$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer File: FFA82F2543024DC455E9D4141D3E8161CA368E8D.cer (raw, json) Hash identifier: 7ofIMub+VKxqKsgUKnsQrQuXi1icZKYdXsabXRwXbf0= Subject key identifier: FF:A8:2F:25:43:02:4D:C4:55:E9:D4:14:1D:3E:81:61:CA:36:8E:8D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 49FC483C6289F37FCDD44E97D03E2AF57773A5DA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 05 Apr 2025 13:27:38 +0000 Certificate not after: Sat 04 Apr 2026 13:32:38 +0000 Subordinate resources: AS: 273160 IP: 2803:a250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fc:48:3c:62:89:f3:7f:cd:d4:4e:97:d0:3e:2a:f5:77:73:a5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 5 13:27:38 2025 GMT Not After : Apr 4 13:32:38 2026 GMT Subject: CN=FFA82F2543024DC455E9D4141D3E8161CA368E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:63:3a:f7:83:58:07:a9:2a:c2:8c:55:6f: ef:10:e2:14:8c:0c:8c:48:cd:7a:8e:5d:67:8e:4b: 05:ad:44:ea:08:00:ba:75:6a:eb:72:4f:e9:6e:75: 9e:b9:19:a7:ba:a8:d1:45:75:08:e7:b1:a6:b0:94: c5:52:9d:78:5a:49:80:b4:82:58:20:79:16:ae:2f: a9:4f:21:db:8f:45:06:11:f9:70:29:ff:0e:37:f3: e8:26:7e:3f:ff:bc:5e:81:13:46:5e:8e:9e:39:76: 24:bc:ee:19:86:15:3e:63:57:39:0c:54:a8:29:96: 88:9a:03:41:4d:ed:fd:e7:d1:d2:85:d2:63:54:2e: 47:cd:eb:3d:91:62:49:1d:5f:f2:5e:54:c1:a2:e7: 9c:d2:94:e1:29:c7:6c:e2:65:1f:4f:e4:47:e5:79: 3d:51:aa:f5:df:85:60:8a:16:35:03:66:9a:28:7d: 2c:e6:30:5f:78:29:0c:7d:aa:17:12:5c:71:cd:59: e6:a6:09:91:f4:85:f2:3f:e4:01:53:7c:91:2c:fc: fe:ac:4b:61:79:5b:8a:6a:ef:47:c7:e3:84:2b:e2: 8a:03:b4:8f:62:4e:03:d7:06:f0:b5:5a:af:8b:58: 7a:b0:85:dc:9a:ff:49:c3:3b:b8:a5:91:66:f7:94: aa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:A8:2F:25:43:02:4D:C4:55:E9:D4:14:1D:3E:81:61:CA:36:8E:8D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5D9475218C055E54C7BDC73719B860C07EB52691798E407811C3735181EEE3DC/0/FFA82F2543024DC455E9D4141D3E8161CA368E8D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:a250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273160 Signature Algorithm: sha256WithRSAEncryption 80:54:71:54:bc:2e:a4:d7:54:52:0c:ff:02:b2:2e:ce:98:a8: ea:f6:9d:f6:1c:97:a3:08:e7:f4:37:89:ac:d6:c7:8b:68:08: 6a:4a:27:39:78:be:7b:ab:2e:69:1d:d5:f4:89:43:36:9e:df: 19:76:de:ed:fc:52:d4:fb:2f:b2:3b:e7:bc:2f:43:f2:f4:1b: db:47:e4:c5:70:a7:8d:39:a9:97:8a:c3:24:f9:80:6b:9f:41: 2b:79:d3:49:72:d3:85:dd:55:e3:29:33:20:2b:c7:7f:b9:b6: 72:a0:f7:f6:2a:aa:5e:0c:12:26:cb:44:17:a3:0d:e7:53:b1: 2e:2e:c0:54:10:5b:6a:1c:5e:82:cf:13:9e:4d:e2:fc:5c:a3: a2:91:df:cd:1e:5d:e4:e8:d9:e5:04:30:65:fc:6d:5e:75:e3: 21:32:51:5f:7a:5e:67:d0:c1:cb:cf:7a:72:69:05:cb:03:e6: 3a:de:b0:42:86:f8:b9:b2:f1:e4:e4:ae:dd:cd:ea:4e:0d:8c: 08:f9:75:b7:8f:fb:1a:b8:db:ce:d2:21:5a:28:bd:eb:5a:b4: 74:15:62:dd:1e:92:cd:f4:63:a1:d6:b4:7c:11:e4:76:ae:6d: 56:43:2a:34:ec:1d:5a:bf:d2:eb:f9:f7:d8:42:74:88:80:91: c5:bf:62:dc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUSfxIPGKJ83/N1E6X0D4q9XdzpdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA0MDUxMzI3MzhaFw0yNjA0MDQxMzMyMzhaMDMxMTAvBgNV BAMTKEZGQTgyRjI1NDMwMjREQzQ1NUU5RDQxNDFEM0U4MTYxQ0EzNjhFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AmM694NYB6kqwoxVb+8Q4hSM DIxIzXqOXWeOSwWtROoIALp1autyT+ludZ65Gae6qNFFdQjnsaawlMVSnXhaSYC0 glggeRauL6lPIduPRQYR+XAp/w438+gmfj//vF6BE0Zejp45diS87hmGFT5jVzkM VKgploiaA0FN7f3n0dKF0mNULkfN6z2RYkkdX/JeVMGi55zSlOEpx2ziZR9P5Efl eT1RqvXfhWCKFjUDZpoofSzmMF94KQx9qhcSXHHNWeamCZH0hfI/5AFTfJEs/P6s S2F5W4pq70fH44Qr4ooDtI9iTgPXBvC1Wq+LWHqwhdya/0nDO7ilkWb3lKrtAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/qC8lQwJNxFXp 1BQdPoFhyjaOjTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUQ5NDc1MjE4QzA1NUU1NEM3QkRDNzM3 MTlCODYwQzA3RUI1MjY5MTc5OEU0MDc4MTFDMzczNTE4MUVFRTNEQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RDk0NzUyMThDMDU1RTU0QzdCREM3MzcxOUI4NjBDMDdFQjUyNjkxNzk4 RTQwNzgxMUMzNzM1MTgxRUVFM0RDLzAvRkZBODJGMjU0MzAyNERDNDU1RTlENDE0 MUQzRTgxNjFDQTM2OEU4RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOiUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKwgwDQYJKoZIhvcNAQELBQADggEBAIBUcVS8 LqTXVFIM/wKyLs6YqOr2nfYcl6MI5/Q3iazWx4toCGpKJzl4vnurLmkd1fSJQzae 3xl23u38UtT7L7I757wvQ/L0G9tH5MVwp405qZeKwyT5gGufQSt500ly04XdVeMp MyArx3+5tnKg9/Yqql4MEibLRBejDedTsS4uwFQQW2ocXoLPE55N4vxco6KR380e XeTo2eUEMGX8bV514yEyUV96XmfQwcvPenJpBcsD5jresEKG+Lmy8eTkrt3N6k4N jAj5dbeP+xq4287SIVoovetatHQVYt0eks30Y6HWtHwR5HaubVZDKjTsHVq/0uv5 99hCdIiAkcW/Ytw= -----END CERTIFICATE-----Generated at Sat Apr 12 09:49:39 2025 by rpki-client