$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27F8EF2828CEB5B65F65287F92E566557B19FDD.cer File: F27F8EF2828CEB5B65F65287F92E566557B19FDD.cer (raw, json) Hash identifier: M8XrX7aPdE9YclK72PR4r8+6F58ruXXaR10Wf3n4fwY= Subject key identifier: F2:7F:8E:F2:82:8C:EB:5B:65:F6:52:87:F9:2E:56:65:57:B1:9F:DD Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 32A151E1706E8E604B97F4A7168E8D24D563D253 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E7233B99D080B49C63C492372ADAEF642843A12A0D69CB14039AF943523A9088/0/F27F8EF2828CEB5B65F65287F92E566557B19FDD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E7233B99D080B49C63C492372ADAEF642843A12A0D69CB14039AF943523A9088/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 13:21:35 +0000 Certificate not after: Wed 04 Feb 2026 13:26:35 +0000 Subordinate resources: AS: 64138 IP: 181.233.36.0/22 IP: 2803:cd10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a1:51:e1:70:6e:8e:60:4b:97:f4:a7:16:8e:8d:24:d5:63:d2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 13:21:35 2025 GMT Not After : Feb 4 13:26:35 2026 GMT Subject: CN=F27F8EF2828CEB5B65F65287F92E566557B19FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:6e:45:10:39:19:73:51:f5:75:c9:af:27: 68:b5:72:85:10:b6:62:40:7c:03:39:b8:9b:e2:48: f8:c7:89:bb:49:d8:69:6d:bd:53:c8:78:23:28:ee: 95:05:07:ba:cc:a6:6d:9d:49:18:8b:43:6e:3c:a4: 7b:be:53:9e:c7:40:09:77:c9:b2:a0:e8:16:59:0f: 31:4a:c7:fa:29:bc:b3:04:77:59:83:ae:47:b4:84: 40:cc:b4:c9:f4:b3:71:45:f5:ea:b6:42:79:89:74: 2b:5c:de:39:4e:1d:8f:21:d4:2a:dd:a4:0f:87:ba: a5:57:29:1d:ae:7d:96:af:44:fc:d9:be:10:8e:7c: 5e:13:70:cf:dc:8d:a0:2c:11:d9:41:bb:31:1f:24: ac:60:e6:1a:74:4d:60:3b:e0:0a:3c:5f:c6:77:5b: 3d:fe:a6:a5:ed:0e:66:6e:4a:69:04:a2:2e:5c:65: d0:11:40:69:bb:23:1e:ab:e3:d5:b3:02:eb:a9:ff: 73:0c:bd:f7:c9:04:db:d8:67:b4:61:38:f1:d9:14: 16:84:ff:4a:15:80:fd:e3:d6:3e:47:3d:95:5a:2f: bf:72:56:2d:a7:9a:64:15:54:16:ea:e9:f9:6e:07: 2c:36:64:ad:33:5c:de:45:1d:43:d1:14:02:15:9f: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:7F:8E:F2:82:8C:EB:5B:65:F6:52:87:F9:2E:56:65:57:B1:9F:DD X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E7233B99D080B49C63C492372ADAEF642843A12A0D69CB14039AF943523A9088/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E7233B99D080B49C63C492372ADAEF642843A12A0D69CB14039AF943523A9088/0/F27F8EF2828CEB5B65F65287F92E566557B19FDD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.233.36.0/22 IPv6: 2803:cd10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64138 