$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.cer File: EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.cer (raw, json) Hash identifier: jRGyAh8zhM5uV3TCoPUAgrqEu1utaiBNepD30S9Sqkg= Subject key identifier: EE:7D:6E:50:21:DE:EB:7C:36:51:87:42:F6:D2:37:F7:50:B6:E9:A6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 39BB164C2AB54A3B780271CE5A4EB54F895881F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 19:45:07 +0000 Certificate not after: Tue 03 Feb 2026 19:50:07 +0000 Subordinate resources: AS: 272886 IP: 2803:7a90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Mar 2025 05:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bb:16:4c:2a:b5:4a:3b:78:02:71:ce:5a:4e:b5:4f:89:58:81:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 19:45:07 2025 GMT Not After : Feb 3 19:50:07 2026 GMT Subject: CN=EE7D6E5021DEEB7C36518742F6D237F750B6E9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:95:a5:2f:57:e4:19:29:df:bd:58:34:72: b2:70:59:4e:18:6a:36:61:86:b2:ad:c6:cd:62:b5: b5:9f:a7:63:32:73:03:e0:f0:4f:43:23:ea:42:49: 29:11:1f:47:b4:ff:c4:c8:48:c1:a4:34:0a:da:8c: 5e:13:6c:1b:51:ca:d1:5e:7a:f6:d2:fb:c5:d5:8e: f2:7d:32:75:0b:c6:08:26:7f:5b:f9:09:79:0b:a7: 7b:db:9f:3f:f5:d3:fd:ab:26:6c:d8:00:35:97:60: 41:7d:69:85:a5:c6:66:89:87:63:7c:d3:c5:83:30: cb:2d:06:f0:6d:48:03:9b:ae:b4:1e:9c:e8:4c:bc: 39:36:59:fd:3f:1f:57:b7:3c:f2:46:2c:bf:00:1f: 64:43:79:21:3c:b8:48:2f:4c:98:5b:84:8c:75:39: b5:68:49:f7:23:18:78:77:a6:13:af:cb:d9:ec:65: 87:d6:70:70:ce:94:a3:fb:cd:25:98:f3:b2:6d:00: 0f:e8:6b:33:8f:16:34:5a:06:cc:08:a1:00:21:2e: 9b:a4:4a:73:6c:5d:43:7a:16:61:b9:40:53:dd:2c: 8e:a0:60:67:08:27:45:d3:9d:53:61:0e:87:b6:3f: 24:92:66:2a:c7:1a:3d:6e:f0:c0:c5:c1:fd:a7:a3: af:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:7D:6E:50:21:DE:EB:7C:36:51:87:42:F6:D2:37:F7:50:B6:E9:A6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7a90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272886 Signature Algorithm: sha256WithRSAEncryption 5c:24:84:24:38:ab:5a:0f:60:db:24:9f:ad:d3:ff:9b:33:e2: 3e:24:e0:1d:9d:6d:c0:4d:1d:ef:08:b8:1c:d5:fe:79:91:b3: 96:cb:b2:1e:65:72:eb:70:e4:7c:f1:aa:8e:ed:fc:3a:13:0c: d6:64:d7:76:c7:77:b7:d1:33:f1:68:bd:bf:ca:a7:e5:f3:e5: 63:ca:17:a2:ed:f5:3a:bd:83:67:f0:a7:cc:3e:39:ea:a5:2d: 6e:e5:11:2c:ec:3e:a9:75:96:e6:e4:7e:19:4c:5e:f2:40:61: 95:43:85:ad:57:4c:1e:a7:e9:a1:76:3a:80:9d:b5:b3:bb:a3: b7:4f:cb:76:81:d8:dd:ab:8c:40:75:65:57:ec:d5:a7:b6:0a: 54:5b:6d:0b:af:22:e6:12:0e:66:8f:fc:32:df:fb:2a:d0:f9: b5:ae:75:75:d8:09:a3:2e:59:57:22:37:45:50:12:57:1c:9c: 3b:a5:ac:75:55:dc:f8:d5:8b:c0:56:4a:cf:c2:a5:88:31:16: 46:52:ed:a1:d3:d6:aa:6b:b4:56:e2:80:bb:6b:c7:91:67:58: 3f:62:d9:2f:c5:c0:34:de:e1:2d:60:83:82:2c:40:a0:40:80: 90:8d:fe:fe:e4:26:a8:3c:cd:a2:48:29:09:8b:71:d6:0b:fc: e3:e4:e9:42 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUObsWTCq1Sjt4AnHOWk61T4lYgfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxOTQ1MDdaFw0yNjAyMDMxOTUwMDdaMDMxMTAvBgNV BAMTKEVFN0Q2RTUwMjFERUVCN0MzNjUxODc0MkY2RDIzN0Y3NTBCNkU5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2JWlL1fkGSnfvVg0crJwWU4Y ajZhhrKtxs1itbWfp2MycwPg8E9DI+pCSSkRH0e0/8TISMGkNArajF4TbBtRytFe evbS+8XVjvJ9MnULxggmf1v5CXkLp3vbnz/10/2rJmzYADWXYEF9aYWlxmaJh2N8 08WDMMstBvBtSAObrrQenOhMvDk2Wf0/H1e3PPJGLL8AH2RDeSE8uEgvTJhbhIx1 ObVoSfcjGHh3phOvy9nsZYfWcHDOlKP7zSWY87JtAA/oazOPFjRaBswIoQAhLpuk SnNsXUN6FmG5QFPdLI6gYGcIJ0XTnVNhDoe2PySSZirHGj1u8MDFwf2no68LAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTufW5QId7rfDZR h0L20jf3ULbppjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzY2REMyNTJBOUUyNEZFNzU3OEQyRjI5 MTg2Mzk0NzVBNTlGQTZCRTg4RUNFOTAxMUFGQTA4MEU1RDk5MEVGNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNjZEQzI1MkE5RTI0RkU3NTc4RDJGMjkxODYzOTQ3NUE1OUZBNkJFODhF Q0U5MDExQUZBMDgwRTVEOTkwRUY0LzAvRUU3RDZFNTAyMURFRUI3QzM2NTE4NzQy RjZEMjM3Rjc1MEI2RTlBNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN6kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKfYwDQYJKoZIhvcNAQELBQADggEBAFwkhCQ4 q1oPYNskn63T/5sz4j4k4B2dbcBNHe8IuBzV/nmRs5bLsh5lcutw5Hzxqo7t/DoT DNZk13bHd7fRM/Fovb/Kp+Xz5WPKF6Lt9Tq9g2fwp8w+OeqlLW7lESzsPql1lubk fhlMXvJAYZVDha1XTB6n6aF2OoCdtbO7o7dPy3aB2N2rjEB1ZVfs1ae2ClRbbQuv IuYSDmaP/DLf+yrQ+bWudXXYCaMuWVciN0VQElccnDulrHVV3PjVi8BWSs/CpYgx FkZS7aHT1qprtFbigLtrx5FnWD9i2S/FwDTe4S1gg4IsQKBAgJCN/v7kJqg8zaJI KQmLcdYL/OPk6UI= -----END CERTIFICATE-----Generated at Fri Mar 14 06:20:24 2025 by rpki-client