$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer File: ED668E47A9AFBFAC1326AC177BF7091598876359.cer (raw, json) Hash identifier: 1HalI+doTnBfAfPi17CT48l/xeMehaoTdDbWKy46o3M= Subject key identifier: ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 37527C57DA855FA85AC2904232EDE8BDCA9180AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:49:59 +0000 Certificate not after: Thu 05 Feb 2026 00:54:59 +0000 Subordinate resources: AS: 270186 IP: 2806:3f4::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:52:7c:57:da:85:5f:a8:5a:c2:90:42:32:ed:e8:bd:ca:91:80:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:49:59 2025 GMT Not After : Feb 5 00:54:59 2026 GMT Subject: CN=ED668E47A9AFBFAC1326AC177BF7091598876359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:d2:94:fa:e0:12:32:4d:7e:b1:2e:8f:41: c9:e4:db:7c:2e:28:74:c4:32:c6:32:6b:bc:39:e6: 3d:b7:79:12:d5:a1:e1:5a:1b:18:77:44:2b:ea:b1: 1a:c4:52:f8:85:3b:2f:7c:c5:55:df:13:d3:be:1b: c8:76:bd:84:6d:f6:df:7b:36:69:ed:d9:8b:b5:26: 37:e9:b4:65:76:94:59:4a:25:3e:02:29:71:22:2f: 36:be:e0:28:7c:3e:ce:55:68:c4:4e:58:9f:de:d0: 96:88:d4:5f:90:df:40:06:ae:8c:d7:b6:19:f5:86: 10:ec:8c:a4:6d:77:8e:e5:bb:99:4c:56:e0:a4:1f: 1e:ec:9a:9e:15:e1:a7:47:27:e0:3a:74:4e:eb:bf: f8:f2:5d:bf:85:3c:aa:68:af:12:48:8c:d1:69:50: b0:ba:30:60:f2:f6:1f:b5:6b:9a:9c:76:22:ac:d6: f5:78:f6:a5:62:da:2f:72:d6:56:70:fc:39:2f:e8: 77:38:6c:aa:c9:d1:eb:c5:98:96:fb:79:e6:5e:03: 51:ba:a3:1b:f2:94:02:ee:94:4b:93:6b:ba:91:cd: 13:c0:9d:c7:b3:9b:dd:1e:93:db:3c:24:52:95:8c: b9:0f:89:d7:fa:93:35:5b:54:52:65:31:b9:cd:38: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270186 Signature Algorithm: sha256WithRSAEncryption 2a:3b:1c:64:b3:2d:e5:27:ba:b3:38:85:2c:f5:98:16:85:6e: 4f:de:6e:d3:ff:e9:39:ca:a4:b1:45:1e:e7:6b:19:d0:20:11: 64:4a:8b:b2:42:71:e9:2b:cd:70:63:97:6a:88:fe:f7:11:6d: 72:5c:28:0e:15:1e:dd:c9:df:dc:16:9d:c5:54:00:1c:d7:8a: 2d:78:b3:c2:b7:dd:ae:01:75:3c:29:b5:a0:66:a8:bd:6e:fb: 3e:8f:b4:2a:f4:d8:48:12:47:3a:d9:3c:9e:dc:68:9a:be:48: c2:9a:7c:2e:16:65:fb:4c:87:35:0f:9c:20:ed:f1:68:83:1b: e7:a4:21:b6:6b:99:ad:87:dc:fe:de:59:da:49:37:6e:47:06: 87:3a:90:34:61:a5:9d:ef:4a:a8:6f:0b:ed:6a:bb:1d:ab:4e: 5b:38:69:e3:24:9d:22:6e:1b:8d:a5:87:6f:24:c2:93:2c:4c: f5:a7:24:2f:e7:04:66:26:c1:38:98:45:81:72:d9:a9:28:d1: d3:1b:af:d2:8e:cc:47:9c:63:ad:e4:bf:6d:f5:d0:08:06:80: 0f:a4:70:8f:a5:1d:d9:29:36:5c:f6:bb:60:95:19:85:10:f8: 69:38:dc:8e:97:7a:b7:9c:2b:57:97:08:b9:9a:17:56:08:bb: d0:b2:d2:0f -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUN1J8V9qFX6hawpBCMu3ovcqRgKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDQ5NTlaFw0yNjAyMDUwMDU0NTlaMDMxMTAvBgNV BAMTKEVENjY4RTQ3QTlBRkJGQUMxMzI2QUMxNzdCRjcwOTE1OTg4NzYzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqC9KU+uASMk1+sS6PQcnk23wu KHTEMsYya7w55j23eRLVoeFaGxh3RCvqsRrEUviFOy98xVXfE9O+G8h2vYRt9t97 Nmnt2Yu1JjfptGV2lFlKJT4CKXEiLza+4Ch8Ps5VaMROWJ/e0JaI1F+Q30AGrozX thn1hhDsjKRtd47lu5lMVuCkHx7smp4V4adHJ+A6dE7rv/jyXb+FPKporxJIjNFp ULC6MGDy9h+1a5qcdiKs1vV49qVi2i9y1lZw/Dkv6Hc4bKrJ0evFmJb7eeZeA1G6 oxvylALulEuTa7qRzRPAncezm90ek9s8JFKVjLkPidf6kzVbVFJlMbnNOD31AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtZo5Hqa+/rBMm rBd79wkVmIdjWTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDBEMEUyRDlBNzlFOTE1RTdGNkEzMDIx MjMxNEVERUQxNjM4MDE4MDM2MEZENjU2MDVBNjIzNEI3RkE0NEU2RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMEQwRTJEOUE3OUU5MTVFN0Y2QTMwMjEyMzE0RURFRDE2MzgwMTgwMzYw RkQ2NTYwNUE2MjM0QjdGQTQ0RTZELzAvRUQ2NjhFNDdBOUFGQkZBQzEzMjZBQzE3 N0JGNzA5MTU5ODg3NjM1OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD9DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH2owDQYJKoZIhvcNAQELBQADggEBACo7HGSz LeUnurM4hSz1mBaFbk/ebtP/6TnKpLFFHudrGdAgEWRKi7JCcekrzXBjl2qI/vcR bXJcKA4VHt3J39wWncVUABzXii14s8K33a4BdTwptaBmqL1u+z6PtCr02EgSRzrZ PJ7caJq+SMKafC4WZftMhzUPnCDt8WiDG+ekIbZrma2H3P7eWdpJN25HBoc6kDRh pZ3vSqhvC+1qux2rTls4aeMknSJuG42lh28kwpMsTPWnJC/nBGYmwTiYRYFy2ako 0dMbr9KOzEecY63kv2310AgGgA+kcI+lHdkpNlz2u2CVGYUQ+Gk43I6XerecK1eX CLmaF1YIu9Cy0g8= -----END CERTIFICATE-----Generated at Mon Apr 7 01:57:50 2025 by rpki-client