$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer File: F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer (raw, json) Hash identifier: ZvnQ0ZQH3AxFptn+xpurfV/Y1AlJbUp0rZIA0tw2uWk= Subject key identifier: F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 023B5749D6B0A3B9ECD9782047DF4D5FBFB4B69F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 18:17:14 +0000 Certificate not after: Wed 04 Feb 2026 18:22:14 +0000 Subordinate resources: AS: 21765 IP: 192.141.64.0/22 IP: 2801:17:3000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3b:57:49:d6:b0:a3:b9:ec:d9:78:20:47:df:4d:5f:bf:b4:b6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 18:17:14 2025 GMT Not After : Feb 4 18:22:14 2026 GMT Subject: CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:f1:2b:a9:68:d3:20:31:3b:c1:74:74:2e: df:c6:ed:da:52:7f:67:f7:38:12:d7:65:56:ba:73: 28:10:b2:83:8d:cd:48:68:86:f0:f9:18:55:53:fc: 1d:63:27:02:a5:9a:86:3a:df:cc:af:02:07:4a:4a: 88:4f:fd:2a:bc:70:3b:d0:e0:6f:66:86:ed:c5:94: 87:ab:58:72:0a:bd:35:3a:61:73:e0:cf:fd:be:35: 38:28:c5:03:89:eb:e9:8a:7a:16:82:da:de:56:3b: 66:c1:47:ee:bb:d9:4e:e2:f8:cb:5a:3d:f7:fa:48: 77:31:fd:ca:54:db:2a:6e:99:4f:93:df:13:bb:0c: 71:08:8f:38:86:69:7e:bd:f3:95:d8:68:6a:8c:39: 53:67:f1:29:f9:a2:c6:02:60:58:d5:0e:36:84:4e: 0c:e8:80:d7:3b:ab:2a:3e:15:98:d1:a3:43:2c:f8: 43:cf:a7:94:61:bd:c7:54:dd:5e:60:2e:8a:af:a3: 44:90:16:a4:fc:f9:1b:35:2a:ca:89:cd:63:00:d2: 4b:18:07:7a:9b:28:d7:e7:50:36:24:e8:e1:19:10: bd:2f:6f:61:96:37:05:d0:34:2a:48:cd:10:3e:37: 25:ce:f5:9b:08:cd:5e:04:5b:0c:53:a1:fa:60:5c: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.64.0/22 IPv6: 2801:17:3000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21765 Signature Algorithm: sha256WithRSAEncryption 27:0b:3d:22:97:46:64:68:3f:56:07:b6:8c:0a:a7:b7:f7:10: a4:8c:d4:a3:bf:1a:ff:2d:69:c1:43:a9:cd:22:8a:47:09:76: a0:99:a6:6a:fd:06:4a:24:73:40:b2:33:71:d2:bc:7e:1a:77: ae:f7:29:e5:f3:6f:c3:58:81:80:23:6c:38:1a:9f:58:d8:b5: a5:f1:69:7d:63:69:32:28:97:69:3a:c0:ea:bb:a1:8c:10:34: 9e:97:a1:ab:04:00:23:27:ce:76:e8:3a:cb:5b:2c:ca:c7:3b: 24:07:34:c7:18:65:fd:51:7f:56:f3:80:9a:cc:dd:61:3e:f4: 58:bb:79:dd:df:2d:46:58:68:c3:80:20:04:fc:12:7b:df:43: ab:7a:20:1b:42:69:68:2b:c5:ab:ec:73:29:7a:bf:14:4d:ff: e4:2c:d7:8d:23:eb:78:b7:83:fe:3c:9e:62:7e:91:3e:c0:5f: d9:d7:f6:2a:61:21:41:8e:2c:9a:c1:95:31:3f:b8:d2:5a:63: 74:c7:bb:a6:76:f5:e9:d3:14:1e:5a:c5:03:fb:a3:69:40:53: bc:53:4f:69:4f:33:be:ce:9f:f3:23:74:77:a9:63:1b:ec:09: 40:71:4e:1b:01:2e:1a:84:0b:0b:3e:da:5f:67:9c:92:b7:11: c0:70:99:b5 -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUAjtXSdawo7ns2XggR99NX7+0tp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxODE3MTRaFw0yNjAyMDQxODIyMTRaMDMxMTAvBgNV BAMTKEY3NzNGMDBFOTZENTk1OThBQ0JGMEFFNTU0ODVBMkQwRjA5QUMzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNIvErqWjTIDE7wXR0Lt/G7dpS f2f3OBLXZVa6cygQsoONzUhohvD5GFVT/B1jJwKlmoY638yvAgdKSohP/Sq8cDvQ 4G9mhu3FlIerWHIKvTU6YXPgz/2+NTgoxQOJ6+mKehaC2t5WO2bBR+672U7i+Mta Pff6SHcx/cpU2ypumU+T3xO7DHEIjziGaX6985XYaGqMOVNn8Sn5osYCYFjVDjaE TgzogNc7qyo+FZjRo0Ms+EPPp5RhvcdU3V5gLoqvo0SQFqT8+Rs1KsqJzWMA0ksY B3qbKNfnUDYk6OEZEL0vb2GWNwXQNCpIzRA+NyXO9ZsIzV4EWwxTofpgXIExAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3c/AOltWVmKy/ CuVUhaLQ8JrD7jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzhGQzIwQjBBQjRFRjhGMkVFNjMyMUM5 RTM1RUFDNUQ0RDcwN0VGMTc1QzBEQkEwQTU1RkQ3NzlDMzJBQUVGNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DOEZDMjBCMEFCNEVGOEYyRUU2MzIxQzlFMzVFQUM1RDRENzA3RUYxNzVD MERCQTBBNTVGRDc3OUMzMkFBRUY2LzAvRjc3M0YwMEU5NkQ1OTU5OEFDQkYwQUU1 NTQ4NUEyRDBGMDlBQzNFRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwI1AMA8EAgAC MAkDBwAoAQAXMAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVQUwDQYJKoZIhvcN AQELBQADggEBACcLPSKXRmRoP1YHtowKp7f3EKSM1KO/Gv8tacFDqc0iikcJdqCZ pmr9Bkokc0CyM3HSvH4ad673KeXzb8NYgYAjbDgan1jYtaXxaX1jaTIol2k6wOq7 oYwQNJ6XoasEACMnznboOstbLMrHOyQHNMcYZf1Rf1bzgJrM3WE+9Fi7ed3fLUZY aMOAIAT8EnvfQ6t6IBtCaWgrxavscyl6vxRN/+Qs140j63i3g/48nmJ+kT7AX9nX 9iphIUGOLJrBlTE/uNJaY3THu6Z29enTFB5axQP7o2lAU7xTT2lPM77On/MjdHep YxvsCUBxThsBLhqECws+2l9nnJK3EcBwmbU= -----END CERTIFICATE-----Generated at Mon Apr 14 05:29:07 2025 by rpki-client