Signature Algorithm: sha256WithRSAEncryption 52:40:8b:11:5b:6a:16:04:63:d3:04:e5:ca:f7:8e:86:be:24: f1:46:c1:b5:e6:a9:c6:ca:5a:dc:8f:25:06:46:d0:4c:4e:e6: 17:74:42:f9:48:e0:04:e7:88:b3:2f:51:67:34:85:f2:b9:ef: e1:5d:d5:fa:4a:77:6b:9e:f0:9d:84:56:02:29:a4:62:d0:42: eb:d4:b5:2e:df:d4:af:12:3a:2e:15:ca:6b:98:cc:fc:7a:4c: b4:b0:ea:57:27:12:d6:fa:1a:04:81:82:b3:c5:d9:fd:95:52: 45:ae:04:4a:25:a8:8f:35:27:ed:dd:11:07:39:c5:a2:a6:0c: 79:84:5c:a6:86:48:d9:4e:59:d3:75:c1:bb:dc:51:42:6b:45: cf:45:36:a2:a5:d4:47:ed:28:87:aa:b6:6c:05:80:0f:b4:dc: 44:12:04:59:92:66:eb:61:51:51:04:42:e5:ed:db:64:29:80: d9:77:31:64:47:c0:c3:d7:2e:67:9e:59:60:95:3e:8b:3f:36: 5a:aa:25:45:76:f0:75:1e:76:b2:6f:9c:d1:5d:ab:43:af:d8: 37:67:ae:98:56:b0:31:44:4b:55:cb:c8:bb:13:3e:22:dd:ad: 0a:f0:60:e5:68:13:f0:52:9c:45:90:2f:e2:76:bc:69:9f:16: 99:d9:7b:15 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUMqFR4XBujmBLl/SnFo6NJNVj0lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMzIxMzVaFw0yNjAyMDQxMzI2MzVaMDMxMTAvBgNV BAMTKEYyN0Y4RUYyODI4Q0VCNUI2NUY2NTI4N0Y5MkU1NjY1NTdCMTlGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUm5FEDkZc1H1dcmvJ2i1coUQ tmJAfAM5uJviSPjHibtJ2GltvVPIeCMo7pUFB7rMpm2dSRiLQ248pHu+U57HQAl3 ybKg6BZZDzFKx/opvLMEd1mDrke0hEDMtMn0s3FF9eq2QnmJdCtc3jlOHY8h1Crd pA+HuqVXKR2ufZavRPzZvhCOfF4TcM/cjaAsEdlBuzEfJKxg5hp0TWA74Ao8X8Z3 Wz3+pqXtDmZuSmkEoi5cZdARQGm7Ix6r49WzAuup/3MMvffJBNvYZ7RhOPHZFBaE /0oVgP3j1j5HPZVaL79yVi2nmmQVVBbq6fluByw2ZK0zXN5FHUPRFAIVn5f3AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyf47ygozrW2X2 Uof5LlZlV7Gf3TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTcyMzNCOTlEMDgwQjQ5QzYzQzQ5MjM3 MkFEQUVGNjQyODQzQTEyQTBENjlDQjE0MDM5QUY5NDM1MjNBOTA4OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNzIzM0I5OUQwODBCNDlDNjNDNDkyMzcyQURBRUY2NDI4NDNBMTJBMEQ2 OUNCMTQwMzlBRjk0MzUyM0E5MDg4LzAvRjI3RjhFRjI4MjhDRUI1QjY1RjY1Mjg3 RjkyRTU2NjU1N0IxOUZERC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtekkMA0EAgAC MAcDBQAoA80QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD6ijANBgkqhkiG9w0B AQsFAAOCAQEAUkCLEVtqFgRj0wTlyveOhr4k8UbBteapxspa3I8lBkbQTE7mF3RC +UjgBOeIsy9RZzSF8rnv4V3V+kp3a57wnYRWAimkYtBC69S1Lt/UrxI6LhXKa5jM /HpMtLDqVycS1voaBIGCs8XZ/ZVSRa4ESiWojzUn7d0RBznFoqYMeYRcpoZI2U5Z 03XBu9xRQmtFz0U2oqXUR+0oh6q2bAWAD7TcRBIEWZJm62FRUQRC5e3bZCmA2Xcx ZEfAw9cuZ55ZYJU+iz82WqolRXbwdR52sm+c0V2rQ6/YN2eumFawMURLVcvIuxM+ It2tCvBg5WgT8FKcRZAv4na8aZ8Wmdl7FQ== -----END CERTIFICATE-----Generated at Sun Apr 6 08:06:03 2025 by rpki-client