EAgAC MAcDBQAoAyPAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQq6TANBgkqhkiG9w0B AQsFAAOCAQEAZsSk7z/HaVJcVWz02zDQ2uwEFpE8UUPDUO+KRvjar/L37YIuTaLS cxQpyqgk4Fzkrs73HzmLdtx0RXMSYASPIjgrejnGDjL7+MAphKOI5qSPzACUoS8Z fRc0BDRA0CEsxgJCaAK3jCv8RXFx3rFvESfen7rT7xBbCtcbuwd+g/LlpvGYZ2UM 85J1Dru6328lGZEy7oCzp9hStqTKelPmhvkNufXceBINEFk4iF0VsFo96i7qonOf jlxGkd1LNDzZ6z4+G7Qx8DMJllpXCNjRSL9hFItteyxC/MCTNJe/iq9elOd7hrOu Ja9F9o8/llPyxUQLpAs4dxB8NPEEx4K69Q== -----END CERTIFICATE-----Generated at Sun Apr 6 12:27:17 2025 by rpki-client