$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer File: 0DFF2DC79EE538393460BA53D01DC71916150D41.cer (raw, json) Hash identifier: kUdNJrMBhPEYYrJ4ztYiv4b+jMO2cbXTtmVPnAjjy88= Subject key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 77B0A1F76C7F22C90E31307111434CFFE3623C10 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 06 Jun 2025 17:53:43 +0000 Certificate not after: Fri 05 Jun 2026 17:58:43 +0000 Subordinate resources: AS: 273068 IP: 2803:b790::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b0:a1:f7:6c:7f:22:c9:0e:31:30:71:11:43:4c:ff:e3:62:3c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 6 17:53:43 2025 GMT Not After : Jun 5 17:58:43 2026 GMT Subject: CN=0DFF2DC79EE538393460BA53D01DC71916150D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:94:63:51:73:cd:57:02:3d:62:42:a3:51: ab:c2:e3:7a:8c:f8:d3:48:b9:2a:48:6d:40:c9:0a: b9:3c:68:26:4b:99:38:c5:cd:17:3c:f1:4c:7f:76: 47:fe:94:d4:a7:d3:12:aa:69:78:aa:55:1b:21:ff: c8:1f:d5:fe:0d:14:88:a7:f8:17:f8:50:87:20:32: a7:1f:fe:e5:dd:69:f5:19:13:9b:10:ab:11:35:a1: 42:7a:4d:e5:00:ad:1b:49:f8:f8:6c:15:a2:05:01: 0b:53:cf:f7:83:20:09:76:02:ea:13:83:e4:12:dd: 4c:9d:ab:e1:3b:e3:42:73:94:e8:2f:46:8e:4a:68: 28:85:51:b9:73:d0:b3:21:8e:30:bc:6e:25:24:ff: 35:5e:63:dc:e3:ec:65:72:13:7f:38:bb:f4:a4:ae: ca:54:ed:09:be:8e:28:b5:eb:97:dd:b6:09:82:19: 23:5c:72:04:fd:96:5e:6b:f2:8c:c5:e6:e6:7b:08: a6:61:cd:2f:90:dc:3f:73:a1:f5:83:88:c8:55:37: 32:de:9a:4e:f4:eb:03:70:a4:ee:47:9b:22:0e:44: 3e:a5:a4:f7:56:6e:44:a4:76:d4:b3:90:d7:6a:60: c7:e0:f2:5d:d7:78:77:86:3b:e9:28:58:d3:ba:fc: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273068 Signature Algorithm: sha256WithRSAEncryption c2:f5:59:6d:44:56:a2:fe:92:13:72:7a:0f:3e:6b:b0:75:27: ea:6b:13:b8:13:23:84:2b:26:8f:4c:f5:67:27:b3:c7:f0:10: bd:66:5b:25:2b:4a:66:e7:13:4e:49:15:20:2e:fa:ad:37:96: 0e:9e:6a:22:10:0a:c0:c7:81:f1:55:41:2f:53:e7:da:0f:26: 81:be:9b:46:df:1b:b2:cc:c2:00:cb:93:64:d4:80:0f:13:41: 75:dc:1e:a5:35:25:2d:29:94:12:53:5e:84:e3:dc:58:8f:9a: 50:a6:86:61:01:f8:b3:e8:59:87:a9:bd:58:7a:02:af:d9:fa: 6f:73:4e:fc:99:97:05:41:67:b2:ce:a8:92:98:76:38:b2:b7: 99:3c:51:8c:53:06:c8:17:0f:38:63:23:9c:bb:36:e6:4e:b3: 96:ca:4d:16:c2:17:09:66:63:f4:8e:4c:98:99:8a:ec:b4:0c: 8d:29:3e:6a:a4:b5:6c:d5:46:80:1f:d7:70:99:09:28:65:9e: 03:ec:0a:9f:51:17:e7:02:b8:d9:eb:6e:32:60:cb:0a:32:b8: de:5b:2d:93:b1:53:29:94:ee:74:b2:b1:65:23:69:04:81:fd: be:b1:b2:d8:19:a1:be:2c:cb:a7:56:70:0e:7d:4a:59:57:52: 14:52:45:c6 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUd7Ch92x/IskOMTBxEUNM/+NiPBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA2MDYxNzUzNDNaFw0yNjA2MDUxNzU4NDNaMDMxMTAvBgNV BAMTKDBERkYyREM3OUVFNTM4MzkzNDYwQkE1M0QwMURDNzE5MTYxNTBENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dJRjUXPNVwI9YkKjUavC43qM +NNIuSpIbUDJCrk8aCZLmTjFzRc88Ux/dkf+lNSn0xKqaXiqVRsh/8gf1f4NFIin +Bf4UIcgMqcf/uXdafUZE5sQqxE1oUJ6TeUArRtJ+PhsFaIFAQtTz/eDIAl2AuoT g+QS3Uydq+E740JzlOgvRo5KaCiFUblz0LMhjjC8biUk/zVeY9zj7GVyE384u/Sk rspU7Qm+jii165fdtgmCGSNccgT9ll5r8ozF5uZ7CKZhzS+Q3D9zofWDiMhVNzLe mk706wNwpO5HmyIORD6lpPdWbkSkdtSzkNdqYMfg8l3XeHeGO+koWNO6/K5hAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQN/y3HnuU4OTRg ulPQHccZFhUNQTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTc5OUNDOUUzNTgzRDRFOEU3OTRBMEFC RUVDNTlGOUIxNzJFNjQ4OUNCQ0JGQTJFNjY0OTEzNjJDM0M1OTY0Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNzk5Q0M5RTM1ODNENEU4RTc5NEEwQUJFRUM1OUY5QjE3MkU2NDg5Q0JD QkZBMkU2NjQ5MTM2MkMzQzU5NjRGLzAvMERGRjJEQzc5RUU1MzgzOTM0NjBCQTUz RDAxREM3MTkxNjE1MEQ0MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO3kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKqwwDQYJKoZIhvcNAQELBQADggEBAML1WW1E VqL+khNyeg8+a7B1J+prE7gTI4QrJo9M9Wcns8fwEL1mWyUrSmbnE05JFSAu+q03 lg6eaiIQCsDHgfFVQS9T59oPJoG+m0bfG7LMwgDLk2TUgA8TQXXcHqU1JS0plBJT XoTj3FiPmlCmhmEB+LPoWYepvVh6Aq/Z+m9zTvyZlwVBZ7LOqJKYdjiyt5k8UYxT BsgXDzhjI5y7NuZOs5bKTRbCFwlmY/SOTJiZiuy0DI0pPmqktWzVRoAf13CZCShl ngPsCp9RF+cCuNnrbjJgywoyuN5bLZOxUymU7nSysWUjaQSB/b6xstgZob4sy6dW cA59SllXUhRSRcY= -----END CERTIFICATE-----Generated at Sun Jun 22 09:05:42 2025 by rpki-client